Pithus

Results

jp.pxv.android
01ef31a90de30a994a897981dbde85f09dc61ed62024476b874231462e4fd902
pixiv

Version: 23822

First seen: 2022-06-26T00:11:27.359847

Attribute: domains

app-api-acti-dev.misoshi.ru

Attribute: domains_analysis._name

app-api-acti-dev.misoshi.ru

Threat level: Moderate Risk

com.trovo.streamerapp
4260817442739ca7f64e56b5b8afe196767d5deb52a0122c732903763605386b

HTV 3.7.1

Version: 65

First seen: 2022-06-23T19:12:57.922939

Attribute: domains

api-m.paypal.com
api-m.sandbox.paypal.com

Attribute: domains_analysis._name

api-m.paypal.com
api-m.sandbox.paypal.com

Threat level: Moderate Risk

com.smd.douyin18.app
9c3fa07b0981d47973ae6e17402029bff511095ed2cfc55136ebea8ae439ff25

TikTok18

Version: 120

First seen: 2022-06-22T12:30:53.461309

Attribute: domains

douyin18-276110.firebaseio.com
api.5nxam.xyz

Attribute: domains_analysis._name

douyin18-276110.firebaseio.com
api.5nxam.xyz

Threat level: High Risk

com.google.android.tts
cf98a1acc68e6f7d425d9186209f5526e1fdd70ff517c571da61059f87db0649
Speech Services by Google

Version: 210333543

First seen: 2022-06-22T03:02:57.737503

Attribute: domains

vital-axiom-120111.firebaseio.com

Attribute: domains_analysis._name

vital-axiom-120111.firebaseio.com

Threat level: Moderate Risk

com.app_nora.layout
9ef0591bc9f43927b980b5cf161b0008a7be45b75cc4fa4f77bcd25dd06260a8

NORA

Version: 1007

First seen: 2022-06-19T14:38:14.347970

Attribute: domains

api-project-641133715768.firebaseio.com
api-m.paypal.com
api-ssl.bitly.com
api-m.sandbox.paypal.com

Attribute: domains_analysis._name

api-project-641133715768.firebaseio.com
api-m.paypal.com
api-ssl.bitly.com
api-m.sandbox.paypal.com

Threat level: Moderate Risk

com.sony.songpal.mdr
2c2a476356462ec4cfbdeccb2264fd9ccbb7b5b4e1064f84cce5c677aa204b1d

Headphones

Version: 30200

First seen: 2022-06-19T13:01:34.758841

Attribute: domains

api-deva.meta.csxdev.com

Attribute: domains_analysis._name

api-deva.meta.csxdev.com

Threat level: Moderate Risk

com.mxtech.videoplayer.ad
7881345a05fcf6c90f37bfefe3248c1a622907b66474cba48d44b85f68810371
MX Player

Version: 1310001631

First seen: 2022-06-18T11:57:24.890255

Attribute: domains

api-preprod.amazon.com
api-preprod.amazon.co.uk
api-sandbox.amazon.co.jp
bleu8888.firebaseio.com
api-preprod.amazon.co.jp

Attribute: domains_analysis._name

api-preprod.amazon.com
api-preprod.amazon.co.uk
api-sandbox.amazon.co.jp
bleu8888.firebaseio.com
api-preprod.amazon.co.jp

6/59

com.runtastic.android.results.lite
81cf4a8a2b0793a30c0a5e91d93295a3a68e86a8833e19b140ca6f1cd1692ed1
Training

Version: 2022060811

First seen: 2022-06-16T22:57:05.223787

Attribute: domains

api.3stripes.net

Attribute: domains_analysis._name

api.3stripes.net

Threat level: Moderate Risk

com.github.andreyasadchy.xtra
519e6ab5ec67912fe25a1d9a795c005ac70e1d2117b04ec0c877023abedf4574

Xtra

Version: 105

First seen: 2022-06-15T09:26:48.413500

Attribute: domains

api.7tv.app

Attribute: domains_analysis._name

api.7tv.app

Threat level: Moderate Risk

com.wakie.android
aedd46b9bcab130f868796cbf10b21f6bc79ba35bc7e591e38609dba5953ca3f
Wakie

Version: 262

First seen: 2022-06-14T06:23:03.503379

Attribute: domains

wakie-96696.firebaseio.com

Attribute: domains_analysis._name

wakie-96696.firebaseio.com

Threat level: Moderate Risk

com.grindrapp.android
464e4679664b2d1862d657795e18fc0c0ef302de9bc77a67bf7eaec34b904454
Grindr

