14 Trackers

We have found code signature of these trackers in the application:

A tracker is a piece of software meant to collect data about you or your usages. We do not guarantee the exhaustiveness of this list.

Here is the list of trackers signatures found by static analysis in this APK. This is not a proof of activity of these trackers. The application could contain tracker(s) we do not know yet.
If you have doubts about this report, contact us at contact@exodus-privacy.eu.org.

13 Permissions

We have found these permissions in the application:

android.permission.ACCESS_COARSE_LOCATION Dangerous
android.permission.ACCESS_FINE_LOCATION Dangerous
android.permission.ACCESS_NETWORK_STATE Normal
android.permission.ACCESS_WIFI_STATE Normal
android.permission.GET_ACCOUNTS Normal
android.permission.INTERNET Dangerous
android.permission.READ_EXTERNAL_STORAGE Normal
android.permission.RECEIVE_BOOT_COMPLETED Normal
android.permission.VIBRATE Normal
android.permission.WAKE_LOCK Normal
android.permission.WRITE_EXTERNAL_STORAGE Dangerous
com.google.android.c2dm.permission.RECEIVE Normal
fr.leboncoin.permission.C2D_MESSAGE Normal
Permissions are actions the application can do on your phone.

40 DNS queries

During the execution, the application has requested these domain resolutions:

mediation.adnxs.com 37.252.172.103 ⛔️
fra1-mobile.adnxs.com 37.252.172.103 ⛔️
fra1-mobile.adnxs.com 37.252.172.103 ⛔️
s3-eu-west-1.amazonaws.com 54.231.130.196
s3-eu-west-1.amazonaws.com 52.218.64.220
app-measurement.com 216.58.204.142
t.appsflyer.com 34.250.238.244 ⛔️
events.appsflyer.com 54.72.189.21 ⛔️
register.appsflyer.com 52.208.135.112 ⛔️
stats.appsflyer.com 52.48.53.213 ⛔️
events.appsflyer.com 52.49.8.11 ⛔️
logws1357.ati-host.net 104.94.163.55 ⛔️
settings.crashlytics.com 107.22.199.176 ⛔️
e.crashlytics.com 54.225.214.241 ⛔️
googleads.g.doubleclick.net 172.217.19.226 ⛔️
graph.facebook.com 157.240.21.16
clients4.google.com 216.58.204.142
www.google.com 172.217.18.164
reminders-pa.googleapis.com 216.58.213.138
pagead2.googlesyndication.com 172.217.19.226
tpc.googlesyndication.com 216.58.204.129
csi.gstatic.com 172.217.19.195
r5---sn-4g5e6ns7.gvt1.com 173.194.182.74
www.leboncoin.fr 193.164.196.82
apimobile.leboncoin.fr 193.164.196.32
mobile.leboncoin.fr 193.164.197.33
api.leboncoin.fr 193.164.196.227
img5.leboncoin.fr 193.164.197.50
img6.leboncoin.fr 193.164.196.60
img2.leboncoin.fr 193.164.196.50
img7.leboncoin.fr 193.164.197.60
img4.leboncoin.fr 193.164.197.30
img0.leboncoin.fr 193.164.196.30
img3.leboncoin.fr 193.164.197.40
img1.leboncoin.fr 193.164.196.40
eule1.pmu.fr 109.232.197.37
cis.schibsted.com 54.77.229.14 ⛔️
collector.schibsted.io 34.248.46.237 ⛔️
tags.tiqcdn.com 68.232.35.180 ⛔️
logc153.xiti.com 62.161.94.220 ⛔️
A DNS resolution can confirm that a tracker was looking for the IP address of its associated server.

Sent data to http://www.leboncoin.fr/android_mediametrie

                                                Layer HTTP:
	POST /android_mediametrie HTTP/1.1\r\n
	Accept-Encoding: gzip\r\n
	Connection: Keep-Alive\r\n
	Request Method: POST
	POST /android_mediametrie HTTP/1.1\r\n
	Content length: 0
	Request URI: /android_mediametrie
	Full request URI: http://www.leboncoin.fr/android_mediametrie
	User-Agent: LBC;Android;6.0.1;VirtualBox;tab;8ab7f90ef81ee12b;;4.1.7.0;41700;-1\r\n
	Group: Sequence
	Content-Type: application/x-www-form-urlencoded\r\n
	Host: www.leboncoin.fr\r\n
	HTTP request 1/1
	Severity level: Chat
	Content-Length: 0\r\n
	Expert Info (Chat/Sequence): POST /android_mediametrie HTTP/1.1\r\n
	Request Version: HTTP/1.1
	\r\n

