0/60

Threat

com.waze

Waze

Analyzed on 2022-01-19T03:50:57.479526

35

permissions

136

activities

19

services

13

receivers

56

domains

File sums

MD5 2355bdb1a23accb58227a74da2ced982
SHA1 53df9843d9b490757c9c89e8ce1fc59c7fe36926
SHA256 d275d9ccd7fe009acaec42b06d7fa6ef8a3c0ec81495aceadc20fbd27da2f88f
Size 84.52MB

APKiD

Information computed with APKiD.

/tmp/tmp9zfpaaf_!classes.dex
anti_vm
  • Build.FINGERPRINT check
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • Build.TAGS check
compiler
  • r8 without marker (suspicious)
/tmp/tmp9zfpaaf_!classes2.dex
anti_vm
  • Build.MODEL check
  • Build.MANUFACTURER check
  • Build.PRODUCT check
  • Build.HARDWARE check
  • Build.TAGS check
  • possible VM check
anti_debug
  • Debug.isDebuggerConnected() check
compiler
  • r8 without marker (suspicious)
/tmp/tmp9zfpaaf_!classes3.dex
compiler
  • r8 without marker (suspicious)
/tmp/tmp9zfpaaf_!classes4.dex
anti_vm
  • Build.MANUFACTURER check
compiler
  • r8 without marker (suspicious)
/tmp/tmp9zfpaaf_!classes5.dex
compiler
  • r8 without marker (suspicious)

SSdeep

Information computed with ssdeep.

APK file 1572864:Mlo5sKZZSVPvdHLmGqax6J6lLx2NzzkkyuBZCxvZ6ZS+0URDV4s4X+h2ASsDt:Me+y4P1H56JKAdwkP4vZ6ZPg+h2AhJ
Manifest 768:szPdWr2umg1U/eUQtZhobQi8gLCpbJ3yNMA0AGAaJMtiQFSpcCXHOzkrK8BXVb1d:…
classes.dex 98304:EXJ2oLqmU9nEh2v3O2LChbMTdq2l2PKVxYJzLSATMyYTX:O2oca2ve7MTdqxPKzX
classes2.dex 49152:DgYYTHr1+QWSrMrMnBlnDu3lsfUO76rFyXQmFZZB9xuRHFhWXNZzt:DaHr1rXnj…
classes3.dex 98304:0/H+Rw4R/W8N4dCFvDXoJEV3xX9Yo/KOWQxdV:AHYReu8IzZX9Yo/KcdV
classes4.dex 49152:bG2i7hh9sOOiZS1nJFTHEZyRU+pZTNzgmA+2u0wCDdly4jX+be5t:4hW1nq0UgT…
classes5.dex 6144:eHodXIDFaMRuwwCP3g5kcp0+eVbEaK89JDTyD/U6KnIswj57LWEZKLHiQDs5Ub:e…

Dexofuzzy

Information computed with Dexofuzzy.

APK file 12288:6sDDwLd2P8/a7sHpxMDHSiPduF9BVe2pEFgpX3MnP4D/eHjnltVInw97Q/1s:Pf…
classes.dex 6144:mw8swub23hROwLZD2d/xE8MjuyZ3gOMPqaLZRts0FMy2xFhe4+CbiHy:6sDDwLd2…
classes2.dex 3072:nLRrE/FJQF3UpnACPRoY84uBlb9CQHayZrbIHlwBaGFYSqE0TyggEFPoQ52F:xAF…
classes3.dex 3072:njxP0RyrlRTVFAWzmQ6uCDcVWnhlfgCz+g96HbTCDEw6gnR8mqLTHLuZn4oceNCh…
classes4.dex 3072:3ggEUCWoxXTRFUzO9xqn356SQXkvoCfPKYXih67s8gAtq9zw01L0Ps0pP:QgEUro…
classes5.dex 384:1bCx7cHZfNZFsoVi/atXBLcS6YAs14G7giw7yA3p9Z2dmXOUfuZVU4ofBBsjOnDb:…

APK details

Information computed with AndroGuard and Pithus.

Package com.waze
App name Waze
Version name 4.79.0.2
Version code 1022634
SDK 21 - 30
UAID ffdbc6b0371946a2aac931f8764b718f30429425
Signature Signature V1 Signature V2
Frosting Frosted
Blocks found within V2 signature:
  • 0x7109871a: Unknown
  • 0x504b4453: Dependency metadata
  • 0x2146444e: Google metadata
  • 0x42726577: Verity padding

Certificate details

Information computed with AndroGuard.