Version: 99264

First seen: 2022-06-13T04:34:22.289380

Attribute: domains

api-project-1036042917246.firebaseio.com

Attribute: domains_analysis._name

api-project-1036042917246.firebaseio.com

Threat level: Moderate Risk

com.android.plus.speed
b64e5f7530380737c56af88a8e70bd505da354dae7786e56bf3c7c34e9a590f1

Android Plus

Version: 3

First seen: 2022-06-12T11:58:55.317186

Attribute: domains

api-project-751842291101.firebaseio.com

Attribute: domains_analysis._name

api-project-751842291101.firebaseio.com

Threat level: Moderate Risk

Similar samples:
doujinpaid.skyhi…

com.carxtech.carxdr2
53e207b439f6149962c7b7108b5fc410f1f37e7ea41838e5687df1a1665c1721
CarX Drift Racing 2

Version: 342

First seen: 2022-06-12T06:09:01.118449

Attribute: domains

carx-drift-racing-2-99670949.firebaseio.com

Attribute: domains_analysis._name

carx-drift-racing-2-99670949.firebaseio.com

Threat level: Moderate Risk

com.estrongs.android.pop
1c8bec216248b0f2a41767c67e0dfa73420f70c56105444eb4d1e54797783ee9
ES File Explorer

Version: 10168

First seen: 2022-06-11T10:59:05.996643

Attribute: domains

api-es.doglobal.net
api-en.os.qiku.com
api-feedback.iqiyi.com

Attribute: domains_analysis._name

api-es.doglobal.net
api-en.os.qiku.com
api-feedback.iqiyi.com

Threat level: High Risk

com.doubleTwist.cloudPlayerPro
d1396111d543bd3cff14ac00650f29e7b088e2d7d80afda72b1caf84192390ac
CloudPlayer Platinum

Version: 10177

First seen: 2022-06-09T23:21:48.360457

Attribute: domains

api-project-922192853713.firebaseio.com

Attribute: domains_analysis._name

api-project-922192853713.firebaseio.com

Threat level: Moderate Risk

com.picsart.studio
c43e15cd5063d3d20befd75893fe1a0a040564358cc22d0a90c079105dd88a0e
Picsart

Version: 993819903

First seen: 2022-06-08T17:49:36.253573

Attribute: domains

api-project-1076413845392.firebaseio.com

Attribute: domains_analysis._name

api-project-1076413845392.firebaseio.com

Threat level: Moderate Risk

com.sophos.smsec
98c80b9a02ae236de21b984abbdd838fa19088a4a67c861e791b6bcf199135f6
Sophos Intercept X for Mobile

Version: 3495

First seen: 2022-06-07T23:49:15.300896

Attribute: domains

sophos-mobile-control-eb139.firebaseio.com

Attribute: domains_analysis._name

sophos-mobile-control-eb139.firebaseio.com

Threat level: Moderate Risk

com.kototomumeci.nacipiyi
2cc727c4249235f36bbc5024d5a5cb708c0f6d3659151afc5ae5d42d55212cb5

Bolt Food

Version: 1

First seen: 2022-06-07T08:05:03.496465

Attribute: domains

api-va.tiktokv.com

Attribute: domains_analysis._name

api-va.tiktokv.com

26/60

com.sec.android.inputmethod
160083235b512494ac6e85ec3c2beab0205c2d940d344f55796591d0ba5ad262

Samsung Keyboard

Version: 332333030

First seen: 2022-06-06T18:42:45.106376

Attribute: domains

api-samsung.swypeconnect.com

Attribute: domains_analysis._name

api-samsung.swypeconnect.com

Threat level: Moderate Risk

com.now.moov
c61848dde9ad9322ab241f36a86ba06fa1373b16eeda81687ee7ed9e90e735fa
MOOV

Version: 905

First seen: 2022-06-05T12:51:41.433878

Attribute: domains

moov-995.firebaseio.com

Attribute: domains_analysis._name

moov-995.firebaseio.com

Threat level: Moderate Risk

com.apple.android.music
9a78c79f7f88d884b8f9f452446fb892170c90e1d7881e8246303a6f59a58c06
Apple Music

