How This Briefing Works
This report opens with key findings, then maps the gaps between what Audiencex discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Key Findings
26 detections across 25 sites15% pre-consent activity2 critical disclosure gaps
CRITICAL
Vendor Disclosure
66 third-party vendors detected on audiencex.com, 12 firing pre-consent
GDPR Art 13GDPR Art 14CCPA 1798.100
CRITICAL
Consent Mechanism
12 vendors fire before consent including identity resolution
GDPR Art 6ePrivacy Directive Art 5(3)
MEDIUM
Pre-Consent Activity
Audiencex was observed loading and executing before user consent was obtained on 15% of sites where it was detected.
GDPRePrivacy
HIGH
Privacy Marketing
Identity resolution (Apollo.io, Clearbit) deployed pre-consent
FTC Section 5CCPA 1798.150
HIGH
Signal Honoring
Explicitly states Does not support DNT signals
CCPA 1798.135Colorado Privacy Act
Disclosure Gaps
Claims vs. Observed Behavior
4 gaps
2 CRIT2 HIGH
Classified:BTI-X01BTI-X02BTI-X04BTI-X05BTI-X08BTI-X10
Vendor Disclosure
GDPR Art 13 · GDPR Art 14 · CCPA 1798.100CRITICAL
They Claim
“Privacy policy lists 3 vendors (Google Analytics, AdWords, Facebook)”
Observed Behavior
66 third-party vendors detected on audiencex.com, 12 firing pre-consent
Runtime scan shows Apollo.io, Clearbit, Clarity, ClickCease, HubSpot, LinkedIn, Twitter undisclosed
Consent Mechanism
GDPR Art 6 · ePrivacy Directive Art 5(3)CRITICAL
They Claim
“Ketch CMP deployed for consent management”
Observed Behavior
12 vendors fire before consent including identity resolution
Pre-consent tracking includes Apollo.io, Clearbit, Clarity, DoubleClick, GoogleAds, GA4, HubSpot, LinkedIn, MetaPixel, TwitterPixel
Privacy Marketing
FTC Section 5 · CCPA 1798.150HIGH
They Claim
“Homepage markets privacy-safe data”
Observed Behavior
Identity resolution (Apollo.io, Clearbit) deployed pre-consent
AX homepage claims blend proprietary technology, privacy-safe data - contradicted by runtime behavior
Signal Honoring
CCPA 1798.135 · Colorado Privacy ActHIGH
They Claim
“CCPA compliance claimed”
Observed Behavior
Explicitly states Does not support DNT signals
Privacy policy Section: We do not support Do Not Track (DNT)
Customer Impact
What This Means For You
YOUR programmatic campaigns through AUDIENCEX route through a vendor ecosystem 22x larger than disclosed. YOUR audience data flows through a platform that runs Apollo.io and Clearbit identity resolution pre-consent — meaning YOUR campaign visitors are identified before consent. YOUR "privacy-safe data" claim to stakeholders is undermined if your programmatic partner runs 12 vendors pre-consent including identity resolution tools. With Ketch CMP deployed but failing to block 12 pre-consent vendors, YOUR consent architecture inherits AUDIENCEX's demonstrated inability to enforce its own consent tool.
