X-Posed: Account Location & Device Info — Alexander Hagenah

Know who you're actually talking to on X.

X-Posed surfaces, right inside your X / Twitter timeline, where each account posts from and what device it uses, plus location-aware content filtering. It reads the same "About this account" data X already exposes, using your existing X session. No separate login, no independent geolocation, no access to private data.

COUNTRY AT A GLANCE
- A country flag sits next to every username, the country X attributes to that account.
- Crisp Twemoji flags that look identical across every OS and theme.

DEVICE DETECTION
- A small icon shows the device behind the account: Apple (iPhone / iPad / Mac), Android, or Web.

VPN & PROXY SIGNALS
- A lock badge appears when an account's location may be masked.
- This is a heuristic hint, not a guarantee. Treat it as a signal worth a second look, never as proof.

THE HOVER DOSSIER
- Open the compact circled-i for a clean glass card with the full picture: location, device, VPN/proxy signal, account creation date and age, user ID, and verification / affiliation.

CONTENT CONTROL
- Block by country, by region (multi-country groups, including Southeast Asia), or by tag (a display-name pattern).
- Two modes: HIDE removes matching posts from the timeline, or HIGHLIGHT keeps them visible with an amber accent.
- Toggle visibility of posts from VPN / proxy accounts.
- Optional "Block Locations" link added to X's own sidebar nav.
- "Flag from Device" mode: flag accounts by their device's country instead of their account location (falls back to location for web / unknown), and blocking follows the device country too.
- Full import / export of your configuration.

BUILT FOR
- OSINT researchers
- Journalists verifying their sources
- Security-minded users
- Anyone curious how authentic an account really is

FOR RESEARCHERS & JOURNALISTS
- Evidence capture: screenshot any post with a forensic metadata overlay (location, device, VPN signal, timestamp, source URL, engagement metrics), rendered as one clean card.

HOW IT WORKS
- X-Posed queries X's own AboutAccountQuery through your current session.
- Results are cached locally so the same account is never looked up twice.
- Flags and icons appear inline as you scroll. No extra clicks.

FAST & RELIABLE
- Local cache (LRU, roughly 50,000 entries, about a two-week expiry), with negative caching for accounts X can't resolve.
- Optional Community Cloud Cache: a privacy-first shared cache so flags load instantly and survive X's rate limits, with 2.5 million+ profiles cached by the community so far. On by default for new installs, fully optional, and always under your control.
- Rate-limit aware, with backoff, retries, and a clear status indicator.

PRIVACY FIRST
- Uses X's public API through your existing session. No separate account or login.
- Caches locally. No IP logging. No tracking. No analytics.
- The community cache is optional and can be turned off at any time.

NEW IN 3.0
- A complete "glass" visual redesign in both light and dark, auto-matching X's theme, with distinctive bundled typography.
- Reliability and bug fixes.
- The 2.5 million+ community-cache milestone.

REQUIREMENTS
- Firefox 140 or newer.

Honest by design: location and device come straight from what X attributes to each account, and VPN / proxy detection is a signal, not a verdict.

Built by Alexander Hagenah (@xaitax on X, primepage.de).
Source and details: https://github.com/xaitax/x-account-location-device