Version: 901

First seen: 2022-06-05T12:35:02.163084

Attribute: domains

apple-music-8cac2.firebaseio.com

Attribute: domains_analysis._name

apple-music-8cac2.firebaseio.com

Threat level: Moderate Risk

lyr.search.net
df4a8a026c692325cf63fdc2326609cdcf7ce0edb5ffebcebe5671cd21249912

Fildo

Version: 457

First seen: 2022-06-04T20:15:56.252563

Attribute: domains

lyric-522a9.firebaseio.com

Attribute: domains_analysis._name

lyric-522a9.firebaseio.com

Threat level: Moderate Risk

com.app.awqsome.ennowallet
ebb57304a4432179cae975f51b0a905c20bf7090637c81e40057fd89b5bdbf17
Enno Wallet

Version: 230

First seen: 2022-06-04T09:33:40.458738

Attribute: domains

api-testnet.waves.exchange

Attribute: domains_analysis._name

api-testnet.waves.exchange

Threat level: Moderate Risk

org.khanacademy.android
d6c35fcb7c3e8695fea2d1dc0b7b0f405afee0fcf3746eb5a4412d19a2115c20
Khan Academy

Version: 100535

First seen: 2022-06-03T01:11:07.407634

Attribute: domains

khan-academy-a13d4.firebaseio.com

Attribute: domains_analysis._name

khan-academy-a13d4.firebaseio.com

Threat level: Moderate Risk

com.camerasideas.trimmer
f635bfbe03f446cdd5846e93cd6cdd35cbc8a5ed13987b1e399a27d1becd0dde
YouCut - Video Editor

Version: 1142

First seen: 2022-06-02T17:29:17.039090

Attribute: domains

youcut-7d8a3.firebaseio.com

Attribute: domains_analysis._name

youcut-7d8a3.firebaseio.com

Threat level: Moderate Risk

br.com.supersim.androidapp
2c9742206653b479ebf21847d903dc2a146de754d4ded586c3b5c035835b3eb5
SuperSim

Version: 20

First seen: 2022-06-02T15:47:48.045294

Attribute: domains

ssservice-d0f49.firebaseio.com

Attribute: domains_analysis._name

ssservice-d0f49.firebaseio.com

Threat level: Moderate Risk

br.com.supersim.androidapp
25000a528a1928b91868f8db30fecd27526f5ea2e3ba9b50a29b88d0ec109af2
SuperSim

Version: 20

First seen: 2022-06-02T13:46:44.746107

Attribute: domains

ssservice-d0f49.firebaseio.com

Attribute: domains_analysis._name

ssservice-d0f49.firebaseio.com

Threat level: Moderate Risk

quic.ktran.slate
064bb9f0ad0acb773578bfeccc2e7e4ac6865763abd583682126637bc7975513
Quick Translate

Version: 1

First seen: 2022-06-02T12:27:13.208690

Attribute: domains

amm-api-translate.herokuapp.com

Attribute: domains_analysis._name

amm-api-translate.herokuapp.com

Threat level: Moderate Risk

io.oneinch.android
0ef382c6dc62eddbd8fa54704d5d06e5866989a3e36199cb1dfadb89f6668f14
1inch Wallet

Version: 190

First seen: 2022-06-01T21:50:44.260634

Attribute: domains

gas-price-api.1inch.io
api-optimistic.etherscan.io

Attribute: domains_analysis._name

gas-price-api.1inch.io
api-optimistic.etherscan.io

Threat level: Moderate Risk

com.americamovil.claroshop
65c889bda27777bb9c6b7b1b19a45bc225636472b4217728d20bafd6a5b2e70d
Claro shop

Version: 700027

First seen: 2022-06-01T21:04:57.264933

Attribute: domains

api-m.paypal.com
sdk-api-v1.singular.net
api-m.sandbox.paypal.com

Attribute: domains_analysis._name

api-m.paypal.com
sdk-api-v1.singular.net
api-m.sandbox.paypal.com

Threat level: Moderate Risk

com.evoyageurs.invictus.flutter.android
8faef614c66e419ed92c9bfd549005da1c9bd7ea8236553800bc250b373eb628

master

Version: 20

First seen: 2022-06-01T14:54:01.962951

Attribute: domains

api-vabf-sis-idfm.eae.apis.svc.as8677.net

Attribute: domains_analysis._name

api-vabf-sis-idfm.eae.apis.svc.as8677.net

Threat level: Moderate Risk

com.schoology.app
9e79eb1508bf1ae90874f168332f635da62c50e770223b4e7da89ba0e7a22182

