# cinematique 状态：active Platform：android Package：com.arctco.cinematique Version：1.8.2.1 Opportunity：2026-06-10-cinematique-your-tracker ## 摘要 - 包类型：xapk，inner APK 数：19 - 引擎 / 框架：未识别 - SDK 线索：amplitude, appsflyer, firebase, mixpanel, onesignal, react_native, revenuecat - Endpoint candidates：80 - 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。 ## 直接证据 - [high] Manifest package id is com.arctco.cinematique（source: `AndroidManifest.xml`，status: `verified`） - [high] Manifest declares 11 permissions（source: `AndroidManifest.xml`，status: `verified`） - [high] Static strings include 80 endpoint candidates（source: `Text/string scan`，status: `verified`） ## 推断 - [medium] SDK markers suggest: amplitude, appsflyer, firebase, mixpanel, onesignal, react_native, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`） ## 权限和组件 ### 权限 - `android.permission.ACCESS_NETWORK_STATE` - `android.permission.INTERNET` - `android.permission.POST_NOTIFICATIONS` - `android.permission.READ_EXTERNAL_STORAGE` - `android.permission.RECEIVE_BOOT_COMPLETED` - `android.permission.SCHEDULE_EXACT_ALARM` - `android.permission.WAKE_LOCK` - `android.permission.WRITE_EXTERNAL_STORAGE` - `com.android.vending.BILLING` - `com.android.vending.CHECK_LICENSE` - `com.arctco.cinematique.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION` ### 组件 - Activities：com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.arctco.cinematique.AppIconBlack, com.arctco.cinematique.AppIconBlackOnWhite, com.arctco.cinematique.AppIconDefault, com.arctco.cinematique.AppIconMirrorTile, com.arctco.cinematique.AppIconMovieAmber, com.arctco.cinematique.AppIconMovieApricot, com.arctco.cinematique.AppIconMovieAurora, com.arctco.cinematique.AppIconMovieBabygreen, com.arctco.cinematique.AppIconMovieBabypink, com.arctco.cinematique.AppIconMovieBabypurple, com.arctco.cinematique.AppIconMovieCelluloid, com.arctco.cinematique.AppIconMovieCrimson, com.arctco.cinematique.AppIconMovieCyan, com.arctco.cinematique.AppIconMovieDeepspace, com.arctco.cinematique.AppIconMovieFirefly, com.arctco.cinematique.AppIconMovieGreen, com.arctco.cinematique.AppIconMovieLighthouse, com.arctco.cinematique.AppIconMovieMagenta, com.arctco.cinematique.AppIconMovieMint, com.arctco.cinematique.AppIconMovieNightsky, com.arctco.cinematique.AppIconMoviePersimmon, com.arctco.cinematique.AppIconMoviePink, com.arctco.cinematique.AppIconMovieRose, com.arctco.cinematique.AppIconMovieSakura, com.arctco.cinematique.AppIconMovieSky, com.arctco.cinematique.AppIconMovieStellar, com.arctco.cinematique.AppIconMovieViolet, com.arctco.cinematique.AppIconMovieWildwood, com.arctco.cinematique.AppIconWhite, com.arctco.cinematique.AppIconWhiteOnBlack, com.arctco.cinematique.MainActivity, com.google.android.gms.common.api.GoogleApiActivity, com.pairip.licensecheck.LicenseActivity, com.revenuecat.purchases.amazon.purchasing.ProxyAmazonBillingActivity - Services：com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService - Receivers：androidx.profileinstaller.ProfileInstallReceiver, com.amazon.device.iap.ResponseReceiver, com.capacitorjs.plugins.localnotifications.LocalNotificationRestoreReceiver, com.capacitorjs.plugins.localnotifications.NotificationDismissReceiver, com.capacitorjs.plugins.localnotifications.TimedNotificationPublisher, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver - Providers：androidx.core.content.FileProvider, androidx.startup.InitializationProvider ## SDK / Endpoint ### SDK - `amplitude` - `appsflyer` - `firebase` - `mixpanel` - `onesignal` - `react_native` - `revenuecat` ### Endpoint candidates - https://capacitorjs.com/ - https://stackoverflow.com/questions/29249132/wkwebview-complex-communication-between-javascript-native-code/49474323#49474323 - https://issues.chromium.org/issues/40450316 - https://stackoverflow.com/a/57382543 - https://www.themoviedb.org/search?query= - https://www.youtube.com/watch?v= - https://x.com/cinematiqueapp - https://github.com/arctco/cinematiqueandroid/releases - https://www.instagram.com/cinematiqueapp/ - https://discord.gg/ywMAE7p7tE - https://bsky.app/profile/cinematiqueapp.bsky.social - https://www.imdb.com/name/ - https://github.com/syntax-tree/hast-util-to-jsx-runtime - https://github.com/remarkjs/react-markdown/blob/main/changelog.md - https://play.google.com/store/apps/details?id=com.arctco.cinematique - https://picsum.photos/seed/ - https://api.themoviedb.org/3/ - https://img.youtube.com/vi/ - https://ko-fi.com/cinematique - https://buymeacoffee.com/cinematique - https://image.tmdb.org/t/p/w92 - https://image.tmdb.org/t/p/w185 - https://image.tmdb.org/t/p/ - https://www.themoviedb.org/tv/ - https://www.themoviedb.org/movie/ - https://app.strem.io/#/detail/movie/ - https://app.strem.io/#/search/ - https://trakt.tv/search/tmdb/ - https://app.strem.io/#/detail/series/ - https://fb.me/react-async-component-lifecycle-hooks - https://uxwing.com/wp-content/themes/uxwing/download/brands-and-social-media/chatgpt-icon.png - https://uxwing.com/wp-content/themes/uxwing/download/brands-and-social-media/google-gemini-icon.png - https://challenges.cloudflare.com/turnstile/v0/api.js - https://play.google.com/store/account/subscriptions - https://anilist.co/img/icons/icon.svg - https://cinematique.me/#/movie/ - https://anilist.co/media/ - https://www.moviefone.com/feeds/prime-video-news.rss - https://api.allorigins.win/raw?url= - https://www.tvfanatic.com/rss ## Warnings - apktool manifest decode skipped 18 split APK(s) - binary AndroidManifest.xml decoded with apktool ## 下一步 - 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。 - 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。 - 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。 - 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。