apk-scanner.com

Fluent by Audio & Podcast

com.englishingames.listening · Build 2.6.1

Analysis: complete. Static analysis completed for this build. A grade is not a guarantee of safety. Historical verification does not establish current reachability.

Grade / score
F · 0/100
Finding categories
2
Occurrences
191
Scanned
2026-10-09T22:27:06.520Z
Document issued
2026-10-13T18:41:45.073Z
Historical verifications
50

Finding evidence

Open a category to review its occurrences. Printing includes all categories and occurrences.

DigitalOcean Spaces reference — confirmed publicly readable · critical · 190 occurrences

Confirm the bucket/database denies anonymous read (enable auth / storage rules / RLS), then audit its contents for data already exposed while it was open.

CWE-200 · CWE-284 · MASVS-STORAGE-2

  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███ · Historical verification at scan time
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
  • https://███████████.fra1.cdn.digitaloceanspaces.com/███
Google API key (client-shipped; restriction unverified) · low · 1 occurrence

Restrict the API key (application + API restrictions in Google Cloud Console); a client-shipped key is public, so restriction is the control.

CWE-798 · MASVS-STORAGE-1

  • AIza•••••••• (21–40 chars, redacted)

Control coverage

Mapped static evidence does not establish a control pass. Manual assessment remains separate.

ControlRequirementRecorded status
MASVS-STORAGE-1The app securely stores sensitive data.Review signal
MASVS-STORAGE-2The app prevents leakage of sensitive data.Historical verification
MASVS-CRYPTO-1The app employs current strong cryptography and uses it according to best practices.No static findings · not a pass
MASVS-CRYPTO-2The app performs key management according to best practices.No static findings · not a pass
MASVS-AUTH-1The app uses secure authentication and authorization protocols.Manual assessment
MASVS-AUTH-2The app performs local authentication securely.Manual assessment
MASVS-AUTH-3The app secures sensitive operations with additional authentication.Manual assessment
MASVS-NETWORK-1The app secures all network traffic according to current best practices.No static findings · not a pass
MASVS-NETWORK-2The app verifies the identity of the remote endpoint (e.g. certificate pinning).No static findings · not a pass
MASVS-PLATFORM-1The app uses IPC mechanisms securely.No static findings · not a pass
MASVS-PLATFORM-2The app uses WebViews securely.No static findings · not a pass
MASVS-PLATFORM-3The app uses the user interface securely.Manual assessment
MASVS-CODE-1The app requires an up-to-date platform version.No static findings · not a pass
MASVS-CODE-2The app has a mechanism for enforcing updates.Manual assessment
MASVS-CODE-3The app only uses software components without known vulnerabilities.No static findings · not a pass
MASVS-CODE-4The app validates and sanitizes all untrusted inputs and follows secure-coding practice.No static findings · not a pass
MASVS-RESILIENCE-1The app validates the integrity of the platform.Manual assessment
MASVS-RESILIENCE-2The app implements anti-tampering mechanisms.Manual assessment
MASVS-RESILIENCE-3The app implements anti-static-analysis mechanisms.Manual assessment
MASVS-RESILIENCE-4The app implements anti-dynamic-analysis techniques.Manual assessment
MASVS-PRIVACY-1The app minimizes access to sensitive data and resources.No static findings · not a pass
MASVS-PRIVACY-2The app prevents identification of the user.No static findings · not a pass
MASVS-PRIVACY-3The app is transparent about data collection and usage.No static findings · not a pass
MASVS-PRIVACY-4The app offers user control over their data.Manual assessment
Build identity and signature
Scan ID
ff014474-95bb-49f5-b74d-0a1d503fe99c
APK SHA-256
e5f9d99b662962edfaa2423ae372d3c5d111fa924a70fe2c7225071fb043d88a
Capsule SHA-256
f1c7180f3905a5e77c96d2741c262e77e211e9283c8dd86592e591514dfdbff8
Signing key
IE6LeZNX4dAAPLGr

Verify the signed JSON at apk-scanner.com/verify. This printed view is a presentation of the signed record; the JSON is the verification artifact.