Schoology

Version: 600000442

First seen: 2022-06-01T13:52:14.197115

Attribute: domains

api-project-113270738334.firebaseio.com

Attribute: domains_analysis._name

api-project-113270738334.firebaseio.com

Threat level: Moderate Risk

com.maizhi.wifi.secondlink
40dfa63c7d63931bd4c9ea56cba0018cbc782a76d8ea5eaf2e064f537d96da02

秒连WiFi

Version: 129

First seen: 2022-06-01T02:01:16.362554

Attribute: domains

api-cmshow-sdk.cmcm.com
api-gd.dutils.com

Attribute: domains_analysis._name

api-cmshow-sdk.cmcm.com
api-gd.dutils.com

Threat level: High Risk

org.femmhealth.femm
e47f7719e418667a63d7f0ed4aac0897c33704807e808e8b807af90a409736c8
FEMM

Version: 1582

First seen: 2022-05-29T14:53:52.230124

Attribute: domains

femm-health-app-a7172.firebaseio.com

Attribute: domains_analysis._name

femm-health-app-a7172.firebaseio.com

Threat level: Moderate Risk

com.facily
df2b8bc38fd83b1c769eea8c4104f16f702b2921fb56f8c5f1913d29057c408f

Facily

Version: 4100004

First seen: 2022-05-28T20:36:17.576361

Attribute: domains

facily-817c2.firebaseio.com

Attribute: domains_analysis._name

facily-817c2.firebaseio.com

Threat level: Moderate Risk

com.intsig.camscanner
265479ed06b68288594dcf017cfa7c9f99470ec93e44c3ab0dce725ed6962631
CamScanner

Version: 61587

First seen: 2022-05-27T23:13:40.787474

Attribute: domains

api.500px.com
api-cs-bak.intsig.net
camscanner-d8060.firebaseio.com
api-t.auth.lvjinhui.cn
api-cs.intsig.net

Attribute: domains_analysis._name

api.500px.com
api-cs-bak.intsig.net
camscanner-d8060.firebaseio.com
api-t.auth.lvjinhui.cn
api-cs.intsig.net

Threat level: Moderate Risk

id.xecureworld.app
da5ff752aa599dbaf486df1422ef67ae06a0df158c0d11e427fa2cd14772ce5d
PALAPA

Version: 5970

First seen: 2022-05-27T17:54:40.602746

Attribute: domains

sonorous-veld-162113.firebaseio.com

Attribute: domains_analysis._name

sonorous-veld-162113.firebaseio.com

Threat level: Moderate Risk

im.argent.contractwalletclient
f7f7a29ca2f01d09e63118c127c69d681e74ce800fa67d65653cd3bf8028ef6f
Argent

Version: 8137

First seen: 2022-05-25T11:45:02.645256

Attribute: domains

passbase-api-preprod-master-api-server.service.passbase.com

Attribute: domains_analysis._name

passbase-api-preprod-master-api-server.service.passbase.com

Threat level: Moderate Risk

com.BobBooks.BBRM_2_Magic
f4196756591f6b99d26b8bc64c5f4e48e423060f8df109a47cac2b24d844aa16

Magic #2

Version: 13

First seen: 2022-05-24T12:51:39.770736

Attribute: domains

bob-books-reading-magic-2.firebaseio.com

Attribute: domains_analysis._name

bob-books-reading-magic-2.firebaseio.com

Threat level: Moderate Risk

com.arabChat.dating
ec51740ad10edd1c6b6429c0855b2a781b29689709947bf87205ff433c3b4013

عرب شات

Version: 37

First seen: 2022-05-24T10:53:54.977188

Attribute: domains

arabchat-9ef07.firebaseio.com

Attribute: domains_analysis._name

arabchat-9ef07.firebaseio.com

Threat level: Moderate Risk

com.samsung.android.scloud
5de343910159183e5bf76c49bb19a23012358d6e995417c66087670441c8f59d

Samsung Cloud

Version: 440013000

First seen: 2022-05-24T02:10:39.616825

Attribute: domains

samsungcloud-f0001.firebaseio.com

Attribute: domains_analysis._name

samsungcloud-f0001.firebaseio.com

Threat level: Moderate Risk

com.recollect.linkus
390df52c6c7ce9f95455c540ac825c36f915539482df44912f2561ce4e962cc6

