Inside the IPA

onX Offroad: Trail Maps & GPS

onXmaps, Inc.com.mtmapping.onxoffroad

← App page
Package analysisv26.19.0
Build 5070Record 8857587792026-05-15

A newer version is recorded: v26.33.0. Its file inventory is not available yet. This report automatically uses the newest build with an inventory.

Uncompressed filesNot recordedSum of recorded file sizes
Recorded IPA size557.7 MBSelected build · archive size
Files inventoried0No file inventory available
Embedded librariesNot availableFrameworks & dynamic libraries

Package footprint

What takes up space?

Uncompressed

No file inventory yet

A storage breakdown needs a recorded package inventory. Metadata alone cannot show what is inside an IPA.

Bundle structure

Space by folder

Top level

No folders recorded

Folder sizes will appear with the package inventory.

Explore the package

File explorer

Find the heavy files, inspect paths, or filter by what they contain.

No files to explore

File names and sizes have not been recorded for an analyzed package.

Native binary explorer

Every binary. Every architecture.

Inspect signed entitlements and permissions, load commands, memory layout, dependencies, symbols and runtime evidence for each slice.

Native analysis has not been recorded for this build

New package processing stores complete reports for each binary and architecture here. Existing header only records are not presented as full binary analysis.

Under the hood

Frameworks & engines

Embedded code and runtime evidence from this build, not other releases.

0 embedded libraries

No engine identification recorded for this build. That does not mean the app has no game engine or runtime.

No embedded framework records

Statically linked libraries cannot be identified from file paths alone.

