# Moviebase

状态：active
Platform：android
Package：com.moviebase
Version：6.8.0
Opportunity：2026-06-10-moviebase-tv-movie-tracker

## 摘要

- 包类型：xapk，inner APK 数：4
- 引擎 / 框架：native
- SDK 线索：admob, firebase, onesignal, revenuecat
- Endpoint candidates：19
- 结论口径：本报告只基于静态 ZIP / Manifest / 字符串证据；不代表真实运行路径已验证。

## 直接证据

- [high] Manifest package id is com.moviebase（source: `AndroidManifest.xml`，status: `verified`）
- [high] Manifest declares 39 permissions（source: `AndroidManifest.xml`，status: `verified`）
- [high] Engine/framework markers: native（source: `APK file inventory`，status: `verified`）
- [high] Static strings include 19 endpoint candidates（source: `Text/string scan`，status: `verified`）
- [high] Package contains 4 native libraries（source: `APK file inventory`，status: `verified`）

## 推断

- [medium] SDK markers suggest: admob, firebase, onesignal, revenuecat（source: `Manifest, filenames, and text strings`，status: `inferred`）

## 权限和组件

### 权限

- `android.permission.ACCESS_ADSERVICES_AD_ID`
- `android.permission.ACCESS_ADSERVICES_ATTRIBUTION`
- `android.permission.ACCESS_ADSERVICES_TOPICS`
- `android.permission.ACCESS_NETWORK_STATE`
- `android.permission.ACCESS_WIFI_STATE`
- `android.permission.FOREGROUND_SERVICE`
- `android.permission.INTERNET`
- `android.permission.POST_NOTIFICATIONS`
- `android.permission.READ_APP_BADGE`
- `android.permission.READ_EXTERNAL_STORAGE`
- `android.permission.RECEIVE_BOOT_COMPLETED`
- `android.permission.USE_BIOMETRIC`
- `android.permission.USE_FINGERPRINT`
- `android.permission.VIBRATE`
- `android.permission.WAKE_LOCK`
- `android.permission.WRITE_EXTERNAL_STORAGE`
- `com.anddoes.launcher.permission.UPDATE_COUNT`
- `com.android.vending.BILLING`
- `com.android.vending.CHECK_LICENSE`
- `com.google.android.c2dm.permission.RECEIVE`
- `com.google.android.finsky.permission.BIND_GET_INSTALL_REFERRER_SERVICE`
- `com.google.android.gms.permission.AD_ID`
- `com.google.android.providers.gsf.permission.READ_GSERVICES`
- `com.htc.launcher.permission.READ_SETTINGS`
- `com.htc.launcher.permission.UPDATE_SHORTCUT`
- `com.huawei.android.launcher.permission.CHANGE_BADGE`
- `com.huawei.android.launcher.permission.READ_SETTINGS`
- `com.huawei.android.launcher.permission.WRITE_SETTINGS`
- `com.majeur.launcher.permission.UPDATE_BADGE`
- `com.moviebase.DYNAMIC_RECEIVER_NOT_EXPORTED_PERMISSION`
- `com.moviebase.permission.C2D_MESSAGE`
- `com.oppo.launcher.permission.READ_SETTINGS`
- `com.oppo.launcher.permission.WRITE_SETTINGS`
- `com.sec.android.provider.badge.permission.READ`
- `com.sec.android.provider.badge.permission.WRITE`
- `com.sonyericsson.home.permission.BROADCAST_BADGE`
- `com.sonymobile.home.permission.PROVIDER_INSERT_BADGE`
- `me.everything.badger.permission.BADGE_COUNT_READ`
- `me.everything.badger.permission.BADGE_COUNT_WRITE`