MD5 973cbf4c6cc7c602486328f140c781ea
SHA1 35b438fe1bc69d975dc8702dc16ab69ebf65f26f
SHA256 03637f6c5d8f604e6fdb79a6ffbfa578de4e318f8da22fc6106665247f8807d7
Issuer Common Name: Alex Agranovich, Organizational Unit: Waze, Organization: Waze, Locality: Raanana, State/Province: Israel, Country: Israel
Not before 2009-01-28T14:38:25+00:00
Not after 2063-11-01T14:38:25+00:00

File Analysis

Information computed with MobSF.

Findings Files
Certificate/Key files hardcoded inside the app. assets/res/skins/default/objects_wide_softkeys_bottom
Findings Files
Hardcoded Keystore found. com/google/api/client/googleapis/google.jks

Manifest analysis

Information computed with MobSF.

Medium Application Data can be Backed up[android:allowBackup=true]
This flag allows anyone to backup your application data via adb. It allows users who have enabled USB debugging to copy application data off of the device.
High Service (com.waze.android_auto.WazeCarService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.waze.android_auto.WazeNavProviderService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.waze.GeoFencingService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: android.permission.BIND_JOB_SERVICE [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Service (com.waze.BoundService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.waze.AIDLService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.waze.TokenShareAIDLService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.waze.sdk.SdkService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.waze.ActivityRecognitionService) is not Protected. [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.waze.CalendarChangeReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.waze.android_auto.WazeCarAssistantStateReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Broadcast Receiver (com.waze.sharedui.onboarding.OnboardingSmsBroadcastReceiver) is not Protected. [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Activity (com.facebook.CustomTabActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.
High Service (com.google.android.gms.auth.api.signin.RevocationBoundService) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.gms.auth.api.signin.permission.REVOCATION_NOTIFICATION [android:exported=true]
A Service is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Broadcast Receiver (com.google.firebase.iid.FirebaseInstanceIdReceiver) is Protected by a permission, but the protection level of the permission should be checked.
Permission: com.google.android.c2dm.permission.SEND [android:exported=true]
A Broadcast Receiver is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device. It is protected by a permission which is not defined in the analysed application. As a result, the protection level of the permission should be checked where it is defined. If it is set to normal or dangerous, a malicious application can request and obtain the permission and interact with the component. If it is set to signature, only applications signed with the same certificate can obtain the permission.
High Activity (com.spotify.sdk.android.authentication.AuthCallbackActivity) is not Protected. [android:exported=true]
An Activity is found to be shared with other apps on the device therefore leaving it accessible to any other application on the device.

Browsable activities

Information computed with MobSF.

com.waze.FreeMapAppActivity

Hosts: www.google.com maps.google.com assistant-maps.google.com www.waze.com waze.com *.wazestg.com

Schemes: http:// https:// google.maps:// waze:// geo:// google.navigation://

Mime types: vnd.android.cursor.item/postal-address_v2 vnd.android.cursor.item/postal-address vnd.android.cursor.item/com.waze.authenticator

com.facebook.CustomTabActivity

Hosts: cct.com.waze

Schemes: fbconnect://

com.spotify.sdk.android.authentication.AuthCallbackActivity

Hosts: @string/com_spotify_sdk_redirect_host

Schemes: @string/com_spotify_sdk_redirect_scheme://

Main Activity

Information computed with AndroGuard.

com.waze.FreeMapAppActivity

Activities

Information computed with AndroGuard.

