{"id":28259488,"url":"https://github.com/expressvpn/xoth_location_tracker_investigation","last_synced_at":"2025-08-16T07:38:27.620Z","repository":{"id":115591645,"uuid":"333296888","full_name":"expressvpn/xoth_location_tracker_investigation","owner":"expressvpn","description":"Investigation Xoth: Location Trackers","archived":false,"fork":false,"pushed_at":"2021-01-28T05:12:26.000Z","size":156,"stargazers_count":46,"open_issues_count":0,"forks_count":15,"subscribers_count":7,"default_branch":"main","last_synced_at":"2025-05-20T03:12:29.032Z","etag":null,"topics":["privacy","research-data","security"],"latest_commit_sha":null,"homepage":"https://www.expressvpn.com/digital-security-lab/investigation-xoth","language":null,"has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"cc0-1.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/expressvpn.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null}},"created_at":"2021-01-27T03:54:16.000Z","updated_at":"2024-12-09T16:56:17.000Z","dependencies_parsed_at":null,"dependency_job_id":"6e7c0d89-0c90-4bbc-af28-967b30c81249","html_url":"https://github.com/expressvpn/xoth_location_tracker_investigation","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/expressvpn/xoth_location_tracker_investigation","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expressvpn%2Fxoth_location_tracker_investigation","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expressvpn%2Fxoth_location_tracker_investigation/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expressvpn%2Fxoth_location_tracker_investigation/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expressvpn%2Fxoth_location_tracker_investigation/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/expressvpn","download_url":"https://codeload.github.com/expressvpn/xoth_location_tracker_investigation/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/expressvpn%2Fxoth_location_tracker_investigation/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":270684249,"owners_count":24627773,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-08-16T02:00:11.002Z","response_time":91,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["privacy","research-data","security"],"created_at":"2025-05-20T03:12:14.811Z","updated_at":"2025-08-16T07:38:27.613Z","avatar_url":"https://github.com/expressvpn.png","language":null,"funding_links":[],"categories":[],"sub_categories":[],"readme":"# ExpressVPN Digital Security Lab\n## Investigation Xoth: Location Trackers\n\nThis repository contains the results of a January 2021 investigation into Android apps that contain location tracker Software Development Kits (SDKs). We call this effort \"Investigation Xoth.\" This research was conducted by Sean O'Brien of the [ExpressVPN Digital Security Lab](https://expressvpn.com/digital-security-lab) with the aid of Esther Onfroy of the [Defensive Lab Agency](https://defensive-lab.agency). Findings are described on [our website](https://expressvpn.com/digital-security-lab/investigation-xoth).\n\nWe encourage users to independently validate the investigation results. This information is released for consumer awareness only and should be interpreted by security professionals.\n\n## Quick Links\n\n**Consumers:** Consult our [list of all apps](all_apps.md).  \n\n**Researchers:** Consult the files below.\n\n* [SDK Signatures](sdk_signatures.md): List of SDK signatures identified in apps\n* [All Apps](all_apps.md): [JSON](all_apps.json) | [CSV](all_apps.csv) - List of all apps\n* Exponea (Infinario): [JSON](exponea-infinario.json) | [CSV](exponea-infinario.csv) - List of all apps containing [Exponea](https://exponea.com)\n* Fysical (BeaconsInSpace): [JSON](fysical-beaconsinspace.json) | [CSV](fysical-beaconsinspace.csv) - List of all apps containing [Fysical](https://fysical.com)\n* GeoUniq (Cloud4Wi): [JSON](geouniq-cloud4wi.json) | [CSV](geouniq-cloud4wi.csv) - List of all apps containing [GeoUniq](https://www.geouniq.com)\n* OneAudience: [JSON](oneaudience.json) | [CSV](oneaudience.csv) - List of all apps containing [OneAudience](http://www.oneaudience.com)\n* Opensignal: [JSON](opensignal.json) | [CSV](opensignal.csv) - List of all apps containing [Opensignal](https://www.opensignal.com)\n* Placed (Foursquare): [JSON](placed-foursquare.json) | [CSV](placed-foursquare.csv) - List of all apps containing [Placed](https://www.placed.com)\n* Predicio: [JSON](predicio.json) | [CSV](predicio.csv) - List of all apps containing [Predicio](http://www.predic.io)\n* Quadrant: [JSON](quadrant.json) | [CSV](quadrant.csv) - List of all apps containing [Quadrant](https://www.quadrant.io)\n* Sense360: [JSON](sense360.json) | [CSV](sense360.csv) - List of all apps containing [Sense360](https://sense360.com)\n* SignalFrame (Wireless Registry)**: [JSON](signalframe-wirelessregistry.json) | [CSV](signalframe-wirelessregistry.csv) - List of all apps containing [SignalFrame](https://signalframe.com)\n* Sygic: [JSON](sygic.json) | [CSV](sygic.csv) - List of all apps containing [Sygic](https://www.sygic.com)\n* X-Mode: [JSON](xmode.json) | [CSV](xmode.csv) - List of all apps containing [X-Mode](https://xmode.io)\n\n## Contact\n\nIf you have any questions or suggestions regarding these findings, email us at digital-security-lab@expressvpn.com.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fexpressvpn%2Fxoth_location_tracker_investigation","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fexpressvpn%2Fxoth_location_tracker_investigation","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fexpressvpn%2Fxoth_location_tracker_investigation/lists"}