Competitive Intelligence — Weekly Sync
📅 Week 3 — April 7, 2026 · ⏱ 30 minutes · 👥 Weekly cadence
1 · Competitive and Client Testing (Julia) — Key Findings
- ✗ Radar VMOS not detected on second attempt — FD WV regression
Allowed bets from Tennessee on the West Virginia app. Opposite of the Mar 31 positive result. - ✗ Radar rooted Android (hidden root) not detected at Saracen AR — confirmed result from FD WV. Re-tested from TN with all root-hiding steps confirmed.
- ✓ Radar resigned Saracen AR iOS app — DETECTED ✓
App flagged with appropriate error messaging; account not blocked. Contradicts the FD WV result. Follow-up validation scheduled pending the next iOS app release. - ✗ Radar jailbroken root-hidden iOS not detected — Sleeper Sports, PrizePicks, Fliff
Three operators, one structural gap — users with jailbroken devices bypass geolocation controls and wager from prohibited locations.
XPoint — RSI DE — Key findings so far
- ✗ Critical security gap — FaceTime RDP not detected — MI user wagered on DE iOS
Casino + sportsbook both allowed remote wagers. Confirmed cross-region with AZ — structural failure. - ⚠ Border performance — near-border pass/fail inconsistent; erroneous failures even moving away from the boundary. Active session SUSPENDED on DE-MD crossing before any spoofing attempt. Static/mobile toggling friction near MD + DE borders vs GeoComply seamless PA.
- ⚠ macOS install + UX — requests access to documents folder (known issue). AnyDesk installed (not running) silently blocks betting — false positive.
- ⚠ Mac CPU — 1-minute interval spikes from 0.5% → 16% during poker gameplay.
Additional research — Leaked keys cases
- Anatsa (TeaBot) banking trojan via Google Play, large-scale campaign (77 apps) — runs on real, certified devices in legitimate sessions; payload delivered later. Mass credential theft + financial fraud across regions.
- GoldFactory campaign (repackaged banking apps) — attackers modified legitimate banking apps, injected malicious code, redistributed them. Integrity checks can be bypassed/removed in repackaged apps.
- SharkBot banking malware (NCC Group + Cleafy) — Accessibility abuse for credential theft + unauthorized transactions from victims' devices.
- All integrity checks passed because fraud was performed on real, Play-certified devices within legitimate app sessions.
- Similar story with Xenomorph banking trojan via Google Play apps.
2 · Competitive Research (Valeria) — Key Findings
- ⓘ MITM tests partially completed on Xpoint — seem to be blocked, thus compliant. Will retest some test cases and test Radar next.
- ⓘ Splash Sports planning to offload Xpoint in June 2026
Multi-state DFS gap — Xpoint has no Multipass or Dynamic Boundaries equivalent. - ⓘ Bet365 confirmed dual-stack — XPoint web + Radar mobile
3 · End-user Feedback (Valeria) — Key Findings
📊 Full dataset: Social Media Competitive Signals · Reddit + X/Twitter public posts. Monitoring initiated March 2026.
- ⓘ TQJ 'Todos Querem Jogar' switched OpenBet off — "worked poorly and caused UX issues". Now using IP-only as primary geolocation.
- ⓘ Bet365 (Radar) Android — 1-star reviews "location verification is trash" — "Stuck on trying to find the location. Very bad app, likely a scam."
- ⓘ RushStreet (Xpoint) negative Android review — kicked off during tournaments, lost money
- ⚠ Bet365 web (Xpoint) — Reddit user asking how to spoof XPoint Verify, two users offered Magisk help
4 · What's Next — Plan for Next Week
Field Testing
- Jailbroken root-hidden iOS — to test on FD WV, Saracen AR, and any client integrated with GeoComply
- Resigned Saracen AR iOS app — to retest on a new app version (the Engineering team will prepare it this week)
- Fanatics / OpenBet Locator — validate the integration
- Radar / Saracen AR, XPoint, Radar / Bet365 — run the Replay Attack testing
Betting Hero
- Radar / Saracen AR (web desktop) — perform full validation of the competitor's app
Integrations team
- Mkodo research to be posted later this week