0/59

Threat

com.appspot.scruffapp

Scruff

Analyzed on 2021-11-28T22:25:47.301889

42

permissions

77

activities

13

services

14

receivers

56

domains

File sums

MD5 f228dab61eb16b9c6c558a5a362d09e0
SHA1 4dbc6483a636c27165adfbb23875766c9af26e86
SHA256 01219a7585f6a0a592b7be948c899964a6f6868b5162caf2f0a89a21b4b06de5
Size 32.52MB

APKiD

Information computed with APKiD.

/tmp/tmpd0zw_dbl!classes.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MANUFACTURER check
compiler
  • r8 without marker (suspicious)
/tmp/tmpd0zw_dbl!classes2.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • possible Build.SERIAL check
  • Build.TAGS check
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • r8 without marker (suspicious)
/tmp/tmpd0zw_dbl!classes3.dex
anti_vm
  • Build.MANUFACTURER check
  • Build.HARDWARE check
compiler
  • r8 without marker (suspicious)

SSdeep

Information computed with ssdeep.

APK file 786432:9JVCGt8wFiGLMUbt5YmMqVvX5kTIL9cLZEBimX/O5OIPdvCvX:DfbYUbA6q8L+LZEB/JIYvX
Manifest 768:KFzZMuLaArKFgRxcKE6XPxSbqUQt+ITYo9Oeg9Z5eJ3yntBgQA0hpcKVhZrkXmqA:…
classes.dex 49152:iBbVsg0ODf8pFU9vqlUzneS7z8QsBNCT74merVCw2DPMuvHWFe94fRjgfjLtBqH…
classes2.dex 49152:nnUPHJZniU1O/QhpxdGYpnqhHRwwgcJigg4NfZ/uDqXDq12ZVM/GOWjlvzsbJfI…
classes3.dex 49152:LoBsJUgxcU0iseJhnZ3UZZepe653ECX0rNDf:LVjD2epeuECE9f

Dexofuzzy

Information computed with Dexofuzzy.

APK file 12288:GwbolrWGFwagPfNqwwvZwiauGW1lqF8GDHBj59RcJPwdR9E:FoWGXwAwUGW18qG…
classes.dex 6144:Gwg2LxiOklrwuzNcr1E0YV+6wDJgGb7N00oR1CpYifNZ:GwbolrWGFwagPfNZ
classes2.dex 6144:Awm/5v2ikuKQp/rtaiaGxSpeZXxGW1281gF8GsVARWH3QBj59RIhvi41Ofx:Awwv…
classes3.dex 3072:NXE3tww613aau/uV7LOsRd3iPDlxx9Fm9VAykfaXNcwkQ1kLf/cOb:Ew3Na3o6UV…

APK details

Information computed with AndroGuard and Pithus.

Package com.appspot.scruffapp
App name Scruff
Version name 6.5400.0
Version code 28956
SDK 21 - 30
UAID 1eae4572d121b7eabc605263f7224c98651cddd7
Signature Signature V1 Signature V2 Signature V3
Frosting Frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0xf05368c0: Unknown
  • 0x2146444e: Google metadata
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 172cdaf06d7be26c3cf10ec77d6b6dc1
SHA1 20f01c74b8abd055a53d57ad039b01aa430154a6
SHA256 b4f246e3ddca86608158f0b3f6a2e16a742996e3fa527fa787adeee244d630ed
Issuer Common Name: Eric Silverberg, Organization: Perry Street Software Inc, Locality: New York, State/Province: NY, Country: US
Not before 2010-10-09T21:28:42+00:00
Not after 2035-10-03T21:28:42+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. okhttp3/internal/publicsuffix/NOTICE

Manifest analysis

Information computed with MobSF.