Recorded signals

Package details

Only the analyzed build

Privacy & permissions

Recorded
Tracking declared
Yes
Non exempt encryption
Not declared
Permission descriptions
NSLocationAlwaysUsageDescription
Your location is used to show your GPS location on the map, localized weather conditions and enable you to use tracking and mark your location.
NSCameraUsageDescription
Easily take photos for your profile, waypoints and more.
NSUserTrackingUsageDescription
Your data will be used to deliver personalized offers and educational feature tips to you.
NSPhotoLibraryAddUsageDescription
This allows you to save new photos to your device.
NSLocalNetworkUsageDescription
You'll need to allow onX Offroad to find nearby devices and share content with others while offline.
NSLocationWhenInUseUsageDescription
Your location is used to show your GPS location on the map, localized weather conditions and enable you to use tracking and mark your location.
NSLocationAlwaysAndWhenInUseUsageDescription
Your location is used to show your GPS location on the map, localized weather conditions and enable you to use tracking and mark your location.
NSPhotoLibraryUsageDescription
This allows you to add photos from your photo library and save new photos to your device.
Tracking domains 3
[
  "api-safetrack.branch.io",
  "api-safetrack-eu.branch.io",
  "tracking.sdk.kochava.com"
]
Accessed API types 10
[
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "C617.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "1C8F.1",
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryUserDefaults",
    "NSPrivacyAccessedAPITypeReasons": [
      "CA92.1",
      "C56D.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "7D9E.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryDiskSpace",
    "NSPrivacyAccessedAPITypeReasons": [
      "E174.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategorySystemBootTime",
    "NSPrivacyAccessedAPITypeReasons": [
      "35F9.1"
    ]
  },
  {
    "NSPrivacyAccessedAPIType": "NSPrivacyAccessedAPICategoryFileTimestamp",
    "NSPrivacyAccessedAPITypeReasons": [
      "0A2A.1"
    ]
  }
]
Collected data types 47
[
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeDeveloperAdvertising",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePreciseLocation",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeName",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "The name can be optionally collected to identify chats within Zendesk."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeEmailAddress",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "The e-mail address can be optionally collected to identify tickets and chats within Zendesk."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "Location is not resolved on the device, but it is resolved on the backend based on the client\u0027s IP address."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePhotosorVideos",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "Optional. Attachments can be added to users\u0027 chats."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeAudioData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "Optional. Attachments can be added to users\u0027 chats."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDataTypes",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "Optional. Attachments can be added to users\u0027 chats."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCustomerSupport",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "The Support SDK is designed to allow end-users to create support requests."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeBrowsingHistory",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "Tracking of articles viewed and searches conducted within Zendesk for displaying to support agents."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeSearchHistory",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "Tracking of articles viewed and searches conducted within Zendesk for displaying to support agents."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "The SDK generates a UUID on the client. The UUID is used to identify a user because name and email are optional."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "The SDK\u0027s User-Agent header identifies the version of the SDK, the version of the OS, and the type of the SDK."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePhoneNumber",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "The phone number can be optionally collected to identify chats within Zendesk."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "Location is not resolved on the device, but it is resolved on the backend based on the client\u0027s IP address."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePhotosorVideos",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "Optional. Attachments can be added to users\u0027 chats."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeAudioData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "Optional. Attachments can be added to users\u0027 chats."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeBrowsingHistory",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "The \u2018Visitor Path\u2019 can be set by integrators to list the end user\u2019s recently visited screens before starting a conversation."
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "The user identifier is used to differentiate clients to the chat backend."
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "The \u0027machine ID\u0027 is used to differentiate clients to the chat backend."
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeAdvertisingData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCrashData",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherUsageData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePerformanceData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeOtherDiagnosticData",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAppFunctionality",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypePreciseLocation",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeCoarseLocation",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeUserID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": true,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeProductPersonalization",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeAppFunctionality"
    ],
    "NSPrivacyCollectedDataTypeTracking": false
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeDeviceID",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeThirdPartyAdvertising",
      "NSPrivacyCollectedDataTypePurposeDeveloperAdvertising",
      "NSPrivacyCollectedDataTypePurposeAnalytics",
      "NSPrivacyCollectedDataTypePurposeProductPersonalization"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  },
  {
    "NSPrivacyCollectedDataType": "NSPrivacyCollectedDataTypeProductInteraction",
    "NSPrivacyCollectedDataTypeLinked": false,
    "NSPrivacyCollectedDataTypePurposes": [
      "NSPrivacyCollectedDataTypePurposeAnalytics"
    ],
    "NSPrivacyCollectedDataTypeTracking": true
  }
]
Additional Info.plist declarations
App transport security
{
  "NSExceptionDomains": {
    "a.tiles.mapbox.com": {
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    },
    "api.daily.onxmaps.com": {
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    },
    "apps.fs.fed.us": {
      "NSExceptionMinimumTLSVersion": "TLSv1.0",
      "NSExceptionRequiresForwardSecrecy": false
    },
    "arcgis.com": {
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    },
    "arcgisonline.com": {
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    },
    "mapbox.com": {
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    },
    "openlayers.org": {
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    },
    "openweathermap.org": {
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    },
    "utah.gov": {
      "NSExceptionMinimumTLSVersion": "TLSv1.0",
      "NSIncludesSubdomains": true,
      "NSThirdPartyExceptionAllowsInsecureHTTPLoads": true,
      "NSThirdPartyExceptionRequiresForwardSecrecy": false
    }
  }
}
Url schemes
[
  {
    "CFBundleURLName": "onxmaps.deeplink.identifier",
    "CFBundleURLSchemes": [
      "onxoffroad"
    ]
  },
  {
    "CFBundleURLSchemes": [
      "onxoffroad",
      "fb103354517085481",
      "fb103354517085481onxoffroad"
    ]
  }
]
Required capabilities
[
  "arm64"
]

Static observations

2 recorded
Firebase

Firebase client configuration present

Project: xgps-project. Firebase client API keys are public identifiers by design. Presence alone does not establish a vulnerability; API restrictions and access rules were not tested.

Firebase

Google Ads Enabled

Firebase project: xgps-project

Analysis record
Method
Stored static package extraction and inventory; not a live security test.
Coverage
Only the selected build is represented. Missing data means not analyzed, not safe. Scanner identity and scan time are unavailable for sources that did not record them.
Recorded extraction times
2026-05-23 20:18:37
Known version identifiers
258 (2 with metadata)

Browse version history on the app page →