com.waze.MainActivity
com.waze.settings.copilot.CopilotSettingsActivity
com.waze.FreeMapAppActivity
com.facebook.FacebookActivity
com.waze.config.DebugConfigListActivity
com.waze.routes.RoutesActivity
com.waze.navigate.social.ShareDriveActivity
com.waze.share.ViewShareDriveActivity
com.waze.navigate.social.ShareDrivingFriendsActivity
com.waze.navigate.HistoryActivity
com.waze.google_assistant.SpeechRecognizerActivity
com.waze.menus.CategorySelectionActivity
com.waze.search.SearchResultsActivity
com.waze.search.ParkingSearchResultsActivity
com.waze.reports.NearbyGasStationsActivity
com.waze.reports.GasPriceReportActivity
com.waze.reports.EditPlaceFlowActivity
com.waze.reports.AddPlaceFlowActivity
com.waze.ifs.ui.OmniSelectionActivity
com.waze.reports.ClosureMap
com.waze.navigate.AddressPreviewActivity
com.waze.favorites.AddFavoriteActivity
com.waze.favorites.AddHomeWorkActivity
com.waze.navigate.AutocompleteSearchActivity
com.waze.favorites.FavoritesActivity
com.waze.reports.UpdatePriceActivity
com.waze.install.LocationFailedActivity
com.waze.install.InstallLocationPermissionActivity
com.waze.install.SelectCountryActivity
com.waze.install.TermsOfUseActivity
com.waze.rtalerts.RtAlertsComments
com.waze.messages.UserMessageEditorActivity
com.waze.inbox.InboxPreviewActivity
com.waze.inbox.InboxAdvilActivity
com.waze.share.FacebookEventPostActivity
com.waze.phone.ChooseCountryPhoneActivity
com.waze.share.UserDetailsActivity
com.waze.mywaze.MyWazeActivity
com.waze.FriendsActivity
com.waze.inbox.InboxActivity
com.waze.mywaze.moods.MoodsActivity
com.waze.mywaze.GroupsActivity
com.waze.mywaze.ScoreboardActivity
com.waze.mywaze.social.FacebookActivity
com.waze.mywaze.social.LinkedInActivity
com.waze.profile.LinkedinConnectActivity
com.waze.share.LinkedinProfileActivity
com.waze.mywaze.social.FacebookEventActivity
com.waze.share.FacebookLikeActivity
com.waze.InternalWebBrowser
com.waze.profile.ProfileActivity
com.waze.profile.TempUserProfileActivity
com.waze.profile.LoginActivity
com.waze.profile.ForgotPasswordActivity
com.waze.navigate.social.ShareHelpActivity
com.waze.navigate.social.AddFromActivity
com.waze.settings.SettingsNotificationActivity
com.waze.settings.SettingsHOVActivity
com.waze.settings.SettingsHOVSearchActivity
com.waze.settings.SettingsNavigationGuidanceActivity
com.waze.settings.SettingsVoicePackSelectionActivity
com.waze.settings.SettingsCustomPrompts
com.waze.settings.SettingsCarpoolActivity
com.waze.settings.SettingsCarpoolPrivacyActivity
com.waze.settings.SettingsCarpoolSeatsActivity
com.waze.settings.SettingsShowCarpoolsInCalendar
com.waze.settings.SettingsCarpoolGroupsActivity
com.waze.settings.SettingsCarpoolGroupActivity
com.waze.settings.SettingsCarpoolPaymentsActivity
com.waze.settings.SettingsPaymentMegabloxActivity
com.waze.settings.SettingsCarpoolInviteActivity
com.waze.settings.SettingsCarpoolCouponsActivity
com.waze.settings.SettingsCarpoolWorkActivity
com.waze.settings.SettingsCalendarSelectionActivity
com.waze.trip_overview.TripOverviewActivity
com.waze.mywaze.MyStoresActivity
com.waze.ifs.ui.EditTextDialogActivity
com.waze.ifs.ui.VideoActivity
com.waze.carpool.GoogleSignInActivity
com.waze.sharedui.utils.RequestPermissionActivity
com.waze.CalendarApprovedActivity
com.waze.carpool.TooYoungActivity
com.waze.carpool.RideUnavailableActivity
com.waze.carpool.CarpoolAddPhotoActivity
com.waze.carpool.CarpoolRideDetailsMapActivity
com.waze.carpool.ReasonSelectionActivity
com.waze.carpool.CarpoolRiderProfileActivity
com.waze.carpool.CarpoolDriverProfileActivity
com.waze.carpool.RideReviewActivity
com.waze.carpool.MissingPermissionsActivity
com.waze.ifs.ui.EditMapLocationActivity
com.waze.web.SimpleWebActivity
com.waze.carpool.Controllers.CarpoolHistoryActivity
com.waze.carpool.Controllers.CarpoolOfferHistoryActivity
com.waze.planned_drive.PlannedDriveActivity
com.waze.planned_drive.PlannedDriveSelectEndpointActivity
com.waze.planned_drive.PlannedDriveListActivity
com.waze.utils.DismissNotificationActivity
com.spotify.sdk.android.authentication.LoginActivity
com.waze.map.ParkingUpdateLocationActivity
com.waze.location.LocationPermissionActivity
com.waze.reports.SosProvidersListActivity
com.waze.SimpleListMenuActivity
com.waze.carpool.Controllers.OfferActivity
com.waze.carpool.BundleActivity
com.waze.carpool.Controllers.OffersSentActivity
com.waze.carpool.PreferencesActivity
com.waze.carpool.FiltersActivity
com.waze.carpool.CommuteModelTimeslotActivity
com.waze.carpool.CommuteModelActivity
com.waze.carpool.RideDetailsActivity
com.waze.carpool.CarpoolDetailsActivity
org.achartengine.GraphicalActivity
com.waze.settings.SettingsPageActivity
com.waze.view.popups.RequestAlwaysLocationDialogActivity
com.waze.settings.SettingsCarpoolNotificationsActivity
com.waze.settings.SettingsCarpoolRemindersFrequency
com.waze.sharedui.referrals.ReferralsActivity
com.waze.carpool.groups.GroupsActivity
com.waze.uid.activities.UidFragmentActivity
com.waze.onboarding.activities.OnboardingFullscreenActivity
com.waze.onboarding.activities.OnboardingBottomSheetActivity
com.waze.feedback.FeedbackActivity
com.waze.chat.view.messages.MessageActivity
com.waze.chat.view.conversations.ConversationsActivity
com.waze.sharedui.activities.ReportUserActivity
com.waze.sharedui.web.FileChooserChromeClient$FileChooserActivity
com.waze.sharedui.payment.PaymentWebActivity
com.waze.sharedui.activities.editTimeslot.activity.EditTimeslotFlowActivity
com.waze.shared_infra.hub.service.WazeServiceHostActivity
com.facebook.CustomTabMainActivity
com.facebook.CustomTabActivity
com.google.android.gms.auth.api.signin.internal.SignInHubActivity
com.google.android.gms.common.api.GoogleApiActivity
com.google.android.gms.ads.AdActivity
com.spotify.sdk.android.authentication.AuthCallbackActivity