Medium Application Data can be Backed up[android:allowBackup=true]
This flag allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device.
High Activity (com.appspot.scruffapp.HomeActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.library.grids.GridViewSimpleActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.favorites.FavoritesActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.profile.ProfileViewActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.reactnative.view.ReactNativeViewActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.profileeditor.ProfileEditorActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.profileeditor.ProfileEditorSettingsPrivacyActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.profileeditor.ProfileEditorSettingsAppActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.profileeditor.hashtags.HashtagsEditorActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.support.TicketListActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.settings.SettingsActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.settings.SettingsDeviceActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.settings.DeviceManagerActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.store.StoreActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.albums.MyAlbumsActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.albums.UnlockedAlbumsActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.albums.AlbumGalleryActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.diagnostics.ConnectionDiagnosticActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.diagnostics.LocationDiagnosticsActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Activity (com.appspot.scruffapp.features.events.EventDetailsActivity) is not Protected.An intent-filter exists.
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Activity is explicitly exported.
High Service (com.appspot.scruffapp.services.notification.ScruffFirebaseInstanceIdService) is not Protected.An intent-filter exists.
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Service is explicitly exported.
High Service (com.appspot.scruffapp.services.notification.ScruffFirebaseMessagingService) is not Protected.An intent-filter exists.
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. The presence of intent-filter indicates that the Service is explicitly exported.
High Broadcast Receiver (com.appspot.scruffapp.services.data.InlineReplyBroadcastReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.appspot.scruffapp.services.notification.NotificationDismissedReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.gms.auth.api.signin.RevocationBoundService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (com.google.firebase.messaging.FirebaseMessagingService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (com.google.firebase.iid.FirebaseInstanceIdService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (androidx.compose.ui.tooling.PreviewActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (androidx.work.impl.background.systemjob.SystemJobService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (androidx.work.impl.diagnostics.DiagnosticsReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.DUMP [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (androidx.profileinstaller.ProfileInstallReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.DUMP [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.

Browsable activities

Information computed with MobSF.

com.appspot.scruffapp.features.splash.views.SplashActivity

Hosts: open

Schemes: scruff://

com.appspot.scruffapp.HomeActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.library.grids.GridViewSimpleActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.favorites.FavoritesActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.profile.ProfileViewActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.reactnative.view.ReactNativeViewActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.profileeditor.ProfileEditorActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.profileeditor.ProfileEditorSettingsPrivacyActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.profileeditor.ProfileEditorSettingsAppActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.profileeditor.hashtags.HashtagsEditorActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.support.TicketListActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.settings.SettingsActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.settings.SettingsDeviceActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.settings.DeviceManagerActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.store.StoreActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.albums.MyAlbumsActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.albums.UnlockedAlbumsActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.albums.AlbumGalleryActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.diagnostics.ConnectionDiagnosticActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.diagnostics.LocationDiagnosticsActivity

Hosts: scruff.com

Schemes: https://

com.appspot.scruffapp.features.events.EventDetailsActivity

Hosts: scruff.com

Schemes: https://

Main Activity

Information computed with AndroGuard.

com.appspot.scruffapp.features.splash.views.SplashActivity

Activities

Information computed with AndroGuard.