                                            

Sent data to http://cis.schibsted.com/api/v1/identify

                                                Layer HTTP:
	POST /api/v1/identify HTTP/1.1\r\n
	Content-Type: application/json; charset=UTF-8\r\n
	Request Method: POST
	File Data: 97 bytes
	Origin: null\r\n
	User-Agent: Android SPT Tracker 4.0.2_playservices_10_2_0 1401 - sdrn:schibsted:client:fr.leboncoin:41700:Leboncoin (innotek GmbH,VirtualBox,android_x86,23)\r\n
	Group: Sequence
	Severity level: Chat
	Host: cis.schibsted.com\r\n
	Accept-Encoding: gzip\r\n
	Connection: Keep-Alive\r\n
	POST /api/v1/identify HTTP/1.1\r\n
	Content length: 97
	Request URI: /api/v1/identify
	Full request URI: http://cis.schibsted.com/api/v1/identify
	Accept: application/json\r\n
	HTTP request 1/1
	Content-Length: 97\r\n
	Expert Info (Chat/Sequence): POST /api/v1/identify HTTP/1.1\r\n
	Request Version: HTTP/1.1
	\r\n

Layer JSON:
	String value: 0ea76bd4-3a79-432d-9c0f-c6f6b3cf8e66
	Key: adId
	Object
	Member Key: adId
	String value: 0ea76bd4-3a79-432d-9c0f-c6f6b3cf8e66
	Key: deviceId
	Member Key: deviceId

                                            

Sent data to http://cis.schibsted.com/api/v1/identify

                                                Layer HTTP:
	POST /api/v1/identify HTTP/1.1\r\n
	Content-Type: application/json; charset=UTF-8\r\n
	Request Method: POST
	File Data: 152 bytes
	Origin: null\r\n
	User-Agent: Android SPT Tracker 4.0.2_playservices_10_2_0 1401 - sdrn:schibsted:client:fr.leboncoin:41700:Leboncoin (innotek GmbH,VirtualBox,android_x86,23)\r\n
	Group: Sequence
	Severity level: Chat
	Host: cis.schibsted.com\r\n
	Accept-Encoding: gzip\r\n
	Connection: Keep-Alive\r\n
	POST /api/v1/identify HTTP/1.1\r\n
	Content length: 152
	Request URI: /api/v1/identify
	Full request URI: http://cis.schibsted.com/api/v1/identify
	Accept: application/json\r\n
	HTTP request 1/1
	Content-Length: 152\r\n
	Expert Info (Chat/Sequence): POST /api/v1/identify HTTP/1.1\r\n
	Request Version: HTTP/1.1
	\r\n

Layer JSON:
	String value: 0ea76bd4-3a79-432d-9c0f-c6f6b3cf8e66
	Key: adId
	Object
	Member Key: adId
	String value: 0ea76bd4-3a79-432d-9c0f-c6f6b3cf8e66
	String value: 0ea76bd4-3a79-432d-9c0f-c6f6b3cf8e66
	Key: deviceId
	Key: environmentId
	Member Key: deviceId
	Member Key: environmentId

                                            

Sent data to http://collector.schibsted.io/api/v1/track

                                                Layer HTTP:
	POST /api/v1/track HTTP/1.1\r\n
	Content-Type: application/json; charset=utf-8\r\n
	Request Method: POST
	File Data: 1363 bytes
	User-Agent: Android SPT Tracker 4.0.2_playservices_10_2_0 1401 - sdrn:schibsted:client:fr.leboncoin:41700:Leboncoin (innotek GmbH,VirtualBox,android_x86,23)\r\n
	Group: Sequence
	Severity level: Chat
	Host: collector.schibsted.io\r\n
	Accept-Encoding: gzip\r\n
	Connection: Keep-Alive\r\n
	POST /api/v1/track HTTP/1.1\r\n
	Content length: 1363
	Request URI: /api/v1/track
	Full request URI: http://collector.schibsted.io/api/v1/track
	Accept: application/json\r\n
	HTTP request 1/1
	Content-Length: 1363\r\n
	Expert Info (Chat/Sequence): POST /api/v1/track HTTP/1.1\r\n
	Request Version: HTTP/1.1
	\r\n

