LOCAL NETWORK FORENSICS
PCAP Analysis Report
Generated 2026-08-11 07:53:10 UTC
Capturesolitaire-associations-example.pcap
Device IP192.168.1.142
Packets611
Traffic0.32 MB
Duration3.9 seconds
Flows41
PlatformUnknown
Capture started2026-08-06 13:14:48 UTC
Capture ended2026-08-06 13:14:51 UTC
Result 1
Solitaire Associations Journey
com.hitappsgames.wordsolitaire70%
ANDROID
HIGH
Identified by: Classification model + capture fingerprint
The trained classification model probability was combined with similarity to reference-capture fingerprints
Observed network activity
View on Google Play
2026-08-06 13:14:48 UTC - 2026-08-06 13:14:49 UTC
Supporting evidence
- Matched destination dn0873.launches.appsflyersdk.com via dns, tls_sni
- Matched destination api.hitappsgames.com via dns, tls_sni
- Matched destination ef.nefta.app via dns, tls_sni
- Matched destination cdp.cloud.unity3d.com via dns, tls_sni
- Matched destination api.bidmachine.io via dns, tls_sni
- Matched destination stat.risesome.com via dns, tls_sni
- Matched destination rt.applovin.com via dns, tls_sni
- Matched destination graph.facebook.com via dns, tls_sni
- 7 supporting TLS/JA4 fingerprint(s)
- 116 ordered destination marker(s) matched
- Classification model probability: 99.8%
Observed network evidence
Contacted domains
- cdp.cloud.unity3d.com
- googleads.g.doubleclick.net
- android.apis.google.com
- api.auth.dtn.com
- api.bidmachine.io
- api.hitappsgames.com
- cdn-adn-https-new.mtgglobals.com
- dn0873.launches.appsflyersdk.com
- ef.nefta.app
- firebaseremoteconfigrealtime.googleapis.com
- graph.facebook.com
- lh3.googleusercontent.com
- pubads.g.doubleclick.net
- rt.applovin.com
- sdk-api-v1.singular.net
- stat.risesome.com
- evt.rscdn.dpdns.org
- fonts.googleapis.com
- marketingplatform.google.com
Visible HTTP endpoints
- None