com.appspot.scruffapp.features.splash.views.SplashActivity
com.appspot.scruffapp.features.firstrun.TosActivity
com.appspot.scruffapp.features.firstrun.StartupPermissionsActivity
com.appspot.scruffapp.features.firstrun.SmsValidationPermissionsActivity
com.appspot.scruffapp.HomeActivity
com.appspot.scruffapp.library.grids.GridViewSimpleActivity
com.appspot.scruffapp.features.chat.GridViewMessagesUnreadActivity
com.appspot.scruffapp.features.chat.GridViewMessagesRecentActivity
com.appspot.scruffapp.features.favorites.FavoritesActivity
com.appspot.scruffapp.features.favorites.FavoriteFolderActivity
com.appspot.scruffapp.features.profile.ProfileViewActivity
com.appspot.scruffapp.features.serveralert.rendering.ServerAlertBasicViewActivity
com.appspot.scruffapp.features.reactnative.view.ReactNativeViewActivity
com.appspot.scruffapp.features.rntemplate.ReactNativeTemplateDebugActivity
com.appspot.scruffapp.features.firstrun.CaptchaWebActivity
com.appspot.scruffapp.features.captcha.CaptchaPlayServicesActivity
com.appspot.scruffapp.features.profile.InsightsActivity
com.appspot.scruffapp.features.maps.MapSearchActivity
com.appspot.scruffapp.features.chat.ChatViewActivity
com.appspot.scruffapp.features.chat.camera.ChatCameraActivity
com.appspot.scruffapp.features.viewers.ViewersActivity
com.appspot.scruffapp.features.common.WebActivity
com.appspot.scruffapp.features.profileeditor.ProfileEditorWizardActivity
com.appspot.scruffapp.features.profileeditor.ProfileEditorActivity
com.appspot.scruffapp.features.profileeditor.ProfileEditorSettingsPrivacyActivity
com.appspot.scruffapp.features.profileeditor.ProfileEditorSettingsAppActivity
com.appspot.scruffapp.features.profileeditor.PartnerEditorActivity
com.appspot.scruffapp.features.profileeditor.genders.GendersIdentityEditorActivity
com.appspot.scruffapp.features.profileeditor.hashtags.HashtagsEditorActivity
com.appspot.scruffapp.features.editor.FullScreenTextEditorActivity
com.theartofdev.edmodo.cropper.CropImageActivity
com.appspot.scruffapp.features.support.TicketEditorActivity
com.appspot.scruffapp.features.support.TicketListActivity
com.appspot.scruffapp.features.support.TicketUpdateActivity
com.appspot.scruffapp.features.support.SurveyEditorActivity
com.appspot.scruffapp.features.support.FlagEditorActivity
com.appspot.scruffapp.features.settings.SettingsActivity
com.appspot.scruffapp.features.login.LoginActivity
com.appspot.scruffapp.features.login.ForgotPasswordActivity
com.appspot.scruffapp.features.settings.SettingsDeviceActivity
com.appspot.scruffapp.features.settings.SettingsAboutActivity
com.appspot.scruffapp.features.settings.LicensesActivity
com.appspot.scruffapp.features.settings.OverrideLocationActivity
com.appspot.scruffapp.features.settings.DeviceManagerActivity
com.appspot.scruffapp.features.settings.BlocksManagerActivity
com.appspot.scruffapp.features.settings.SettingsStartupPasswordActivity
com.appspot.scruffapp.features.store.StoreActivity
com.appspot.scruffapp.features.store.StoreAccountTransactionHistoryActivity
com.appspot.scruffapp.features.albums.MyAlbumsActivity
com.appspot.scruffapp.features.albums.UnlockedAlbumsActivity
com.appspot.scruffapp.features.albums.AlbumGalleryActivity
com.appspot.scruffapp.features.albums.AlbumArchiveActivity
com.appspot.scruffapp.features.albums.AlbumPermissionsActivity
com.appspot.scruffapp.features.diagnostics.ConnectionDiagnosticActivity
com.appspot.scruffapp.features.diagnostics.LocationDiagnosticsActivity
com.appspot.scruffapp.features.diagnostics.MemoryManagerActivity
com.appspot.scruffapp.features.diagnostics.PerfTestActivity
com.appspot.scruffapp.features.events.EventListActivity
com.appspot.scruffapp.features.events.EventDetailsActivity
com.appspot.scruffapp.features.events.EventListByProfileActivity
com.appspot.scruffapp.features.venture.VentureLocationListActivity
com.appspot.scruffapp.features.venture.VentureLocationDetailsActivity
com.appspot.scruffapp.features.venture.VentureTripEditorActivity
com.appspot.scruffapp.features.venture.VentureTripListActivity
com.appspot.scruffapp.features.venture.VentureRoomListActivity
com.appspot.scruffapp.features.venture.VentureRoomEditorActivity
com.appspot.scruffapp.features.venture.VentureRoomDetailsActivity
com.appspot.scruffapp.features.location.DiscreetLocationOverrideActivity
com.appspot.scruffapp.features.videochat.VideoChatActivity
com.appspot.scruffapp.features.adminmenu.AdminMenuActivity
com.appspot.scruffapp.features.store.StoreDialogActivity
com.appspot.scruffapp.features.account.verification.pose.AccountVerificationPoseActivity
com.appspot.scruffapp.features.safetycenter.SafetyCenterActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
androidx.compose.ui.tooling.PreviewActivity
com.android.billingclient.api.ProxyBillingActivity

Receivers

Information computed with AndroGuard.

com.appspot.scruffapp.services.data.InlineReplyBroadcastReceiver
com.appspot.scruffapp.services.notification.NotificationDismissedReceiver
com.appspot.scruffapp.services.data.session.SessionEndReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy
androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy
androidx.work.impl.background.systemalarm.RescheduleReceiver
androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver
androidx.work.impl.diagnostics.DiagnosticsReceiver
androidx.profileinstaller.ProfileInstallReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Services

Information computed with AndroGuard.