Layer JSON:
	Array
	String value: 0ea76bd4-3a79-432d-9c0f-c6f6b3cf8e66
	Key: environmentId
	Object
	Member Key: device
	String value: android_x86
	String value [truncated]: eyJpc3N1ZWRBdCI6IjIwMTctMTEtMTVUMjI6MzNaIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6ImRpciIsImtpZCI6IjIifQ..rFp0FIWXDUcwM8sjEgnwzw.uCe8HQHMzBXYBLk5WNrQC4NoOXO5Gbjw185i2SWeu-uIE2EGsUe7byaJuXtiZgCWcAic01NQ3F2LbS1rQML_-i
	String value: innotek GmbH
	String value: VirtualBox
	String value: connected
	String value: ethernet
	String value: NetworkConnectivity
	String value: 4.4.62-android-x86
	String value: android_x86
	String value: 6.0.1
	String value: 23
	String value: Device
	String value: sdrn:schibsted:application:fr.leboncoin:41700:Leboncoin
	String value: 41700
	String value: Application
	String value: sdrn:schibsted:app:android-sdk:4.0.2_playservices_10_2_0-1401
	String value: SPT Android Event Tracker
	String value: Android
	String value: 4.0.2_playservices_10_2_0-1401
	String value: Tracker
	String value: sdrn:leboncoin:environment:null
	String value: 2017-11-16T00:33:22.307Z
	String value: cd544b2e-b924-43b9-ae1f-1f56d4e0269d
	String value: sdrn:schibsted:client:leboncoin
	String value: fr.leboncoin:41700:Leboncoin
	String value: AndroidApp
	String value: Provider
	String value: http://schema.schibsted.com/events/tracker-event.json/93.json
	String value: Launch
	Key: hardware
	Key: jweIds
	Key: manufacturer
	Key: model
	Key: networkState
	Key: networkType
	Key: networks
	Key: @type
	Key: networkConnectivity
	Key: osVersion
	Key: product
	Key: release
	Key: sdkVersion
	Key: @type
	Key: device
	Key: @id
	Key: version
	Key: @type
	Key: object
	Key: @id
	Key: name
	Key: type
	Key: version
	Key: @type
	Key: tracker
	Key: @id
	Key: actor
	Key: creationDate
	Key: @id
	Key: @id
	Key: product
	Key: productType
	Key: @type
	Key: provider
	Key: schema
	Key: @type
	Object
	Object
	Object
	Object
	Object
	Object
	Object
	Member Key: environmentId
	Member Key: hardware
	Member Key: jweIds
	Member Key: manufacturer
	Member Key: model
	Member Key: networkConnectivity
	Member Key: networks
	Member Key: networkState
	Member Key: networkType
	Member Key: @type
	Member Key: osVersion
	Member Key: product
	Member Key: release
	Member Key: sdkVersion
	Member Key: @type
	Member Key: object
	Member Key: @id
	Member Key: version
	Member Key: @type
	Member Key: tracker
	Member Key: @id
	Member Key: name
	Member Key: type
	Member Key: version
	Member Key: @type
	Member Key: actor
	Member Key: @id
	Member Key: creationDate
	Member Key: @id
	Member Key: provider
	Member Key: @id
	Member Key: product
	Member Key: productType
	Member Key: @type
	Member Key: schema
	Member Key: @type

                                            

Sent data to http://collector.schibsted.io/api/v1/track

                                                Layer HTTP:
	POST /api/v1/track HTTP/1.1\r\n
	Content-Type: application/json; charset=utf-8\r\n
	Request Method: POST
	File Data: 1517 bytes
	User-Agent: Android SPT Tracker 4.0.2_playservices_10_2_0 1401 - sdrn:schibsted:client:fr.leboncoin:41700:Leboncoin (innotek GmbH,VirtualBox,android_x86,23)\r\n
	Group: Sequence
	Severity level: Chat
	Host: collector.schibsted.io\r\n
	Accept-Encoding: gzip\r\n
	Connection: Keep-Alive\r\n
	POST /api/v1/track HTTP/1.1\r\n
	Prev request in frame: 1726
	Content length: 1517
	Request URI: /api/v1/track
	Full request URI: http://collector.schibsted.io/api/v1/track
	Accept: application/json\r\n
	HTTP request 2/2
	Content-Length: 1517\r\n
	Expert Info (Chat/Sequence): POST /api/v1/track HTTP/1.1\r\n
	Request Version: HTTP/1.1
	\r\n