Receivers

Information computed with AndroGuard.

com.waze.CloseIntent
com.waze.ActionIntent
com.waze.ActivityRecognitionReceiver
com.waze.main.navigate.GeoFencingReceiver
com.waze.CalendarChangeReceiver
com.waze.push.DeleteNotificationReceiver
com.waze.utils.AppPickerResultReceiver
com.waze.android_auto.WazeCarAssistantStateReceiver
com.waze.sharedui.onboarding.OnboardingSmsBroadcastReceiver
com.google.android.gms.measurement.AppMeasurementReceiver
com.google.firebase.iid.FirebaseInstanceIdReceiver
com.facebook.CurrentAccessTokenExpirationBroadcastReceiver
com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver

Services

Information computed with AndroGuard.

com.waze.android_auto.WazeCarService
com.waze.android_auto.WazeNavProviderService
com.waze.AppService
com.waze.GeoFencingService
com.waze.BoundService
com.waze.AIDLService
com.waze.TokenShareAIDLService
com.waze.sdk.SdkService
com.waze.ActivityRecognitionService
com.waze.push.WazeFirebaseMessagingService
com.waze.push.DriverDirectReplyIAMService
com.google.android.gms.auth.api.signin.RevocationBoundService
com.google.firebase.components.ComponentDiscoveryService
com.google.android.gms.measurement.AppMeasurementService
com.google.android.gms.measurement.AppMeasurementJobService
com.google.firebase.messaging.FirebaseMessagingService
com.google.android.datatransport.runtime.backends.TransportBackendDiscovery
com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService
androidx.room.MultiInstanceInvalidationService

Sample timeline

Certificate valid not before Jan. 28, 2009, 2:38 p.m.
First submission on VT Nov. 16, 2021, 9:33 p.m.
Last submission on VT Jan. 4, 2022, 5:23 p.m.
Upload on Pithus Jan. 19, 2022, 3:50 a.m.
Certificate valid not after Nov. 1, 2063, 2:38 p.m.

NIAP analysis

Information computed with MobSF.