com.appspot.scruffapp.services.appevents.ScruffAppEventService
com.appspot.scruffapp.services.notification.ScruffFirebaseInstanceIdService
com.appspot.scruffapp.services.notification.ScruffFirebaseMessagingService
com.google.android.gms.auth.api.signin.RevocationBoundService
com.google.firebase.messaging.FirebaseMessagingService
com.google.firebase.components.ComponentDiscoveryService
com.google.firebase.iid.FirebaseInstanceIdService
androidx.work.impl.background.systemalarm.SystemAlarmService
androidx.work.impl.background.systemjob.SystemJobService
androidx.work.impl.foreground.SystemForegroundService
androidx.room.MultiInstanceInvalidationService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService

Sample timeline

Oldest file found in APK Jan. 1, 1981, 1:01 a.m.
Latest file found in APK Jan. 1, 1981, 1:01 a.m.
Certificate valid not before Oct. 9, 2010, 9:28 p.m.
First submission on VT Nov. 23, 2021, 9:52 p.m.
Last submission on VT Nov. 23, 2021, 9:52 p.m.
Upload on Pithus Nov. 28, 2021, 10:25 p.m.
Certificate valid not after Oct. 3, 2035, 9:28 p.m.

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application invoke platform-provided DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application implement asymmetric key generation.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['network connectivity', 'camera', 'location', 'bluetooth', 'microphone'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to no sensitive information repositories.
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(1) The application generate asymmetric cryptographic keys in accordance with a specified cryptographic key generation algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Asymmetric Key Generation
FCS_COP.1.1(1) The application perform encryption/decryption in accordance with a specified cryptographic algorithm AES-CBC (as defined in NIST SP 800-38A) mode or AES-GCM (as defined in NIST SP 800-38D) and cryptographic key sizes 256-bit/128-bit.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_COP.1.1(3) The application perform cryptographic signature services (generation and verification) in accordance with a specified cryptographic algorithm RSA schemes using cryptographic key sizes of 2048-bit or greater.
Cryptographic Operation - Signing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update

Code analysis

Information computed with MobSF.