### 组件

- Activities：androidx.compose.ui.tooling.PreviewActivity, androidx.credentials.playservices.controllers.identityauth.HiddenActivity, androidx.credentials.playservices.controllers.identitycredentials.IdentityCredentialApiHiddenActivity, com.android.billingclient.api.ProxyBillingActivity, com.android.billingclient.api.ProxyBillingActivityV2, com.facebook.ads.AudienceNetworkActivity, com.google.android.gms.ads.AdActivity, com.google.android.gms.ads.NotificationHandlerActivity, com.google.android.gms.ads.OutOfContextTestingActivity, com.google.android.gms.auth.api.signin.internal.SignInHubActivity, com.google.android.gms.common.api.GoogleApiActivity, com.google.android.play.core.common.PlayCoreDialogWrapperActivity, com.google.firebase.auth.internal.GenericIdpActivity, com.google.firebase.auth.internal.RecaptchaActivity, com.moviebase.ui.common.youtube.YouTubePlayerActivity, com.moviebase.ui.deeplink.DeeplinkActivity, com.moviebase.ui.detail.episode.EpisodeDetailActivity, com.moviebase.ui.detail.movie.MovieDetailActivity, com.moviebase.ui.detail.person.PersonDetailActivity, com.moviebase.ui.detail.personlist.PersonListActivity, com.moviebase.ui.detail.season.SeasonDetailActivity, com.moviebase.ui.detail.show.ShowDetailActivity, com.moviebase.ui.discover.DiscoverActivity, com.moviebase.ui.genres.GenresActivity, com.moviebase.ui.home.customise.CustomiseHomeActivity, com.moviebase.ui.main.MainActivity, com.moviebase.widget.AppWidgetConfigureActivity, com.onesignal.NotificationOpenedActivityHMS, com.onesignal.core.activities.PermissionsActivity, com.onesignal.notifications.activities.NotificationOpenedActivity, com.onesignal.notifications.activities.NotificationOpenedActivityAndroid22AndOlder, com.pairip.licensecheck.LicenseActivity, com.revenuecat.purchases.SimulatedStoreErrorDialogActivity, com.revenuecat.purchases.amazon.purchasing.ProxyAmazonBillingActivity, pub.devrel.easypermissions.AppSettingsDialogHolderActivity
- Services：androidx.credentials.playservices.CredentialProviderMetadataHolder, androidx.room.MultiInstanceInvalidationService, androidx.work.impl.background.systemjob.SystemJobService, androidx.work.impl.foreground.SystemForegroundService, com.google.android.datatransport.runtime.backends.TransportBackendDiscovery, com.google.android.datatransport.runtime.scheduling.jobscheduling.JobInfoSchedulerService, com.google.android.gms.ads.AdService, com.google.android.gms.auth.api.signin.RevocationBoundService, com.google.android.gms.measurement.AppMeasurementJobService, com.google.android.gms.measurement.AppMeasurementService, com.google.firebase.components.ComponentDiscoveryService, com.google.firebase.messaging.FirebaseMessagingService, com.google.firebase.sessions.SessionLifecycleService, com.moviebase.notification.checkin.CheckinNotificationService, com.moviebase.notification.messaging.AppFirebaseMessagingService, com.moviebase.widget.AppWidgetService, com.onesignal.SyncJobService, com.onesignal.core.services.SyncJobService, com.onesignal.notifications.services.HmsMessageServiceOneSignal
- Receivers：androidx.profileinstaller.ProfileInstallReceiver, androidx.work.impl.background.systemalarm.RescheduleReceiver, androidx.work.impl.diagnostics.DiagnosticsReceiver, androidx.work.impl.utils.ForceStopRunnable$BroadcastReceiver, app.shared.core.notifications.PostNotificationBroadcastReceiver, com.google.android.datatransport.runtime.scheduling.jobscheduling.AlarmManagerSchedulerBroadcastReceiver, com.google.android.gms.measurement.AppMeasurementReceiver, com.google.firebase.iid.FirebaseInstanceIdReceiver, com.moviebase.notification.checkin.CheckinNotificationReceiver, com.moviebase.widget.AppListWidgetProvider, com.onesignal.notifications.receivers.BootUpReceiver, com.onesignal.notifications.receivers.FCMBroadcastReceiver, com.onesignal.notifications.receivers.NotificationDismissReceiver, com.onesignal.notifications.receivers.UpgradeReceiver
- Providers：androidx.startup.InitializationProvider, com.facebook.ads.AudienceNetworkContentProvider, com.google.android.gms.ads.MobileAdsInitProvider, com.google.firebase.provider.FirebaseInitProvider, com.moviebase.application.GenericFileProvider, org.jetbrains.compose.resources.AndroidContextProvider

## SDK / Endpoint

### SDK

- `admob`
- `firebase`
- `onesignal`
- `revenuecat`

### Endpoint candidates

- http://www.apache.org/licenses/
- https://moviebase.app/companies 
- https://moviebase.app/custom_lists 
- https://moviebase.app/discover 
- https://moviebase.app/discover_overview 11https://moviebase.app/hidden_items/{keyMediaType} https://moviebase.app/more 
- https://moviebase.app/movie?page=%7Bpage%7D%00&https%3A%2F%2Fmoviebase.app%2Fmovie_categories%00%24%24https%3A%2F%2Fmoviebase.app%2Fpopular_people%00=
- https://moviebase.app/profile **https://moviebase.app/progress?page=%7Bpage%7D%00
- https://moviebase.app/reminders 
- https://moviebase.app/search %%https://moviebase.app/show_categories ,,https://moviebase.app/standard_list/{listId} $$https://moviebase.app/standard_lists 
- https://www.moviebase.app/home 
- https://www.moviebase.app/premium/{source}?tag=%7BpurchaseTag%7D%00%28%28https%3A%2F%2Fwww.themoviedb.org%2Flist%2F%7BlistId%7D%00%07%07integer%00
- https://www.youtube.com/iframe_api
- https://chriskrueger.dev 
- https://github.com/ChrisKruegerDev !!https://moviebase.featurebase.app ##https://twitter.com/ChrisKruegerDev 
- https://twitter.com/MoviebaseApp ++https://www.linkedin.com/in/chriskruegerdev https://www.moviebase.app 
- https://www.moviebase.app/help !!https://www.moviebase.app/privacy 
- https://www.moviebase.app/terms key limit_items_non_premium 
- https://moviebase.app/custom_lists ,,https://moviebase.app/progress?page=calendar%00
- https://moviebase.app/search --https://moviebase.app/standard_list/watchlist intent search shortcut 

## Warnings

- apktool manifest decode skipped 3 split APK(s)
- binary AndroidManifest.xml decoded with apktool

## 下一步

- 真机/模拟器验证 onboarding、paywall、首个可感知价值和崩溃路径。
- 把 endpoint candidates 与 HAR / MITM / Frida 动态证据对齐，避免只凭静态字符串下结论。
- 多版本对比权限、SDK、endpoint、native libs 和资源路径变化。
- 订阅/广告 SDK 线索存在，后续需拆 paywall、free trial、退款和广告频率。