安全分析报告： 奥比岛 v3.1.1

安全分数


安全分数 43/100

风险评级


等级

  1. A
  2. B
  3. C
  4. F

严重性分布 (%)


隐私风险

1

用户/设备跟踪器


调研结果

高危 4
中危 16
信息 2
安全 1
关注 1

高危 基本配置不安全地配置为允许到所有域的明文流量。 

Scope:
*

高危 程序可被任意调试 

[android:debuggable=true]
应用可调试标签被开启，这使得逆向工程师更容易将调试器挂接到应用程序上。这允许导出堆栈跟踪和访问调试助手类。

高危 Activity (com.zlx.zt.wxapi.WXEntryActivity) is vulnerable to StrandHogg 2.0 

已发现活动存在 StrandHogg 2.0 栈劫持漏洞的风险。漏洞利用时，其他应用程序可以将恶意活动放置在易受攻击的应用程序的活动栈顶部，从而使应用程序成为网络钓鱼攻击的易受攻击目标。可以通过将启动模式属性设置为“singleInstance”并设置空 taskAffinity (taskAffinity="") 来修复此漏洞。您还可以将应用的目标 SDK 版本 (28) 更新到 29 或更高版本以在平台级别修复此问题。

高危 SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击 

SSL的不安全实现。信任所有证书或接受自签名证书是一个关键的安全漏洞。此应用程序易受MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#android-network-apis

Files:
com/ta/a/d/f.java, line(s) 11,12,13,14,15,16,3

中危 应用程序已启用明文网络流量 

[android:usesCleartextTraffic=true]
应用程序打算使用明文网络流量，例如明文HTTP，FTP协议，DownloadManager和MediaPlayer。针对API级别27或更低的应用程序，默认值为“true”。针对API级别28或更高的应用程序，默认值为“false”。避免使用明文流量的主要原因是缺乏机密性，真实性和防篡改保护；网络攻击者可以窃听传输的数据，并且可以在不被检测到的情况下修改它。

中危 应用程序数据可以被备份 

[android:allowBackup=true]
这个标志允许任何人通过adb备份你的应用程序数据。它允许已经启用了USB调试的用户从设备上复制应用程序数据。

中危 Activity (com.zlx.zt.wxapi.WXEntryActivity) 未被保护。 

[android:exported=true]
发现 Activity与设备上的其他应用程序共享，因此可被设备上的任何其他应用程序访问。

中危 Service (com.alibaba.sdk.android.push.channel.CheckService) 未被保护。 

存在一个intent-filter。
发现 Service与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Service是显式导出的。

中危 Broadcast Receiver (com.taobao.accs.EventReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 Broadcast Receiver (com.taobao.accs.ServiceReceiver) 未被保护。 

存在一个intent-filter。
发现 Broadcast Receiver与设备上的其他应用程序共享，因此让它可以被设备上的任何其他应用程序访问。intent-filter的存在表明这个Broadcast Receiver是显式导出的。

中危 应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库 

应用程序使用SQLite数据库并执行原始SQL查询。原始SQL查询中不受信任的用户输入可能会导致SQL注入。敏感信息也应加密并写入数据库
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04h-Testing-Code-Quality.md#injection-flaws-mstg-arch-2-and-mstg-platform-2

Files:
com/amitshekhar/debug/sqlite/DebugSQLiteDB.java, line(s) 6,32
org/litepal/Operator.java, line(s) 6,523
org/litepal/tablemanager/AssociationCreator.java, line(s) 5,117
org/litepal/tablemanager/Generator.java, line(s) 4,54
org/litepal/util/DBUtility.java, line(s) 4,139

中危 应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据 

应用程序可以读取/写入外部存储器，任何应用程序都可以读取写入外部存储器的数据
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#external-storage