High
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 okio/s.java
com/appspot/scruffapp/features/support/datasources/a.java
kotlin/collections/u.java
wg/a.java
dj/a.java
com/appspot/scruffapp/util/v.java
kotlin/collections/EmptyList.java
kotlin/random/a.java
kotlin/collections/l.java
kotlin/random/b.java
kotlin/reflect/jvm/internal/impl/utils/d.java
kotlin/collections/CollectionsKt___CollectionsKt.java
kotlin/reflect/jvm/internal/impl/protobuf/t.java
kotlin/reflect/jvm/internal/impl/protobuf/k.java
kotlin/collections/a.java
e0/e.java
High
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 com/reactnativecommunity/asyncstorage/f.java
id/f0.java
com/appspot/scruffapp/features/diagnostics/PerfTestActivity.java
com/appspot/scruffapp/services/data/ScruffLocalDatabaseManager.java
id/h0.java
id/b0.java
n2/a.java
com/appspot/scruffapp/services/data/u.java
Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 ed/a.java
f9/n.java
com/appspot/scruffapp/features/support/datasources/PSSTicketWorkflow.java
rh/b.java
n1/m.java
df/d.java
n3/a.java
vf/b.java
ag/a.java
kf/a.java
com/amazonaws/ivs/player/AudioTrackRenderer.java
com/appspot/scruffapp/features/rntemplate/e.java
v8/e.java
i9/l.java
com/bumptech/glide/request/SingleRequest.java
com/bumptech/glide/load/resource/bitmap/k.java
d9/j.java
com/bumptech/glide/load/resource/bitmap/x.java
com/perrystreet/AwsIvsPlayerView.java
tk/b.java
com/bumptech/glide/load/engine/i.java
z8/a.java
com/bumptech/glide/load/engine/DecodeJob.java
g9/d.java
t8/e.java
com/amazonaws/ivs/net/HttpClient.java
com/bumptech/glide/load/resource/bitmap/d.java
w8/a.java
com/bumptech/glide/load/engine/w.java
s8/j.java
com/bumptech/glide/load/resource/bitmap/p.java
x8/c.java
p8/e.java
f9/e.java
o3/b.java
x8/f.java
u8/j.java
i9/d.java
com/appspot/scruffapp/features/firstrun/SmsValidationPermissionsActivity.java
f9/k.java
mf/l.java
com/reactnativecommunity/webview/RNCWebViewManager.java
p8/d.java
com/bumptech/glide/GeneratedAppGlideModuleImpl.java
s8/l.java
com/appspot/scruffapp/util/d0.java
fg/r.java
t8/c.java
com/bumptech/glide/c.java
com/swmansion/gesturehandler/react/h.java
v8/i.java
com/amazonaws/ivs/player/AudioFocusHandler.java
q8/a.java
x8/t.java
com/bumptech/glide/load/engine/GlideException.java
me/leolin/shortcutbadger/ShortcutBadger.java
y1/a.java
f9/l.java
f9/f.java
we/h.java
com/bumptech/glide/load/resource/bitmap/DefaultImageHeaderParser.java
m9/a.java
sg/b.java
com/twilio/video/Logger.java
com/swmansion/gesturehandler/react/g.java
s8/b.java
x8/d.java
com/amazonaws/ivs/player/MediaCodecDecoder.java
v/b.java
d9/d.java
com/bumptech/glide/load/resource/bitmap/l.java
d9/a.java
u8/k.java
f9/o.java
com/bumptech/glide/load/engine/g.java
g1/h.java
com/perrystreetsoftware/RNRtmpView.java
com/bumptech/glide/load/resource/bitmap/z.java
x8/s.java
com/bumptech/glide/load/resource/bitmap/c.java
High
CVSS:5.9
SHA-1 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 w7/k.java
com/stripe/android/util/StripeTextUtils.java
ph/a.java
ca/b.java
High
CVSS:7.4
Files may contain hardcoded sensitive informations like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 com/bumptech/glide/load/engine/n.java
com/appspot/scruffapp/features/login/m.java
com/bumptech/glide/load/engine/c.java
w6/k0.java
com/bumptech/glide/load/engine/u.java
o5/g.java
