Active forensic investigations.
MarTech surveillance infrastructure documented in the open. Each case has pre-consent data exfiltration captured with technical evidence.
0
Total cases
0
Critical
0
Active
Each case is reproducible. Each finding is verifiable.
BROWSERGATE: LinkedIn Is Scanning Your Browser
LinkedIn probes 6,153 browser extensions by name, collects 48 device fingerprint features via HUMAN Security (formerly PerimeterX), and transmits RSA-encrypted payloads through hidden zero-pixel iframes. Undisclosed adtech data pipeline (crcldu.com) discovered nested inside. None disclosed in privacy policy. Confirmed under oath in German court.
Consent Theater: When 'Compliance' Vendors Don't Comply
Stape tracks users who reject consent on their own 'Consent Explained' webinar page. Sells browser API hijacking (5 prototype patches), Safari ITP bypass (7 days → 13 months), click ID recovery, and ad blocker evasion via official app stores. MCP servers enable automated privacy circumvention deployment.
ZeroSense + DemonScript: 5 Zero-Days in the B2B Marketing Stack
Five zero-day vulnerabilities discovered: eval() RCE (DemonScript), cross-customer PII cache (ZeroSense), polyfill.io supply chain (PollyWannaCrack), Marketo cookie theft (MaCook'd), and video completion code execution (RollCredits). Found while reading 6sense.com's privacy policy.
Pre-Consent Identity Resolution via Defeat Device
Forensic analysis reveals RB2B's pixel executes visitor identification and data transmission to third-party enrichment services before consent banner renders, creating an unrecoverable privacy violation.
Biometric Surveillance via FormComplete
GTM Studio's FormComplete feature initializes Sardine.ai biometric tracking (mouse movement, typing velocity) immediately on DOM load, prior to any consent interaction.
Hashed Email Extraction Network
Initial forensics indicate client-side email hashing and transmission to identity graph providers. Full analysis pending.
White-Label Distribution Network Analysis
Investigating Clay's role as a distribution platform for third-party tracking scripts. Systemic risk assessment in progress.
Suspect a vendor? Scan it.
Outside-in reconnaissance. No agents. No code change. The full forensic kit, run by the same engine behind every published case.
▸ Reproducible · Verifiable · Adversarially tested