Files:
com/orhanobut/logger/CsvFormatStrategy.java, line(s) 101
com/ta/a/d/e.java, line(s) 43
com/tencent/a/a/a/a/b.java, line(s) 22,24,36,45
com/yalantis/ucrop/PictureMultiCuttingActivity.java, line(s) 613
com/yalantis/ucrop/util/BitmapUtils.java, line(s) 30
com/yalantis/ucrop/util/FileUtils.java, line(s) 85
com/zlx/zt/bean/constant/Config.java, line(s) 12,13,14,15,16,17
com/zlx/zt/util/ImageTools.java, line(s) 151
me/panpf/sketch/ErrorTracker.java, line(s) 29
me/panpf/sketch/util/SketchUtils.java, line(s) 238,323,324
net/moyokoo/diooto/ImageFragment.java, line(s) 106
org/litepal/Operator.java, line(s) 93
org/litepal/tablemanager/Connector.java, line(s) 36,38

中危 文件可能包含硬编码的敏感信息，如用户名、密码、密钥等 

文件可能包含硬编码的敏感信息，如用户名、密码、密钥等
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#checking-memory-for-sensitive-data-mstg-storage-10

Files:
com/gyf/immersionbar/BarConfig.java, line(s) 59,61
com/zlx/zt/util/WxUtil.java, line(s) 18
com/zlx/zt/widget/xrecyclerview/ArrowRefreshHeader.java, line(s) 23,24
me/panpf/sketch/decode/ImageSizeCalculator.java, line(s) 16
me/panpf/sketch/decode/ResizeCalculator.java, line(s) 7
me/panpf/sketch/display/ColorTransitionImageDisplayer.java, line(s) 9
me/panpf/sketch/display/DefaultImageDisplayer.java, line(s) 7
me/panpf/sketch/display/FadeInImageDisplayer.java, line(s) 9
me/panpf/sketch/display/TransitionImageDisplayer.java, line(s) 14
me/panpf/sketch/display/ZoomInImageDisplayer.java, line(s) 11
me/panpf/sketch/display/ZoomOutImageDisplayer.java, line(s) 10
me/panpf/sketch/http/HurlStack.java, line(s) 14
me/panpf/sketch/request/HelperFactory.java, line(s) 7
me/panpf/sketch/request/RequestExecutor.java, line(s) 17
me/panpf/sketch/request/RequestFactory.java, line(s) 7
org/android/spdy/SpdyProtocol.java, line(s) 42
org/litepal/util/cipher/CipherUtil.java, line(s) 10

中危 SHA-1是已知存在哈希冲突的弱哈希 

SHA-1是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/neovisionaries/ws/client/HandshakeReader.java, line(s) 163

中危 IP地址泄露 

IP地址泄露


Files:
com/ut/mini/UTHybridHelper.java, line(s) 137,144
com/zlx/zt/api/bean/WebUrl.java, line(s) 67
org/android/spdy/SpdyAgent.java, line(s) 319
org/android/spdy/SpdyRequest.java, line(s) 28,54,73,95,119,138,164,183,205,229

中危 应用程序使用不安全的随机数生成器 

应用程序使用不安全的随机数生成器
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#weak-random-number-generators

Files:
com/zlx/zt/util/RandomUtils.java, line(s) 3
com/zlx/zt/widget/car_view/CarView.java, line(s) 21
org/android/spdy/SpdyBytePool.java, line(s) 3

中危 MD5是已知存在哈希冲突的弱哈希 

MD5是已知存在哈希冲突的弱哈希
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04g-Testing-Cryptography.md#identifying-insecure-andor-deprecated-cryptographic-algorithms-mstg-crypto-4

Files:
com/ta/a/e/d.java, line(s) 29
me/panpf/sketch/util/SketchMD5Utils.java, line(s) 16
org/litepal/util/cipher/CipherUtil.java, line(s) 38

中危 可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息 

可能存在跨域漏洞。在 WebView 中启用从 URL 访问文件可能会泄漏文件系统中的敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05h-Testing-Platform-Interaction.md#static-analysis-6

