# Blossom

状态：active
Platform：android
Package：com.conceptivapps.blossom
Version：1.56.4
Opportunity：2026-06-10-blossom-plant-identifier

## 摘要

- 包类型：xapk，inner APK 数：3
- 引擎 / 框架：native
- SDK 线索：admob, amplitude, firebase, revenuecat
- Endpoint candidates：80
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.conceptivapps.blossom（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 21 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 80 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 15 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, amplitude, firebase, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_COARSE_LOCATION`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.CAMERA`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.READ_PHONE_STATE`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.SCHEDULE_EXACT_ALARM`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.android.vending.BILLING`
- `com.applovin.array.apphub.permission.BIND_APPHUB_SERVICE`
- `com.conceptivapps.blossom.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`

### 组件

- Activities：androidx.compose.ui.tooling.PreviewActivity, com.amazon.aps.ads.activity.ApsInterstitialActivity, com.amazon.device.ads.DTBAdActivity, com.amazon.device.ads.DTBInterstitialActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.apalon.blossom.blogTab.screens.video.BlogVideoActivity, com.apalon.blossom.legal.screens.LegalActivity, com.apalon.blossom.legal.screens.PrivacyBannerActivity, com.apalon.blossom.legal.screens.PrivacySettingsActivity, com.apalon.blossom.media.screens.video.VideoPlayerActivity, com.apalon.blossom.screens.main.MainActivity, com.applovin.adview.AppLovinFullscreenActivity, com.applovin.creative.MaxCreativeDebuggerActivity, com.applovin.creative.MaxCreativeDebuggerDisplayedAdActivity, com.applovin.mediation.MaxDebuggerActivity, com.applovin.mediation.MaxDebuggerAdUnitDetailActivity, com.applovin.mediation.MaxDebuggerAdUnitWaterfallsListActivity, com.applovin.mediation.MaxDebuggerAdUnitsListActivity, com.applovin.mediation.MaxDebuggerCmpNetworksListActivity, com.applovin.mediation.MaxDebuggerDetailActivity, com.applovin.mediation.MaxDebuggerMultiAdActivity, com.applovin.mediation.MaxDebuggerTcfConsentStatusesListActivity, com.applovin.mediation.MaxDebuggerTcfInfoListActivity, com.applovin.mediation.MaxDebuggerTcfStringActivity, com.applovin.mediation.MaxDebuggerTestLiveNetworkActivity, com.applovin.mediation.MaxDebuggerTestModeNetworkActivity, com.applovin.mediation.MaxDebuggerUnifiedFlowActivity, com.applovin.mediation.MaxDebuggerWaterfallSegmentsActivity, com.applovin.mediation.hybridAds.MaxHybridMRecAdActivity, com.applovin.mediation.hybridAds.MaxHybridNativeAdActivity, com.applovin.sdk.AppLovinWebViewActivity, com.bendingspoons.concierge.ui.secretmenu.IDsActivity, com.bendingspoons.forceupdater.internal.ForceUpdateActivity, com.bendingspoons.injet.ui.InjetPresenterActivity, com.bendingspoons.oracle.secretmenu.RedeemGiftCodeActivity, com.bendingspoons.secretmenu.ui.SecretMenuActivity, com.bendingspoons.secretmenu.ui.items.exit.ExitActivity, com.bendingspoons.uicomponent.opensource.OpenSourceLibrariesActivity, com.bytedance.sdk.openadsdk.activity.TTAdActivity, com.bytedance.sdk.openadsdk.activity.TTAppOpenAdActivity, com.bytedance.sdk.openadsdk.activity.TTDelegateActivity, com.bytedance.sdk.openadsdk.activity.TTFullScreenExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.TTFullScreenVideoActivity, com.bytedance.sdk.openadsdk.activity.TTInterstitialActivity, com.bytedance.sdk.openadsdk.activity.TTInterstitialExpressActivity, com.bytedance.sdk.openadsdk.activity.TTLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTPlayableLandingPageActivity, com.bytedance.sdk.openadsdk.activity.TTRewardExpressVideoActivity, com.bytedance.sdk.openadsdk.activity.TTRewardVideoActivity