FCS_RBG_EXT.1.1 The application invoke platform-provided DRBG functionality for its cryptographic operations.
Random Bit Generation Services
FCS_STO_EXT.1.1 The application does not store any credentials to non-volatile memory.
Storage of Credentials
FCS_CKM_EXT.1.1 The application implement asymmetric key generation.
Cryptographic Key Generation Services
FDP_DEC_EXT.1.1 The application has access to ['network connectivity', 'camera', 'location', 'bluetooth', 'microphone'].
Access to Platform Resources
FDP_DEC_EXT.1.2 The application has access to ['calender', 'address book'].
Access to Platform Resources
FDP_NET_EXT.1.1 The application has user/application initiated network communications.
Network Communications
FDP_DAR_EXT.1.1 The application implement functionality to encrypt sensitive data in non-volatile memory.
Encryption Of Sensitive Application Data
FMT_MEC_EXT.1.1 The application invoke the mechanisms recommended by the platform vendor for storing and setting configuration options.
Supported Configuration Mechanism
FTP_DIT_EXT.1.1 The application does encrypt some transmitted data with HTTPS/TLS/SSH between itself and another trusted IT product.
Protection of Data in Transit
FCS_RBG_EXT.2.1
FCS_RBG_EXT.2.2
The application perform all deterministic random bit generation (DRBG) services in accordance with NIST Special Publication 800-90A using Hash_DRBG. The deterministic RBG is seeded by an entropy source that accumulates entropy from a platform-based DRBG and a software-based noise source, with a minimum of 256 bits of entropy at least equal to the greatest security strength (according to NIST SP 800-57) of the keys and hashes that it will generate.
Random Bit Generation from Application
FCS_CKM.1.1(1) The application generate asymmetric cryptographic keys not in accordance with FCS_CKM.1.1(1) using key generation algorithm RSA schemes and cryptographic key sizes of 1024-bit or lower.
Cryptographic Asymmetric Key Generation
FCS_CKM.1.1(3)
FCS_CKM.1.2(3)
A password/passphrase shall perform [Password-based Key Derivation Functions] in accordance with a specified cryptographic algorithm..
Password Conditioning
FCS_COP.1.1(1) The application perform encryption/decryption not in accordance with FCS_COP.1.1(1), AES-ECB mode is being used.
Cryptographic Operation - Encryption/Decryption
FCS_COP.1.1(2) The application perform cryptographic hashing services not in accordance with FCS_COP.1.1(2) and uses the cryptographic algorithm RC2/RC4/MD4/MD5.
Cryptographic Operation - Hashing
FCS_HTTPS_EXT.1.1 The application implement the HTTPS protocol that complies with RFC 2818.
HTTPS Protocol
FCS_HTTPS_EXT.1.2 The application implement HTTPS using TLS.
HTTPS Protocol
FCS_HTTPS_EXT.1.3 The application notify the user and not establish the connection or request application authorization to establish the connection if the peer certificate is deemed invalid.
HTTPS Protocol
FIA_X509_EXT.2.1 The application use X.509v3 certificates as defined by RFC 5280 to support authentication for HTTPS , TLS.
X.509 Certificate Authentication
FPT_TUD_EXT.2.1 The application shall be distributed using the format of the platform-supported package manager.
Integrity for Installation and Update
FCS_CKM.1.1(2) The application shall generate symmetric cryptographic keys using a Random Bit Generator as specified in FCS_RBG_EXT.1 and specified cryptographic key sizes 128 bit or 256 bit.
Cryptographic Symmetric Key Generation

Code analysis

Information computed with MobSF.