Files:
com/zlx/zt/widget/webview/Html5WebView.java, line(s) 60,51

中危 应用程序包含隐私跟踪程序 

此应用程序有多个1隐私跟踪程序。跟踪器可以跟踪设备或用户，是终端用户的隐私问题。

中危 此应用可能包含硬编码机密信息 

从应用程序中识别出以下机密确保这些不是机密或私人信息
阿里移动推送的=> "com.alibaba.app.appsecret" : "5a72af6fa9e54ac99a72bea5f2abead5"
阿里移动推送的=> "com.alibaba.app.appkey" : "333549918"
QrMgt8GGYI6T52ZY5AnhtxkLzb8egpFn
258EAFA5-E914-47DA-95CA-C5AB0DC85B11
QrMgt8GGYI6T52ZY5AnhtxkLzb8egpFn3j5JELI8H6wtACbUnZ5cc3aYTsTRbmkAkRJeYbtx92LPBWm7nBO9UIl7y5i5MQNmUZNf5QENurR5tGyo7yJ2G0MBjWvy6iAtlAbacKP0SwOUeUWx5dsBdyhxa7Id1APtybSdDgicBDuNjI0mlZFUzZSS9dmN8lBD0WTVOMz0pRZbR3cysomRXOO1ghqjJdTcyDIxzpNAEszN8RMGjrzyU7Hjbmwi6YNK
6X8Y4XdM2Vhvn0KfzcEatGnWaNU=
4aa836df85316f8fe4170bf3bcd88dba

信息 应用程序记录日志信息,不得记录敏感信息 

应用程序记录日志信息,不得记录敏感信息
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05d-Testing-Data-Storage.md#logs