, com.bytedance.sdk.openadsdk.activity.TTVideoLandingPageLink2Activity, com.bytedance.sdk.openadsdk.activity.TTWebsiteActivity, com.facebook.CustomTabActivity, com.facebook.CustomTabMainActivity, com.facebook.FacebookActivity, com.facebook.ads.AudienceNetworkActivity, com.fyber.inneractive.sdk.activities.FyberReportAdActivity, com.fyber.inneractive.sdk.activities.InneractiveFullscreenAdActivity, com.fyber.inneractive.sdk.activities.InneractiveInternalBrowserActivity, com.fyber.inneractive.sdk.activities.InneractiveRichMediaVideoPlayerActivityCore, com.fyber.inneractive.sdk.activities.InternalStoreWebpageActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.inmobi.ads.rendering.InMobiAdActivity, com.ironsource.mediationsdk.testSuite.TestSuiteActivity, com.ironsource.sdk.controller.ControllerActivity, com.ironsource.sdk.controller.InterstitialActivity, com.ironsource.sdk.controller.OpenUrlActivity, com.mobilefuse.sdk.MobileFuseFullscreenActivity, com.mobilefuse.sdk.MobileFuseFullscreenTransparentActivity, com.mobilefuse.sdk.ad.rendering.splashad.MobileFuseSplashAdActivity, com.mobilefuse.sdk.experimental.NativeInterstitialActivity, com.pubmatic.sdk.common.browser.POBInternalBrowserActivity, com.pubmatic.sdk.webrendering.mraid.POBVideoPlayerActivity, com.pubmatic.sdk.webrendering.ui.POBFullScreenActivity, com.smaato.sdk.core.browser.SmaatoSdkBrowserActivity, com.smaato.sdk.interstitial.view.InterstitialAdActivity, com.smaato.sdk.rewarded.view.RewardedInterstitialAdActivity, com.unity3d.ads.adplayer.FullScreenWebViewDisplay, com.unity3d.services.ads.adunit.AdUnitActivity, com.unity3d.services.ads.adunit.AdUnitSoftwareActivity, com.unity3d.services.ads.adunit.AdUnitTransparentActivity, com.unity3d.services.ads.adunit.AdUnitTransparentSoftwareActivity, com.vungle.ads.internal.ui.VungleActivity, com.vungle.warren.ui.VungleActivity, net.pubnative.lite.sdk.consent.UserConsentActivity, net.pubnative.lite.sdk.contentinfo.AdFeedbackActivity, net.pubnative.lite.sdk.interstitial.activity.MraidInterstitialActivity, net.pubnative.lite.sdk.interstitial.activity.VastInterstitialActivity, net.pubnative.lite.sdk.rewarded.activity.MraidRewardedActivity, net.pubnative.lite.sdk.rewarded.activity.VastRewardedActivity
- Services：androidx.camera.core.impl.MetadataHolderService, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemalarm.SystemAlarmService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.apalon.android.sessiontracker.SessionService, com.applovin.impl.adview.activity.FullscreenAdService, com.bytedance.sdk.openadsdk.multipro.aidl.BinderPoolService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.sessions.SessionLifecycleService
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryChargingProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$BatteryNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$NetworkStateProxy, androidx.work.impl.background.systemalarm.ConstraintProxy$StorageNotLowProxy, androidx.work.impl.background.systemalarm.ConstraintProxyUpdateReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, com.apalon.blossom.notifications.content.BootReceiver, com.apalon.blossom.notifications.content.ReminderAlarmReceiver, com.facebook.AuthenticationTokenManager$CurrentAuthenticationTokenChangedBroadcastReceiver, com.facebook.CurrentAccessTokenExpirationBroadcastReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, net.pubnative.lite.sdk.receiver.VolumeChangedActionReceiver
- Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider, com.applovin.sdk.AppLovinInitProvider, com.facebook.ads.AudienceNetworkContentProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.ironsource.lifecycle.IronsourceLifecycleProvider, com.mobilefuse.sdk.MobileFuseSdkInitProvider, com.smaato.sdk.core.lifecycle.ProcessLifecycleOwnerInitializer, com.squareup.picasso.PicassoProvider