com/stripe/android/util/LoggingUtils.java
r8/c.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files:
 c8/c.java
com/appspot/scruffapp/util/v.java
g7/u0.java
com/appspot/scruffapp/services/imageloader/a.java
com/appspot/scruffapp/util/e.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 com/appspot/scruffapp/features/diagnostics/PerfTestActivity.java
com/rnfs/RNFSManager.java
o3/a.java
com/reactnativecommunity/webview/RNCWebViewModule.java
com/appspot/scruffapp/services/imageloader/a.java
com/appspot/scruffapp/util/ktx/GeneralUtilsKt.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 com/appspot/scruffapp/features/diagnostics/ConnectionDiagnosticActivity.java
com/appspot/scruffapp/features/profile/ProfileViewActivity.java
com/appspot/scruffapp/util/ktx/GeneralUtilsKt.java
High
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 y1/a.java
com/theartofdev/edmodo/cropper/CropImageActivity.java
com/appspot/scruffapp/ScruffFileProvider.java
com/theartofdev/edmodo/cropper/c.java
com/reactnativecommunity/webview/RNCWebViewModule.java
com/appspot/scruffapp/util/ktx/GeneralUtilsKt.java
com/appspot/scruffapp/util/image/ImageParser.java
High
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/appspot/scruffapp/util/a.java
Pygal Germany: 1300 Ireland: 500 United States: 3500

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

US player.stats.live-video.net 44.241.45.130
US apache.org 151.101.2.132
DE scruff.com 143.204.98.60
US xml.org 104.239.240.11
DE steamcommunity.com 184.30.209.160
DE www.tiktok.com 2.16.186.34
IE api.stripe.com 34.241.202.139
US clips.twitch.tv 151.101.14.167
DE cdn-chat.scruffapp.com 143.204.98.66
IE s3.amazonaws.com 54.231.133.224
US stripe.com 54.187.159.182
DE schemas.microsoft.com 104.111.237.228
US support.scruff.com 104.16.51.111
DE cdn-app.scruffapp.com 143.204.98.74
US twitter.com 104.244.42.65
IE fp-keyos-twitch.licensekeyserver.com 34.255.113.18
IE pr-keyos-twitch.licensekeyserver.com 34.247.203.123
US www.twitch.tv 151.101.14.167
s.scruffapp.com
US www.instagram.com 185.60.216.174
US www.facebook.com 185.60.216.35
US www.google.com 172.217.18.100
US maps.googleapis.com 142.250.186.74
US gql.twitch.tv 151.101.14.167
US crbug.com 216.239.32.29
US accounts.google.com 142.250.186.173
DE live.xbox.com 2.18.232.129
US www.jackd.com 151.101.1.195
US ecs.stage-us1.twilio.com 54.84.177.253
US ecs.us1.twilio.com 184.73.254.247
DE cdn-profiles.scruffapp.com 143.204.98.84
US www.ietf.org 104.16.45.99
US www.perrystreet.com 151.101.65.195
ns.adobe.com
DE status.scruff.com 143.204.98.32
schemas.android.com
US www.twitter.com 104.244.42.193
US www.webrtc.org 142.250.185.110
IE wv-keyos-twitch.licensekeyserver.com 34.251.203.147
US twitch.tv 151.101.194.167
US q.stripe.com 54.186.23.98
US www.w3.org 128.30.52.100
US tools.ietf.org 4.31.198.62
DE cdn-api.scruffapp.com 143.204.98.54
US play.google.com 142.250.185.238
US www.scruff.com 151.101.1.195
DE www.airbnb.com 2.16.186.218
DE cdn-album.scruffapp.com 143.204.98.122
US maps.google.com 142.250.185.238
US aomediacodec.github.io 185.199.108.153
US api-project-1020055585435.firebaseio.com 35.201.97.85
US plus.google.com 142.250.185.110
US psnprofiles.com 104.26.1.55
US ecs.dev-us1.twilio.com 52.22.107.203
DE cdn-chat2.scruffapp.com 143.204.98.41
US github.com 140.82.121.3