Files:
com/amitshekhar/DebugDB.java, line(s) 34,38,27,28
com/amitshekhar/server/ClientServer.java, line(s) 40,55,57
com/amitshekhar/utils/Utils.java, line(s) 104
com/nineoldandroids/animation/PropertyValuesHolder.java, line(s) 150,184,232,250,252,270,272,308,310,438,440,528,530
com/ta/a/e/h.java, line(s) 17,23,29,35,41
com/taobao/tlog/adapter/AdapterForTLog.java, line(s) 28,34,40,46,52,153
com/taobao/tlog/adapter/TLogConfigSwitchReceiver.java, line(s) 28,41,43,55,66,72
com/tbruyelle/rxpermissions2/RxPermissionsFragment.java, line(s) 89,45
com/tencent/a/a/a/a/b.java, line(s) 21,43,49,29,55
com/tencent/a/a/a/a/c.java, line(s) 32,46
com/tencent/a/a/a/a/d.java, line(s) 16,32
com/tencent/a/a/a/a/e.java, line(s) 14,28
com/tencent/a/a/a/a/h.java, line(s) 31,21,61,25
com/ut/mini/UTPageHitHelper.java, line(s) 350
com/ut/mini/internal/UTTeamWork.java, line(s) 83,85,94
com/yalantis/ucrop/PictureMultiCuttingActivity.java, line(s) 184
com/yalantis/ucrop/UCropActivity.java, line(s) 146
com/yalantis/ucrop/task/BitmapCropTask.java, line(s) 118
com/yalantis/ucrop/task/BitmapLoadTask.java, line(s) 127,168,197,92,133,155
com/yalantis/ucrop/util/BitmapLoadUtils.java, line(s) 119,36,67
com/yalantis/ucrop/util/EglUtils.java, line(s) 27
com/yalantis/ucrop/util/FileUtils.java, line(s) 52
com/yalantis/ucrop/util/ImageHeaderParser.java, line(s) 48,55,67,76,110,120,132,149,164,170,174,179,185,189,311,47,54,66,75,109,119,131,148,163,169,173,178,184,188
com/yalantis/ucrop/view/TransformImageView.java, line(s) 217,238,125,78
com/zlx/zt/api/interceptor/LogInterceptor.java, line(s) 21,27
com/zlx/zt/api/observer/BaseObserver.java, line(s) 23
com/zlx/zt/api/util/RetrofitCreateHelper.java, line(s) 55,61,81,116
com/zlx/zt/api/view_model/http/HttpViewModel.java, line(s) 58,75
com/zlx/zt/base/base_adapter/OnRvEndScrollListener.java, line(s) 90
com/zlx/zt/base/base_adapter/OnRvScrollListener.java, line(s) 12,16
com/zlx/zt/base/event/OnDoubleClickListener.java, line(s) 37,47,58
com/zlx/zt/bean/constant/Config.java, line(s) 25
com/zlx/zt/business/login/LoginLotteryAc.java, line(s) 167
com/zlx/zt/business/main/MainContainer.java, line(s) 119
com/zlx/zt/mu/MainContainerMu.java, line(s) 135
com/zlx/zt/util/CrashHandlerUtil.java, line(s) 66,70,107,115,61
com/zlx/zt/util/DownLoadImageService.java, line(s) 54
com/zlx/zt/util/InputTools.java, line(s) 63
com/zlx/zt/util/LogUtil.java, line(s) 11,18,21,27,30
com/zlx/zt/util/LogUtils.java, line(s) 55,39,47,63,71
com/zlx/zt/util/ScreenUtil.java, line(s) 67,110,148
com/zlx/zt/util/SoftKeyBoardListener.java, line(s) 27
com/zlx/zt/util/WxUtil.java, line(s) 66
com/zlx/zt/widget/keyboard/keyboard/KeyboardAwareLinearLayout.java, line(s) 75,131,137,122,125
com/zlx/zt/widget/popwindow/CustomPopWindow.java, line(s) 176,177,181
com/zlx/zt/widget/scaleviewpager/BaseAnimCloseViewPager.java, line(s) 60
com/zlx/zt/widget/scaleviewpager/ScaleViewPager.java, line(s) 57,70
com/zlx/zt/widget/xrecyclerview/JellyView.java, line(s) 95
com/zlx/zt/widget/xrecyclerview/StickyScrollLinearLayout.java, line(s) 83,89,94,99,124,127,137,143,153
com/zlx/zt/widget/xrecyclerview/XRecyclerView.java, line(s) 378
com/zlx/zt/wxapi/WXEntryActivity.java, line(s) 31,43,60,66
me/panpf/sketch/Configuration.java, line(s) 103,119,135,147,159,171,183,195,207,219,231,243,255,271,283,295,307,319,331,343,355,367
me/panpf/sketch/ErrorTracker.java, line(s) 68,29,34,40,44,55,57,70,78,82,86,90
me/panpf/sketch/SLog.java, line(s) 371,376,406,411,381,386,361,366,127,161,169,391,396,401