Low
CVSS:7.5
The App logs information. Sensitive information should never be logged.
MASVS: MSTG-STORAGE-3
CWE-532 Insertion of Sensitive Information into Log File
Files:
 com/waze/settings/SettingsCarpoolActivity.java
i1/i0.java
com/waze/mywaze/social/FacebookEventActivity.java
a3/a0.java
p4/a.java
m6/f0.java
p2/a.java
t4/m.java
e0/a.java
n4/g.java
r2/f.java
r2/s.java
com/waze/sharedui/activities/a.java
k8/r.java
d3/e.java
m4/l.java
i3/a.java
i7/a.java
com/bumptech/glide/load/data/b.java
e8/y.java
l2/d.java
com/waze/BoundService.java
c8/e.java
k0/c.java
i9/a.java
h2/a.java
u2/j.java
com/spotify/sdk/android/authentication/LoginActivity.java
t3/a.java
h8/a.java
g/e.java
com/waze/push/m.java
b0/a.java
n4/i.java
m/c.java
d0/k.java
n4/c.java
f9/a.java
l3/a.java
com/waze/ifs/ui/EditTextDialogActivity.java
l2/o.java
com/waze/navigate/v0.java
x8/y.java
com/spotify/sdk/android/authentication/g.java
ne/v.java
n4/r.java
k2/a.java
e8/a.java
i7/c.java
d8/k.java
com/waze/config/lb0.java
a7/p.java
l2/a0.java
t4/d.java
t4/g.java
w8/z.java
com/waze/MsgBox.java
f2/k.java
e3/f.java
ak/a.java
c0/a.java
com/spotify/sdk/android/authentication/f.java
com/waze/search/SearchResultsActivity.java
z1/a.java
com/waze/google_assistant/SpeechRecognizerActivity.java
d0/j.java
x9/d.java
i3/g.java
e8/h1.java
com/waze/SpeechttManagerBase.java
a3/t.java
a8/h.java
r4/b.java
com/waze/navigate/NavigationInfoNativeManager.java
b3/e.java
com/waze/ResManager.java
com/spotify/sdk/android/authentication/e.java
com/waze/MainActivity.java
com/waze/network/NetworkManager.java
b3/p.java
c0/b.java
s0/a.java
e2/h.java
g9/a.java
com/waze/social/a.java
sj/g.java
com/waze/OfflineNativeManager.java
k8/s.java
n4/j.java
n4/p.java
a3/o.java
n4/c0.java
e2/z.java
la/g.java
p3/q.java
i1/y.java
i0/i.java
n4/d.java
p3/w.java
lf/a.java
com/waze/carpool/x1.java
ea/c.java
d2/e.java
h/a.java
g/i.java
com/airbnb/lottie/LottieAnimationView.java
k8/g.java
r2/r.java
i2/d.java
k8/m.java
x1/c.java
e3/e.java
s2/d.java
com/bumptech/glide/load/data/l.java
zb/a.java
l2/n.java
d2/c.java
ck/a.java
zj/a.java
h4/b.java
d0/c.java
f2/j.java
x3/a.java
m4/k.java
aa/g.java
com/waze/menus/SideMenuAddressItemRecycler.java
x8/x.java
m4/i.java
l2/c0.java
e2/k.java
g/d.java
oj/l.java
e5/a.java
com/waze/ifs/ui/j.java
com/waze/push/e.java
p3/c0.java
g2/e.java
r2/e.java
com/waze/map/NativeCanvasRenderer.java
com/waze/log/f.java
com/waze/fa.java
gi/a0.java
g/k.java
a3/d.java
com/waze/AppService.java
w0/a.java
i2/c.java
e8/w0.java
com/waze/android_auto/z0.java
e2/i.java
t4/p.java
m4/g.java
com/bumptech/glide/load/data/j.java
p3/b0.java
oj/c.java
e8/z.java
r0/c.java
r2/p.java
ne/j.java
d0/e.java
n4/f.java
n4/l.java
com/waze/android_auto/e.java
n4/o.java
com/waze/n0.java
com/waze/FreeMapAppActivity.java
n4/k0.java
x2/b.java
l2/l.java
com/waze/sharedui/views/WazeSwipeRefreshLayout.java
b2/e.java
c0/f.java
b3/f.java
com/waze/share/FacebookLikeActivity.java
y0/c.java
com/waze/beacons/BeaconManager.java
com/bumptech/glide/b.java
l2/c.java
v2/j.java
com/waze/ConfigManager.java
com/waze/utils/a.java
com/tokenautocomplete/b.java
y9/b.java
i2/f.java
a3/r.java
l/g.java
com/waze/share/UserDetailsActivity.java
com/waze/ActivityRecognitionService.java
n4/a.java
z0/a.java
n4/n.java
z2/a.java
b2/d.java
f1/c.java
com/waze/NativeManager.java
i3/d.java
e0/h.java
b3/b.java
vf/i.java
com/waze/ifs/ui/e.java
g/g.java
j8/a.java
e2/q.java
com/waze/carpool/CarpoolNativeManager.java
m0/c.java
l2/s.java
ea/a.java
n4/w0.java
g3/a.java
i2/t.java
com/spotify/sdk/android/authentication/h.java
g2/i.java
r4/j.java
i7/b.java
d0/f.java
e8/i.java
p2/d.java
p2/j.java
e8/c.java
c8/j.java
d0/g.java
k9/h.java
com/waze/android_auto/widgets/t0.java
c5/e.java
com/waze/map/MapView.java
x8/a0.java
i2/s.java
r2/o.java
q4/b.java
com/waze/navigate/AutocompleteSearchActivity.java
com/waze/view/layout/SwipeableLayout.java
h1/a.java
High
CVSS:7.5
The App uses an insecure Random Number Generator.
MASVS: MSTG-CRYPTO-6
CWE-330 Use of Insufficiently Random Values
M5: Insufficient Cryptography
Files:
 com/waze/NativeManager.java
lg/y1.java
ik/a.java
mk/x.java
io/grpc/internal/c0.java
com/waze/view/anim/ParticleSystem.java
sa/c.java
io/grpc/internal/u1.java
a3/i.java
zk/a.java
p3/b0.java
zk/b.java
r8/a.java
sa/d.java
io/grpc/internal/a0.java
okio/m.java
x8/u0.java
dk/h.java
m6/i0.java
High
CVSS:7.4
Files may contain hardcoded sensitive informations like usernames, passwords, keys etc.
MASVS: MSTG-STORAGE-14
CWE-312 Cleartext Storage of Sensitive Information
M9: Reverse Engineering
Files:
 com/waze/network/b.java
xh/f.java
io/grpc/internal/g2.java
e2/d.java
qd/a.java
e2/x.java
mj/a.java
se/a.java
c2/d.java
y4/a.java
e2/p.java
Low
CVSS:3.9
App can write to App Directory. Sensitive Information should be encrypted.
MASVS: MSTG-STORAGE-14
CWE-276 Incorrect Default Permissions
Files:
 a3/c.java
wf/a.java
com/waze/config/db0.java
a3/u.java
a3/a0.java
a3/s.java
Low
CVSS:0
This App copies data to clipboard. Sensitive data should not be copied to clipboard as other applications can access it.
MASVS: MSTG-STORAGE-10
Files:
 com/waze/settings/SettingsCarpoolInviteActivity.java
com/waze/sharedui/referrals/b.java
yd/n.java
pe/p.java
High
CVSS:5.5
App creates temp file. Sensitive information should never be written into a temp file.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 com/waze/sound/SoundNativeManager.java
d9/b.java
com/waze/reports/l1.java
com/waze/inbox/InboxPreviewActivity.java
High
CVSS:5.9
App uses SQLite Database and execute raw SQL query. Untrusted user input in raw SQL queries can cause SQL Injection. Also sensitive information should be encrypted and written to the database.
CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
M7: Client Code Quality
Files:
 g1/a.java
m4/k.java
i5/b0.java
i5/h0.java
i5/e0.java
Medium
CVSS:4.3
IP Address disclosure
MASVS: MSTG-CODE-2
CWE-200 Information Exposure
Files:
 zb/i.java
ff/a.java
Info
CVSS:0
This App uses SSL certificate pinning to detect or prevent MITM attacks in secure communication channel.
MASVS: MSTG-NETWORK-4
Files:
 ll/c.java
High
CVSS:5.5
App can read/write to External Storage. Any App can read data written to External Storage.
MASVS: MSTG-STORAGE-2
CWE-276 Incorrect Default Permissions
M2: Insecure Data Storage
Files:
 com/waze/NativeManager.java
com/waze/ResManager.java
p3/b0.java
ci/g.java
com/waze/reports/l1.java
com/waze/sharedui/web/c.java
com/waze/AppService.java
b0/b.java
b0/a.java
High
CVSS:7.4
MD5 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 com/waze/NativeManager.java
i3/g.java
b3/c.java
High
CVSS:5.9
SHA-1 is a weak hash known to have hash collisions.
MASVS: MSTG-CRYPTO-4
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
M5: Insufficient Cryptography
Files:
 y3/a.java
gc/d.java
Medium
CVSS:8.8
Insecure WebView Implementation. Execution of user controlled code in WebView is a critical Security Hole.
MASVS: MSTG-PLATFORM-7
CWE-749 Exposed Dangerous Method or Function
M1: Improper Platform Usage
Files:
 com/waze/ads/WazeAdsWebView.java
Pygal Germany: 500 Ireland: 100 Netherlands: 300 United States: 4200