## SDK / Endpoint

### SDK

- `admob`
- `amplitude`
- `firebase`
- `revenuecat`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://aps-test.staging.unityads.unity3d.com/operative-event/click
- https://aps-test.staging.unityads.unity3d.com/operative-event/video_start
- https://aps-test.staging.unityads.unity3d.com/operative-event/first_quartile
- https://aps-test.staging.unityads.unity3d.com/operative-event/midpoint
- https://aps-test.staging.unityads.unity3d.com/operative-event/third_quartile
- https://aps-test.staging.unityads.unity3d.com/operative-event/video_end
- https://cdn-store-icons-akamai-prd.unityads.unity3d.com/store-icons/24f664ed-058e-47a9-a083-9f93ccbe78a1.jpg
- https://cdn-creatives-cf-prd.acquire.unity3dusercontent.com/assets/63480d37a6b7e69bbbd0000d/VP9_high.webm
- https://cdn-creatives-cf-prd.acquire.unity3dusercontent.com/assets/63480d37a6b7e69bbbd0000d/b30-400.mp4
- https://cdn-creatives-cf-prd.acquire.unity3dusercontent.com/assets/6319b702d04dc7ab04b98ba1/abb04c2f-6b18-4317-9644-0fd1ee94bbdd.jpg
- https://events.mz.unity3d.com/operative/{{placement}}?data=H4sIAAAAAAAA_2RST5OquhP9NMPGGiv8c3TBglHEOAI_FVHZ3IIkSiABLokifPpf4fV5X9XbnXSf06dPV5LUbapbbZlKUtMNuRNmabqS3JCkVQmxpaYXpE6w_mlqQP80pgB9ppeZ8QkmM3OCVUOffmlKeisxIxBbqOLjW0llp-NxgsWYPBJeM6KgqizJc2TY1cRq6YUqqLqVsumsua1gcqeIeElBrI3r_POsMGGWTx43MTJftaChpJTJMMiqq0Y2CZXKpUk4aaum8BNOrL_PiDRiICrXhA_LqcbUVBVGLNnciMIop9LGYZOggpbXV_Fuij-IE0yfPn-Gvp9Bg2mZMAv8Lb19SiIH32dEoFTi3ahZIi9Vw62kxE1FsSJQQ0i5IKWgsrOMKXhV9rQnljaZGrr5NTMUgd8hNABMRSbCAoqsClJapFtnqYtoQNfw0EPVp1DAcmeiOZzAoj5F8_VsPJDQyqZBftA38wF_e_EpZqnj39HqO4N5DVAZsaGHV1sa5LaAfKmeOzjxQvjU4GNBg9zpfdrS86luYV5RP7RbP7dN7-jI-LjLgzkAwcJ5bELG49CWXuio5_DaxrmtnsMsg4NWW4qzHonzacfi__rnqWb28dEEMK_5-fjo4_2gmd2wGxl4FWWpM7ulq4IGPM7Slf_UIHfYDelPzKMMu1EB8-rh51vNW1x7L4emt7DbzXxdpO98OwDzaqixZ2YmOi_c6v7i2vv9Vd0stg8_jPDQJ8_bOZofblsvtB9-XwjIWTYc2QuLbjNf1-fT9sWBhrew1RenRx2cQL4sUKf2sSvkkCXmrMSndYZddk-pqaacAXIcOC8c-sWG-_d0DwXkDxZrSxG5UYc4A6m-Nl97C7w6D566t29pemRGfNz--y4t4tOhD_yupWi1vhOXsXgOJzFfCqQdBCx99UzhBOb4t7_8Fp6Kf8ea5P4JmztHatiJdkG4cxCQTexmgZcvge_gQ3RYA6SvA3xs-0O42x2AaPaaz0l47g6HSI16_7E_TtXUUbchc2b_2z8_ZYmf9xpw1iI6YKe_bMf-3XZ-NHkt-fXrq1uXP3EgWL6fNYmpRlfk_nJNmbuGzapWaUl6p6Q9JJZX9ZSx5ENbmmMw-tCmXoJoKSuRfejfI1hKwkZegkbBfnQaqeCXav76-tBmI7uuGTmS9IfKQat_jfXJIP9Zhd7mQ5uPGC3IyCWoqAb6PGsqTj60pQrUMRgbM1MdT4zRPrkkDX0P-D8AAAD__wEAAP__TtvfNUAFAAA%3D&adType=VIDEO&bidBundle=&bidderId=9000&buyerID=&campaignId=6257c93892779d71195e1660-605445dc9ba4190658893f14&creativeId=&dspId=comet&eventType=%7B%7BeventType%7D%7D&isHB=%7B%7BisHB%7D%7D&mediaType=comet&seatId=9000&spt=cpm&gamerSid=%25GAMER_SID%25&adUnitId=%EF%BF%BD_UNIT_ID%25&adFormat=%EF%BF%BD_FORMAT%25&srcStoreId=%24%7BSRC_STORE_ID%7D&skAdNetworkId=%24%7BSKAD_NETWORK_ID%7D&skAdCampaignId=%24%7BSKAD_CAMPAIGN_ID%7D&skAdVersion=%24%7BSKAD_VERSION%7D&pspId=%24%7BAUCTION_PSP_ID%7D
- https://events.mz.unity3d.com/operative/{{placement}}?data=H4sIAAAAAAAA_2RST5OquhP9NMPGGiv8c3TBglHEOAI_FVHZ3IIkSiABLokifPpf4fV5X9XbnXSf06dPV5LUbapbbZlKUtMNuRNmabqS3JCkVQmxpaYXpE6w_mlqQP80pgB9ppeZ8QkmM3OCVUOffmlKeisxIxBbqOLjW0llp-NxgsWYPBJeM6KgqizJc2TY1cRq6YUqqLqVsumsua1gcqeIeElBrI3r_POsMGGWTx43MTJftaChpJTJMMiqq0Y2CZXKpUk4aaum8BNOrL_PiDRiICrXhA_LqcbUVBVGLNnciMIop9LGYZOggpbXV_Fuij-IE0yfPn-Gvp9Bg2mZMAv8Lb19SiIH32dEoFTi3ahZIi9Vw62kxE1FsSJQQ0i5IKWgsrOMKXhV9rQnljaZGrr5NTMUgd8hNABMRSbCAoqsClJapFtnqYtoQNfw0EPVp1DAcmeiOZzAoj5F8_VsPJDQyqZBftA38wF_e_EpZqnj39HqO4N5DVAZsaGHV1sa5LaAfKmeOzjxQvjU4GNBg9zpfdrS86luYV5RP7RbP7dN7-jI-LjLgzkAwcJ5bELG49CWXuio5_DaxrmtnsMsg4NWW4qzHonzacfi__rnqWb28dEEMK_5-fjo4_2gmd2wGxl4FWWpM7ulq4IGPM7Slf_UIHfYDelPzKMMu1EB8-rh51vNW1x7L4emt7DbzXxdpO98OwDzaqixZ2YmOi_c6v7i2vv9Vd0stg8_jPDQJ8_bOZofblsvtB9-XwjIWTYc2QuLbjNf1-fT9sWBhrew1RenRx2cQL4sUKf2sSvkkCXmrMSndYZddk-pqaacAXIcOC8c-sWG-_d0DwXkDxZrSxG5UYc4A6m-Nl97C7w6D566t29pemRGfNz--y4t4tOhD_yupWi1vhOXsXgOJzFfCqQdBCx99UzhBOb4t7_8Fp6Kf8ea5P4JmztHatiJdkG4cxCQTexmgZcvge_gQ3RYA6SvA3xs-0O42x2AaPaaz0l47g6HSI16_7E_TtXUUbchc2b_2z8_ZYmf9xpw1iI6YKe_bMf-3XZ-NHkt-fXrq1uXP3EgWL6fNYmpRlfk_nJNmbuGzapWaUl6p6Q9JJZX9ZSx5ENbmmMw-tCmXoJoKSuRfejfI1hKwkZegkbBfnQaqeCXav76-tBmI7uuGTmS9IfKQat_jfXJIP9Zhd7mQ5uPGC3IyCWoqAb6PGsqTj60pQrUMRgbM1MdT4zRPrkkDX0P-D8AAAD__wEAAP__TtvfNUAFAAA%3D&adType=VIDEO&bidBundle=&bidderId=9000&buyerID=&campaignId=6257c93892779d71195e1660-605445dc9ba4190658893f14&creativeId=&dspId=comet&eventType=%7B%7BeventType%7D%7D&isHB=%7B%7BisHB%7D%7D&mediaType=comet&seatId=9000&spt=cpm&gamerSid=%25GAMER_SID%25&adUnitId=%EF%BF%BD_UNIT_ID%25&adFormat=%EF%BF%BD_FORMAT%25&srcStoreId=&skAdNetworkId=&skAdCampaignId=&skAdVersion=&pspId=