URL analysis

Information computed with MobSF.

https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/g.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/i.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/a.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/l.java
https://github.com/ReactiveX/RxJava/wiki/Plugins
Defined in io/reactivex/r.java
https://github.com/ReactiveX/RxJava/wiki/What's-different-in-2.0#error-handling
Defined in io/reactivex/exceptions/UndeliverableException.java
https://github.com/ReactiveX/RxJava/wiki/Error-Handling
Defined in io/reactivex/exceptions/OnErrorNotImplementedException.java
http://ns.adobe.com/xap/1.0/
Defined in y1/a.java
http://www.w3.org/ns/ttml#parameter
Defined in pe/a.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://www.scruff.com/notification/message/%d
https://www.scruff.com/notification/woof/%d
https://www.scruff.com/notification/album/%d
https://www.scruff.com/notification/match/%d
https://www.scruff.com/notification/video_chat
https://www.scruff.com/notification/message
https://www.scruff.com/notification/server_alert
https://www.scruff.com/notification/ticket_updated
https://www.scruff.com/notification/events
https://www.scruff.com/notification/file_download
Defined in e8/o1.java
https://accounts.google.com/o/oauth2/revoke?token=
Defined in df/c.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://www.google.com
https://status.scruff.com/index.json
https://cdn-api.scruffapp.com
https://cdn-profiles.scruffapp.com/
https://cdn-chat.scruffapp.com/
https://cdn-chat2.scruffapp.com/
https://cdn-app.scruffapp.com/
https://cdn-album.scruffapp.com/
Defined in com/appspot/scruffapp/b.java
https://maps.googleapis.com
https://cdn-api.scruffapp.com
Defined in com/appspot/scruffapp/util/v.java
https://maps.googleapis.com
https://cdn-api.scruffapp.com
Defined in com/appspot/scruffapp/util/v.java
https://%s%s?client_version=%s
https://status.scruff.com/index.json
https://s3.amazonaws.com/scruffbeta/alt_ips.json
https://s3.amazonaws.com/scruffbeta/domain_fronting.json
Defined in com/appspot/scruffapp/services/networking/api/h2.java
https://%s%s?client_version=%s
https://status.scruff.com/index.json
https://s3.amazonaws.com/scruffbeta/alt_ips.json
https://s3.amazonaws.com/scruffbeta/domain_fronting.json
Defined in com/appspot/scruffapp/services/networking/api/h2.java
https://%s%s?client_version=%s
https://status.scruff.com/index.json
https://s3.amazonaws.com/scruffbeta/alt_ips.json
https://s3.amazonaws.com/scruffbeta/domain_fronting.json
Defined in com/appspot/scruffapp/services/networking/api/h2.java
https://www.scruff.com
Defined in com/appspot/scruffapp/features/firstrun/TosActivity.java
https://www.scruff.com
https://status.scruff.com
Defined in com/appspot/scruffapp/features/splash/views/SplashActivity.java
https://www.scruff.com
https://status.scruff.com
Defined in com/appspot/scruffapp/features/splash/views/SplashActivity.java
https://play.google.com/store/account/subscriptions
Defined in com/appspot/scruffapp/features/store/StoreThankYouFragment.java
https://play.google.com/store/account/subscriptions
Defined in com/appspot/scruffapp/features/profileeditor/ProfileEditorActivity.java
https://scruff.com/privacy
https://scruff.com/tos
Defined in com/appspot/scruffapp/features/profileeditor/m0.java
https://scruff.com/privacy
https://scruff.com/tos
Defined in com/appspot/scruffapp/features/profileeditor/m0.java
https://support.scruff.com
https://%s%s
Defined in com/appspot/scruffapp/features/diagnostics/ConnectionDiagnosticActivity.java
https://status.scruff.com
Defined in com/appspot/scruffapp/features/support/TicketListActivity.java
https://support.scruff.com
Defined in com/appspot/scruffapp/features/support/PSSTicketEditorFragment.java
https://status.scruff.com
Defined in com/appspot/scruffapp/features/settings/SettingsAboutActivity.java
https://maps.google.com/maps?q=%f,%f
Defined in com/appspot/scruffapp/features/chat/ChatViewActivity.java
https://scruff.com/tos
https://scruff.com/privacy
Defined in com/appspot/scruffapp/features/browse/BrowseFragment.java
https://scruff.com/tos
https://scruff.com/privacy
Defined in com/appspot/scruffapp/features/browse/BrowseFragment.java
http://apache.org/xml/features/nonvalidating/load-external-dtd
http://xml.org/sax/features/external-general-entities
http://xml.org/sax/features/external-parameter-entities
Defined in com/dd/plist/n.java
http://apache.org/xml/features/nonvalidating/load-external-dtd
http://xml.org/sax/features/external-general-entities
http://xml.org/sax/features/external-parameter-entities
Defined in com/dd/plist/n.java
http://apache.org/xml/features/nonvalidating/load-external-dtd
http://xml.org/sax/features/external-general-entities
http://xml.org/sax/features/external-parameter-entities
Defined in com/dd/plist/n.java
https://stripe.com/docs/stripe.js.
https://stripe.com/docs/stripe.js
Defined in com/stripe/android/Stripe.java
https://stripe.com/docs/stripe.js.
https://stripe.com/docs/stripe.js
Defined in com/stripe/android/Stripe.java
https://api.stripe.com
https://q.stripe.com
https://twitter.com/stripestatus,
https://stripe.com/api
Defined in com/stripe/android/net/StripeApiHandler.java
https://api.stripe.com
https://q.stripe.com
https://twitter.com/stripestatus,
https://stripe.com/api
Defined in com/stripe/android/net/StripeApiHandler.java
https://api.stripe.com
https://q.stripe.com
https://twitter.com/stripestatus,
https://stripe.com/api
Defined in com/stripe/android/net/StripeApiHandler.java
https://api.stripe.com
https://q.stripe.com
https://twitter.com/stripestatus,
https://stripe.com/api
Defined in com/stripe/android/net/StripeApiHandler.java
https://github.com/software-mansion/react-native-screens/issues/17#issuecomment-424704067
Defined in com/swmansion/rnscreens/g.java
https://github.com/software-mansion/react-native-screens/issues/17#issuecomment-424704067
Defined in com/swmansion/rnscreens/i.java
http://schemas.android.com/apk/res/android
Defined in com/hbb20/CountryCodePicker.java
http://www.facebook.com/
http://www.twitter.com/
http://www.instagram.com/
http://www.airbnb.com/
http://psnprofiles.com/
http://live.xbox.com/Profile?Gamertag=
https://steamcommunity.com/id/
https://www.tiktok.com/@
Defined in com/perrystreet/models/profile/ProfileUrl.java
http://www.facebook.com/
http://www.twitter.com/
http://www.instagram.com/
http://www.airbnb.com/
http://psnprofiles.com/
http://live.xbox.com/Profile?Gamertag=
https://steamcommunity.com/id/
https://www.tiktok.com/@
Defined in com/perrystreet/models/profile/ProfileUrl.java
http://www.facebook.com/
http://www.twitter.com/
http://www.instagram.com/
http://www.airbnb.com/
http://psnprofiles.com/
http://live.xbox.com/Profile?Gamertag=
https://steamcommunity.com/id/
https://www.tiktok.com/@
Defined in com/perrystreet/models/profile/ProfileUrl.java
http://www.facebook.com/
http://www.twitter.c