Map computed by Pithus.

Domains analysis

Information computed with MobSF.

DE car-image.waze.com 13.35.255.42
US www.gcp.wazestg.com 34.120.214.39
US rt.gcp.wazestg.com 34.95.118.246
US policies.google.com 142.250.184.206
US mobile-web-new.waze.co.il 35.227.212.9
assistant-maps.google.com
US api-project-1005457359603.firebaseio.com 35.201.97.85
US gapi.waze.com 216.239.38.129
US pagead2.googlesyndication.com 142.250.185.194
DE schemas.microsoft.com 104.111.237.228
US crashpad.chromium.org 172.217.16.147
US www.waze.com 130.211.9.172
US ads-resources.waze.com 130.211.12.225
US staging-carpool-pa.sandbox.googleapis.com 64.233.166.81
NL www.facebook.com 157.240.236.35
US rt.waze.com 35.190.125.55
US www.google.com 142.250.181.228
US cresg.waze.com 130.211.16.132
US bit.ly 67.199.248.10
US mobile-web.waze.com 34.102.191.19
US mobile-web.gcp.wazestg.com 34.120.214.39
US accounts.google.com 142.250.74.205
US ads-resources-legacy.waze.com 107.178.245.42
DE developer.apple.com 17.253.55.207
ns.adobe.com
US venue-image.waze.com 34.107.197.234
US waze.to 130.211.8.192
US movies.waze.com 34.98.104.81
DE waze-audio.waze.com 143.204.202.234
US www.waze.co.il 35.186.220.248
schemas.android.com
US contact.waze.com 34.95.121.25
US voice-prompts.waze.com 35.186.210.106
US exoplayer.dev 185.199.111.153
US www.foursquare.com 151.101.194.132
NL developers.facebook.com 157.240.236.15
US support.google.com 142.250.186.142
DE itunes.apple.com 104.111.214.42
US payments.google.com 74.125.133.92
US www.w3.org 128.30.52.100
stgweb.waze.co.il
US sdk.waze.com 35.186.206.199
US play.google.com 142.250.185.238
IE s3-eu-west-1.amazonaws.com 52.218.110.147
NL facebook.com 157.240.236.35
US www.google-analytics.com 142.250.184.206
US myaccount.google.com 142.250.184.206
.facebook.com
US plus.google.com 172.217.18.110
US waze-carpool-payments-staging.sandbox.google.com 142.251.5.81
US waze.com 130.211.9.172
US aomedia.org 185.199.110.153
US cres.waze.com 130.211.16.132
US github.com 140.82.121.4
US developers.google.com 142.250.185.110
US photos.waze.com 65.9.71.109

