This is the full list of the main API endpoints that apps send data to. This is across ~70k android apps and the smallest endpoint has about ~90 apps that send data to it, meaning it’s unlikely to be an app developer’s domain. Then I checked whether these domains were in any of: https://github.com/StevenBlack/hosts, https://easylist.to/easylist/easylist.txt…
Category: Development
Contabo Private Networks are a Pain
I recently started using Contabo VPS’ while working with some friends and at some point we decided we wanted to use local networks. On all other major cloud providers this is free, faster and encouraged to send data over the private local network rather than across the public internet when communicating with two instances. Contabo?…
Uncovering Lesser Known Mobile Adtech Domains
AppGoblin has now run over 40k apps in an emulator, tracking millions of API calls thousands of advertising domains. Unfortunately, some of them are dark, meaning they have no landing page of any kind, and I’m unclear who controls these domains. news-cdn.site marketingcloudapis.com kickoffo.site onegg.site lazybumblebee.com qa-analytics.com acobt.tech yastatic.net Let’s see if we can figure…
AI can’t solve novel problems yet
I saw this hilarious exchange in one of the issues covering Apple’s recent changes that make it impossible to download IPA files. Recreating an iPhone’s authentication to Apple App Store is a bit of a cat and mouse game. Apple recently changed it’s backend, so now dozens of projects are trying to find ways to…
The Trackers and SDKs in ChatGPT, Claude, Grok and Perplexity
Well for a quick weekend recap I’m going to look at which 3rd party SDKs and API calls I can find in the big 4 Android chat apps based. We’ll be using free data from AppGoblin which you can feel free to browse at any of the links below or on tables. Data is collected…
How to self host your own S3 in 2025
Well, multiple disks hovering close to 99%, it’s definitely time to increase storage for OpenAttribution and AppGoblin. I needed cheap S3 hosting, and I had a pretty strong urge to do it myself. Parts This should be up to you, but in the end I ended up grabbing an 8-bay Just-a-Bunch-Of-Disks (JBOD) which is a…
Watching the Watchers: What to track when tracking app trackers?
This week I spent a lot of time automating my collection of data via a MITM with an Android Emulator. This lets me peek at the actual traffic and data leaving the device to try and figure out a few things: Who is the app working with? This is the primary question, to be able…
2025 How to Sniff Android HTTPS Traffic with Waydroid & mitm-proxy
Looking to add traffic analysis to my free mobile app intelligence platform AppGoblin, I needed to get an emulator up and running with a way to track the HTTPs traffic leaving the app. I’ve done this a couple years now, writing down my notes in github.com/ddxv/mobile-network-traffic and it never seems to get any easier 🥲,…
Easiest way to get Tanstack Table v8 working with Svelte 5!
Easy way to get tanstack v8 working with svelte 5 and Skeleton
Which Apps have Mobile Trackers on Your Android Phone?
I recently made an Android App for AppGoblin! This uses the Android permission QUERY_ALL_PACKAGES to give you a list of all apps on your device, and select which ones to request their de-compiled data to see which trackers you likely have on your phone for each app. The data comes from my own database of…