- https://events.mz.unity3d.com/impression/{{placement}}?adFormat=%25AD_FORMAT%25&adUnitId=%25AD_UNIT_ID%25&data=%7B%7Bdatapts%7D%7D&gamerSid=%25GAMER_SID%25&isHB=%7B%7BisHB%7D%7D&isomenabled=%25OM_ENABLED%25&key=%3Credacted%3E&omvendors=%25OM_VENDORS%25
- https://publisher-event.unityads.unity3d.com/events/v2/click/14851/61b31e7bb340374389106542-62346c5268f52f55128886bb
- https://publisher-event.unityads.unity3d.com/events/v2/video/video_start/14851/61b31e7bb340374389106542-62346c5268f52f55128886bb
- https://publisher-event.unityads.unity3d.com/events/v2/video/first_quartile/14851/61b31e7bb340374389106542-62346c5268f52f55128886bb
- https://publisher-event.unityads.unity3d.com/events/v2/video/midpoint/14851/61b31e7bb340374389106542-62346c5268f52f55128886bb
- https://publisher-event.unityads.unity3d.com/events/v2/video/third_quartile/14851/61b31e7bb340374389106542-62346c5268f52f55128886bb
- https://publisher-event.unityads.unity3d.com/events/v2/video/video_end/14851/61b31e7bb340374389106542-62346c5268f52f55128886bb
- http://cdn-store-icons-akamai-prd.unityads.unity3d.com/store-icons/745194da-0503-49bb-bf30-f0a0d91b555a.png
- http://cdn-creatives-prd.acquire.unity3dusercontent.com/assets/60a28611fc0ecf28dd45a3f7/m31-1000.mp4
- http://cdn-creatives-prd.acquire.unity3dusercontent.com/assets/60a28611fc0ecf28dd45a3f7/b30-400.mp4
- http://cdn-creatives-prd.acquire.unity3dusercontent.com/assets/62346c50d9f6c0b288c254a7/m31-1000.mp4
- http://cdn-creatives-prd.acquire.unity3dusercontent.com/assets/62346c50d9f6c0b288c254a7/b30-400.mp4
- http://cdn-creatives-prd.acquire.unity3dusercontent.com/assets/62346c5002a7b25ef79ce3c5/21912005-b01d-4eb4-ba49-fa8eda756609.jpg
- http://www.example.com
- https://github.com/uuidjs/uuid#getrandomvalues-not-supported
- https://github.com/zloirock/core-js/blob/v3.29.0/LICENSE
- https://github.com/zloirock/core-js
- http://a
- http://a/c%20d?a=1&c=3
- https://a@b
- http://тест
- http://a#б
- http://x
- https://reactjs.org/docs/error-decoder.html?invariant=
- https://webview.unityads.unity3d.com/unity-ads-sdk-webview/ad-viewer-vendors.38a8e55b.js
- https://webview.unityads.unity3d.com/unity-ads-sdk-webview/adViewer.366d40a1.js
- https://cdp.cloud.unity3d.com/v1/events

## Warnings

- apktool manifest decode skipped 2 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。