URL analysis

Information computed with MobSF.

https://developers.facebook.com/docs/android/getting-started
Defined in p3/c0.java
https://facebook.com
https://.facebook.com
Defined in p3/b0.java
https://facebook.com
https://.facebook.com
Defined in p3/b0.java
https://github.com/grpc/grpc-java/issues/5015
Defined in io/grpc/internal/c1.java
https://developers.facebook.com/docs/android/getting-started#client-token
Defined in a3/o.java
https://developers.facebook.com/docs/app-events/getting-started-app-events-android#disable-auto-events.
Defined in a3/a0.java
http://schemas.android.com/apk/res/android
Defined in c0/g.java
http://schemas.microsoft.com/DRM/2007/03/protocols/AcquireLicense
Defined in r5/g0.java
http://ns.adobe.com/xap/1.0/
Defined in w5/a.java
https://exoplayer.dev/issues/cleartext-not-permitted
Defined in z6/x.java
https://plus.google.com/
Defined in e8/y0.java
http://www.w3.org/ns/ttml#parameter
Defined in v6/c.java
http://www.waze.com/images/facebook/share-image.png
Defined in com/waze/share/FacebookEventPostActivity.java
http://schemas.android.com/apk/res/android
Defined in com/waze/sharedui/views/WazeImageButton.java
http://schemas.android.com/apk/res/android
Defined in com/waze/sharedui/views/SettingsFreeText.java
http://schemas.android.com/apk/res/android
Defined in com/waze/sharedui/views/SettingsTitleText.java
http://schemas.android.com/apk/res-auto
Defined in com/waze/sharedui/views/WazeSettingsView.java
http://schemas.android.com/apk/res/android
Defined in com/waze/sharedui/views/WazeTextView.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods
https://support.google.com/waze/answer/11044561?hl=en
https://support.google.com/waze/carpool/answer/9345836
https://waze-carpool-payments-staging.sandbox.google.com/landingpage
https://accounts.google.com/AccountChooser
https://play.google.com/store/apps/details?id=com.ridewith&hl
https://itunes.apple.com/us/app/id1091029104
https://rt.waze.com/rtserver/distrib
https://rt.gcp.wazestg.com:443/rtserver
https://support.google.com/waze/carpool/answer/6392870?ref_topic=6211422
https://support.google.com/waze/carpool/answer/9680325
https://mobile-web-new.waze.co.il/about
https://contact.waze.com/forms/form/%s/unauth-core
https://contact.waze.com/forms/form/%s/unauth-driver
https://support.google.com/waze/carpool/answer/7558824
https://www.waze.com/carpool/referral?a=redeem_referral&referral_token=%s
https://support.google.com/waze/carpool/answer/7574600
https://gapi.waze.com/autocomplete/q?e=ROW&c=wd&exp=8
https://support.google.com/waze/answer/9757127
https://support.google.com/waze/answer/9757025
https://support.google.com/waze/answer/9753818
https://www.waze.com/legal/tos
https://www.waze.com/legal/privacy/
https://support.google.com/waze/answer/9758255
https://support.google.com/waze/answer/9757024
https://www.google.com/search?q=where+do+i+vote
https://support.google.com/waze/troubleshooter/6270803?hl=en&ref_topic=6263211
https://support.google.com/waze/answer/6262574
https://waze.to/?acvp=%s
https://www.gcp.wazestg.com/carpool/delete_account
https://support.google.com/waze/answer/6320064
https://support.google.com/waze/answer/7245173?hl=en
https://www.waze.com/_user/trips/
https://www.waze.com/user/download_data
Defined in com/waze/config/ConfigValues.java
https://waze-carpool-payments-staging.sandbox.google.com/buyflow
https://ads-resources-legacy.waze.com/resources/images/
https://ads-resources.waze.com/client_ads/logos/
https://cres.waze.com/sounds/
https://cres.waze.com/newVconfig/
https://cres.waze.com/langs/
https://cres.waze.com/lang_tts/
https://cres.waze.com/images/1.0/encouragements/
https://voice-prompts.waze.com/
https://s3-eu-west-1.amazonaws.com/shield-assets.waze.com/shields_conf
https://cresg.waze.com/roadshields/images/
https://waze-carpool-payments-staging.sandbox.google.com/paymentmethods