me/panpf/sketch/Sketch.java, line(s) 29,95,101
me/panpf/sketch/cache/BitmapPoolUtils.java, line(s) 43,59,65,84,102,108,21,25,41,56,62,82,99,105
me/panpf/sketch/cache/LruBitmapPool.java, line(s) 82,96,113,120,125,154,245,262,81,95,112,119,124,151,244,261,102,196,198,212,217,239
me/panpf/sketch/cache/LruDiskCache.java, line(s) 68,89,117,143,67,88,116,142,218,220
me/panpf/sketch/cache/LruMemoryCache.java, line(s) 29,42,54,68,74,28,37,41,53,67,73,33,104,117,119,129
me/panpf/sketch/cache/MemorySizeCalculator.java, line(s) 44,36
me/panpf/sketch/decode/DecodeTimeAnalyze.java, line(s) 36
me/panpf/sketch/decode/GifDecodeHelper.java, line(s) 21
me/panpf/sketch/decode/ImageDecodeUtils.java, line(s) 61,64,70,76,79,90,93,57
me/panpf/sketch/decode/ImageDecoder.java, line(s) 33,37
me/panpf/sketch/decode/ThumbnailModeDecodeHelper.java, line(s) 29
me/panpf/sketch/drawable/SketchRefBitmap.java, line(s) 76,83,71,75,82
me/panpf/sketch/http/ImageDownloader.java, line(s) 39,77,111,124,149,196,203,280,128,134,141,167,190,208,215,230,38,76,110,123,148,195,202,277,89,94,130,250
me/panpf/sketch/request/BaseRequest.java, line(s) 104,117,103,116
me/panpf/sketch/request/DisplayHelper.java, line(s) 384,419,444,460,481,486,522,294,310,47,51,56,226,233,237,244,248,252,256,263,267,274,278,285,383,417,443,459,480,485,497,503,514,518,521,525,225,413
me/panpf/sketch/request/DisplayRequest.java, line(s) 60,100,112,162,177,185,203,219,121,136,59,99,111,161,176,184,198,218
me/panpf/sketch/request/DownloadHelper.java, line(s) 100,118,71,77,84,99,117
me/panpf/sketch/request/DownloadRequest.java, line(s) 80,91,101,107,116,164,178,146,79,90,100,106,115,163,177
me/panpf/sketch/request/FreeRideDisplayRequest.java, line(s) 96
me/panpf/sketch/request/FreeRideDownloadRequest.java, line(s) 92,91
me/panpf/sketch/request/FreeRideManager.java, line(s) 62,75,90,113,133,146,161,184,61,74,85,112,132,145,156,183,93,164
me/panpf/sketch/request/LoadHelper.java, line(s) 190,202,145,148,155,189,201
me/panpf/sketch/request/LoadRequest.java, line(s) 79,89,98,132,141,155,164,180,202,218,109,125,150,170,78,88,97,129,140,154,163,179,201,217
me/panpf/sketch/uri/AbsDiskCacheUriModel.java, line(s) 61,75,87
me/panpf/sketch/uri/ApkIconUriModel.java, line(s) 40
me/panpf/sketch/uri/AppIconUriModel.java, line(s) 41,49,55,60
me/panpf/sketch/uri/DrawableUriModel.java, line(s) 35
me/panpf/sketch/uri/HttpUriModel.java, line(s) 40,49
me/panpf/sketch/util/DiskLruCache.java, line(s) 151
me/panpf/sketch/util/ExifInterface.java, line(s) 1181,1184,1245,1265,2107,2175,2481,548,556,589,600,611,624,635,646,658,669,680,687,698,713,693,925,930,975,984,1022,1074,1335,1693,1887,1898,1948,1969,1999,2085,2089,2191,2199
me/panpf/sketch/util/SketchUtils.java, line(s) 322,889,75,87
me/panpf/sketch/util/Stopwatch.java, line(s) 74,67
me/panpf/sketch/viewfun/RecyclerCompatFunction.java, line(s) 49,48
me/panpf/sketch/viewfun/ShowDownloadProgressFunction.java, line(s) 56
me/panpf/sketch/viewfun/ShowPressedFunction.java, line(s) 59
me/panpf/sketch/zoom/BlockDisplayer.java, line(s) 80,83,146,170,177,189,220,229,79,82,145,169,176,188,219,228,152,183,360,369,378,388
me/panpf/sketch/zoom/FlingRunner.java, line(s) 56,74,83,98,55,73,82,97,28,78
me/panpf/sketch/zoom/ImageZoomer.java, line(s) 136,149,153,162,179,186
me/panpf/sketch/zoom/LocationRunner.java, line(s) 35,47,34,46,41
me/panpf/sketch/zoom/ScaleDragGestureDetector.java, line(s) 180
me/panpf/sketch/zoom/ScaleDragHelper.java, line(s) 84,105,118,124,132,137,156,192,201,441,83,104,117,123,131,136,155,191,200,440,491,508,492,509
