AppXray — One Link In, Full Report Out | Black Orange

Send a Google Play link, get a full reverse-engineering report — architecture, APIs, SDKs, ad networks, permissions. Delivered in 2 hours.

appxray.blackorange.org

I wanted to know what ad networks CamScanner uses and how they monetize a 100M+ download scanning app. So I reverse-engineered the APK.

Here's what I found inside CamScanner v7.16.5 (306 MB, 12 DEX files, 369 activities).

TL;DR

6 ad networks running at the same time

Header bidding + waterfall hybrid — not just AdMob

Facebook Audience Network loaded as a hidden DEX file at runtime

6 staging/test servers exposed in the production build

Hybrid Flutter + Native architecture using Alibaba's FlutterBoost

34 third-party SDKs total

The Ad Stack: 6 Networks Running Simultaneously

Most indie apps use AdMob alone.…