Recommended Actions
What To Do About It
Role-specific actions based on observed behavior
If You Use Audiencex
- →Audit all third-party vendors loaded through AUDIENCEX integration on your properties
- →Update privacy policies to disclose Apollo.io, Clearbit, and other identity resolution vendors AUDIENCEX introduces
- →Configure consent enforcement to block all 12 pre-consent vendors identified in AUDIENCEX ecosystem
- →Request documentation supporting the privacy-safe data claim against 66-vendor runtime evidence
If You're Evaluating Audiencex
- →Request complete vendor list and compare against the 3 disclosed before signing
- →Verify whether the privacy-safe data positioning survives scrutiny of 66 detected vendors
- →Compare with other programmatic platforms on vendor transparency — 22x disclosure gap is among the worst
- →Require contractual representations on privacy-safe data with financial penalties for violations
Negotiation Leverage
- →Privacy-safe data contradiction: AUDIENCEX markets privacy-safe data while running 66 vendors with 12 pre-consent — use this fundamental contradiction to negotiate enhanced data protection guarantees or price concessions
- →22x vendor disclosure gap: 66 vendors detected vs. 3 disclosed (Google Analytics, AdWords, Facebook) — require complete named vendor disclosure as a contract condition
- →Identity resolution pre-consent: Apollo.io and Clearbit fire before consent — negotiate removal of identity resolution from your campaign infrastructure or require explicit consent gates
- →Ketch CMP failure: AUDIENCEX deploys Ketch but 12 vendors still fire pre-consent — leverage for documented consent enforcement effectiveness requirements
Runtime Detections
Runtime Detections
5 BTI-C CODES
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
BTI-C01Defeat Device
Evasion infrastructure, auditor bypass
BTI-C06Behavioral Biometrics
Keystroke/mouse tracking
BTI-C07Session Recording
Full session replay
BTI-C09Consent Bypass
Ignoring CMP signals
BTI-C10Fingerprinting
Device identification
IOC Manifest
IOC Manifest
158 INDICATORS
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
TRACK
*audiencex.com/cdn-cgi/scripts/*/cloudflare-static/rocket-loader.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/js/frontend.js*
Tracking script
TRACK
*audiencex.com/wp-includes/js/dist/hooks.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-wrapper-link.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js*
Tracking script
TRACK
*audiencex.com/wp-includes/js/dist/i18n.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-tile-scroll.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/common/helper.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/InertiaPlugin.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-marquee.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/Draggable.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-heading.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/gsap.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-offcanvas.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.js*
Tracking script
TRACK
*audiencex.com/wp-includes/js/jquery/ui/core.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor/assets/js/frontend.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor/assets/js/frontend-modules.js*
Tracking script
TRACK
*audiencex.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js*
Tracking script
TRACK
*audiencex.com/wp-includes/js/jquery/jquery-migrate.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js*
Tracking script
TRACK
*audiencex.com/wp-includes/js/jquery/jquery.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.*.bundle.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.*.bundle.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.*.bundle.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/js/mega-menu.*.bundle.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor/assets/js/text-editor.*.bundle.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor/assets/js/nested-accordion.*.bundle.js*
Tracking script
TRACK
*audiencex.com/wp-content/plugins/elementor-pro/assets/js/carousel.*.bundle.js*
Tracking script
TRACK
*audiencex.com/wp-includes/js/wp-emoji-release.js*
Tracking script
TRACK
audiencex.com/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-includes/js/dist/i18n.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-includes/js/dist/hooks.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-wrapper-link.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-tile-scroll.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/common/helper.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/InertiaPlugin.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/Draggable.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-marquee.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/vendor/js/gsap.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-advanced-heading.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/modules/ep-offcanvas.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/bdthemes-element-pack/assets/js/bdt-uikit.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-includes/js/jquery/ui/core.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js
Auto-extracted from scan
TRACK
audiencex.com/wp-includes/js/jquery/jquery-migrate.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-includes/js/jquery/jquery.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/js/mega-menu.82093824ddb3f5531ab4.bundle.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.480e081cebe071d683e8.bundle.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.f0362773c21105d2c65c.bundle.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor/assets/js/nested-accordion.10705241212f7b6c432b.bundle.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-content/plugins/elementor-pro/assets/js/carousel.3620fca501cb18163600.bundle.min.js
Auto-extracted from scan
TRACK
audiencex.com/wp-includes/js/wp-emoji-release.min.js
Auto-extracted from scan
Ecosystem
Ecosystem & Supply Chain
AUDIENCEX operates as a programmatic advertising DSP/platform. Their technology stack (TDX platform, AXi AI) suggests they serve as an intermediary between advertisers and ad exchanges. Detected loading on 25 distinct sites indicates publisher-side deployment. Key supply chain position: advertisers embed AUDIENCEX tracking on their properties, which in turn loads 66+ downstream vendors including identity resolution (Apollo.io, Clearbit), analytics (GA4, Clarity), and ad networks (DoubleClick, MetaPixel, LinkedIn, Twitter). This creates a cascading consent problem where deploying AUDIENCEX introduces 60+ undisclosed third parties to any customer property.
Loads (1)
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
163 detection signatures across scripts, domains, cookies, and network endpoints