me/panpf/sketch/zoom/ScrollBarHelper.java, line(s) 46,91,45,90
me/panpf/sketch/zoom/ZoomRunner.java, line(s) 40,39,27
me/panpf/sketch/zoom/block/BlockDecoder.java, line(s) 48,55,65,73,47,54,64,72,39
me/panpf/sketch/zoom/block/BlockExecutor.java, line(s) 49,105,48,104
me/panpf/sketch/zoom/block/BlockManager.java, line(s) 63,70,112,128,144,150,156,212,218,227,233,242,248,257,263,276,285,294,303,467,474,488,504,517,544,569,88,180,62,69,111,127,140,149,155,211,217,226,232,241,247,256,262,272,281,290,299,466,473,487,501,516,542,568,557
me/panpf/sketch/zoom/block/CallbackHandler.java, line(s) 106,112,122,127,136,149
me/panpf/sketch/zoom/block/DecodeHandler.java, line(s) 152,151,63
me/panpf/sketch/zoom/block/InitHandler.java, line(s) 74,73,45,50,61
net/moyokoo/diooto/tools/Fucking.java, line(s) 47,51,55,74,78,82
net/moyokoo/diooto/tools/NoScrollViewPager.java, line(s) 40
org/android/spdy/NetTimeGaurd.java, line(s) 33,42
org/android/spdy/ProtectedPointerTest.java, line(s) 14,21,40
org/android/spdy/spduLog.java, line(s) 10,46,22,16,28,34,40
org/greenrobot/eventbus/Logger.java, line(s) 85,90
org/greenrobot/eventbus/util/ErrorDialogConfig.java, line(s) 34
org/greenrobot/eventbus/util/ErrorDialogManager.java, line(s) 185
org/greenrobot/eventbus/util/ExceptionToResourceMapping.java, line(s) 25
org/litepal/crud/SaveHandler.java, line(s) 233
org/litepal/tablemanager/AssociationCreator.java, line(s) 65,102,113,244
org/litepal/tablemanager/AssociationUpdater.java, line(s) 38,88,130,152,230,232,234,236
org/litepal/tablemanager/Upgrader.java, line(s) 26,87,100,132,140,148,161,178,180,182
org/litepal/util/LitePalLog.java, line(s) 12,18
org/litepal/util/cipher/AESCrypt.java, line(s) 88,94,43,71
razerdp/basepopup/BasePopupSupporterManager.java, line(s) 55,135
razerdp/basepopup/BasePopupWindow.java, line(s) 124,275,355,391,464,486,577,879,1089
razerdp/basepopup/BasePopupWindowProxy.java, line(s) 96,156,183
razerdp/basepopup/PopupCompatManager.java, line(s) 60,75
razerdp/basepopup/PopupDecorViewProxy.java, line(s) 340,218,240,364,679,748,766,770,778,784,936
razerdp/basepopup/PopupMaskLayout.java, line(s) 40
razerdp/basepopup/PopupReflectionHelper.java, line(s) 25
razerdp/basepopup/WindowManagerProxy.java, line(s) 41,66,90,98,137,182
razerdp/blur/BlurHelper.java, line(s) 66,108,45,48,82,98,114,135
razerdp/blur/BlurImageView.java, line(s) 72,84,88,125,300,322,77,82,138,170,235,252,254,303
razerdp/util/log/PopupLog.java, line(s) 76,80,84,92,88,90

信息 此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它 

此应用程序将数据复制到剪贴板。敏感数据不应复制到剪贴板，因为其他应用程序可以访问它
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x04b-Mobile-App-Security-Testing.md#clipboard

Files:
com/zlx/zt/util/ClipboardUtils.java, line(s) 4,17,31,45

安全 此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击 

此应用程序使用SSL Pinning 来检测或防止安全通信通道中的MITM攻击
https://github.com/MobSF/owasp-mstg/blob/master/Document/0x05g-Testing-Network-Communication.md#testing-custom-certificate-stores-and-certificate-pinning-mstg-network-4

Files:
com/ta/a/d/c.java, line(s) 48,49,47,46
com/ta/a/d/f.java, line(s) 68,70,98
com/ta/a/d/g.java, line(s) 43,44,42,41
com/zlx/zt/api/util/RetrofitCreateHelper.java, line(s) 77,62,106,128

关注 应用程序可能与位于OFAC制裁国家 (中国) 的服务器 (mpush-api.aliyun.com) 通信。 

{'ip': '106.11.248.144', 'country_short': 'CN', 'country_long': '中国', 'region': '浙江', 'city': '杭州', 'latitude': '30.293650', 'longitude': '120.161583'}

安全评分: ( 奥比岛 3.1.1)