Private Messenger

Version: 733

First seen: 2022-05-23T10:20:07.436774

Attribute: domains

project-1720012803535836257.firebaseio.com

Attribute: domains_analysis._name

project-1720012803535836257.firebaseio.com

Threat level: High Risk

com.transsion.plat.appupdate
2584e9529e0988c1c2f9d657c5e2c55d1770e451d4120c176b5a505f2ee1033d
App Update

Version: 461030

First seen: 2022-05-22T18:00:24.588241

Attribute: domains

app-update-d5858.firebaseio.com

Attribute: domains_analysis._name

app-update-d5858.firebaseio.com

Threat level: Moderate Risk

net.bat.store
f5346d1388aff293bc84b481c3a9823cc3bf76ffc241fcf455754b86028f22b9

AHA Games

Version: 1903

First seen: 2022-05-22T17:20:32.808661

Attribute: domains

app-store-63685.firebaseio.com

Attribute: domains_analysis._name

app-store-63685.firebaseio.com

1/62

com.ryde_android
d22ed5cbfbca942c8d5ad225867891b5a9f8acc4a511745d394ceb32e96466b7
Ryde

Version: 193

First seen: 2022-05-22T13:37:35.478630

Attribute: domains

ryde-93e57.firebaseio.com

Attribute: domains_analysis._name

ryde-93e57.firebaseio.com

Threat level: High Risk

ru.mts.music.android
fce66629f6ec97e28c3a1f18ad725c6946c9a9a553af7c437e023a7b3eba49c9
МТС Music

Version: 353441

First seen: 2022-05-22T13:31:32.140899

Attribute: domains

mtsmusic-06122019.firebaseio.com

Attribute: domains_analysis._name

mtsmusic-06122019.firebaseio.com

Threat level: Moderate Risk

com.fitbod.fitbod
df633b6d6cf58eed9bc5885a7998fb4f916787c12282fde273b476f40dec9eff
Fitbod

Version: 1030602

First seen: 2022-05-19T21:17:56.712480

Attribute: domains

fitbod-f9767.firebaseio.com

Attribute: domains_analysis._name

fitbod-f9767.firebaseio.com

Threat level: Moderate Risk

doujinpaid.skyhighmm
4c131a7ea90544e3e855b3eb94447522a5378de88d654ec845746b156b52f9d2

DoujinPaid Sky High MM

Version: 1

First seen: 2022-05-19T11:20:09.194868

Attribute: domains

api-project-751842291101.firebaseio.com

Attribute: domains_analysis._name

api-project-751842291101.firebaseio.com

4/63

Similar samples:
com.android.plus…

com.adobepdf.airpdfreder
05a8df1bcfb9ac97b480e4d3018372978035255c9e6f89bae7613f8921a61b74

Adobe AIR

Version: 1

First seen: 2022-05-19T08:38:03.550564

Attribute: domains

purchase-api-qa.dynabic.com

Attribute: domains_analysis._name

purchase-api-qa.dynabic.com

Threat level: Moderate Risk

co.sitic.pp
e3848a88ead126dd544645865b15dd3e5940968068de8db27e0c92555fe57810
sysDLL

Version: 1089

First seen: 2022-05-18T20:09:47.920784

Attribute: domains

phoneprotect-47af3.firebaseio.com

Attribute: domains_analysis._name

phoneprotect-47af3.firebaseio.com

Threat level: Moderate Risk

`md5`	Sample MD5 `md5: 3acab2...`
`sha1`	Sample SHA1 `sha1: 3acab2...`
`sha256`	Sample SHA256 `sha256: 3acab2...`
`uaid`	Sample UAID `uaid: 3acab2...`
`permissions`	Requested Android permission `permissions: *.internet`
`java_classes`	Defined Java class `java_classes: "Lcom/amazon/device"`
`features`	Requested Android feature `features: *camera`
`handle`	Application package name `handle: fr.meteo`
`app_name`	Application name `app_name: Google`
`domains`	Found domain `domains: google`
`cert_md5`	Certificate MD5 fingerprint `cert_md5: 3acab2...`
`cert_sha1`	Certificate SHA1 fingerprint `cert_sha1: 3acab2...`
`cert_sha256`	Certificate SHA256 fingerprint `cert_sha256: 3acab2...`
`cert_issuer`	Certificate issuer `cert_issuer: google`
`vt.malicious`	VT detection `vt.malicious:>1`

Mobile threat intelligence for the masses

Results