Layer JSON:
	Key: environmentId
	Member Key: device
	String value: 0ea76bd4-3a79-432d-9c0f-c6f6b3cf8e66
	Number value: 0.0
	Object
	Array
	Key: hardware
	Key: jweIds
	Key: manufacturer
	Key: model
	Key: networkState
	Key: networkType
	Key: networks
	Key: @type
	Key: networkConnectivity
	Key: osVersion
	Key: product
	Key: release
	Key: sdkVersion
	Key: @type
	Key: device
	Key: accuracy
	Key: latitude
	Key: longitude
	Key: timestamp
	Key: @type
	Key: location
	Key: category
	Key: currency
	Key: price
	Key: @id
	Key: @type
	Key: object
	Key: @id
	Key: name
	Key: type
	Key: version
	Key: @type
	Key: tracker
	Key: @id
	Key: actor
	Key: creationDate
	Key: @id
	Key: @id
	Key: product
	Key: productType
	Key: @type
	Key: provider
	Key: schema
	Key: @type
	Member Key: environmentId
	Member Key: hardware
	Member Key: jweIds
	Member Key: manufacturer
	Member Key: model
	Member Key: networkConnectivity
	Member Key: networks
	Member Key: networkState
	Member Key: networkType
	Member Key: @type
	Member Key: osVersion
	Member Key: product
	Member Key: release
	Member Key: sdkVersion
	Member Key: @type
	Member Key: location
	Member Key: accuracy
	Member Key: latitude
	Member Key: longitude
	Member Key: timestamp
	Member Key: @type
	Member Key: object
	Member Key: category
	Member Key: currency
	Member Key: price
	Member Key: @id
	Member Key: @type
	Member Key: tracker
	Member Key: @id
	Member Key: name
	Member Key: type
	Member Key: version
	Member Key: @type
	Member Key: actor
	Member Key: @id
	Member Key: creationDate
	Member Key: @id
	Member Key: provider
	Member Key: @id
	Member Key: product
	Member Key: productType
	Member Key: @type
	Member Key: schema
	Member Key: @type
	String value: android_x86
	String value [truncated]: eyJpc3N1ZWRBdCI6IjIwMTctMTEtMTVUMjI6MzNaIiwiZW5jIjoiQTEyOENCQy1IUzI1NiIsImFsZyI6ImRpciIsImtpZCI6IjIifQ..rFp0FIWXDUcwM8sjEgnwzw.uCe8HQHMzBXYBLk5WNrQC4NoOXO5Gbjw185i2SWeu-uIE2EGsUe7byaJuXtiZgCWcAic01NQ3F2LbS1rQML_-i
	String value: innotek GmbH
	String value: VirtualBox
	String value: connected
	String value: ethernet
	String value: NetworkConnectivity
	String value: 4.4.62-android-x86
	String value: android_x86
	String value: 6.0.1
	String value: 23
	String value: Device
	String value: 2.718
	String value: 47.0401955
	String value: 2.9005723
	String value: 1510788828082
	String value: GeoCoordinates
	String value: maison > Chaussures
	String value: 
	String value: sdrn:leboncoin:classified:1304715468
	String value: ClassifiedAd
	String value: sdrn:schibsted:app:android-sdk:4.0.2_playservices_10_2_0-1401
	String value: SPT Android Event Tracker
	String value: Android
	String value: 4.0.2_playservices_10_2_0-1401
	String value: Tracker
	String value: sdrn:leboncoin:environment:null
	String value: 2017-11-16T00:33:49.888Z
	String value: 5d1364c2-0853-456d-a24f-7fd9498ba946
	String value: sdrn:schibsted:client:leboncoin
	String value: fr.leboncoin:41700:Leboncoin
	String value: AndroidApp
	String value: Provider
	String value: http://schema.schibsted.com/events/tracker-event.json/93.json
	String value: View
	Object
	Object
	Object
	Object
	Object
	Object
	Object
	Object