CaliberMind | Vendor Intelligence

How This Briefing Works

This report opens with key findings, then maps the gaps between what CaliberMind discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.

Key Findings

7 detections across 6 sites71% pre-consent activity

CRITICAL

Pre-Consent Activity

CaliberMind was observed loading and executing before user consent was obtained on 71% of sites where it was detected.

GDPRePrivacy

Disclosure Gaps

Claims vs. Observed Behavior

2 gaps

disclosure

HIGH

They Claim

“Pending privacy policy review”

Observed Behavior

Account-level tracking observed without disclosure verification

Customer Impact

What This Means For You

Customers face GDPR violations from unconsented visitor deanonymization. Identity resolution creates Article 6(4) compatible purpose violations when anonymous browsing data is linked to CRM records without consent. B2B customers face reputational risk if account-level surveillance becomes public—competitors may view CaliberMind deployment as hostile intelligence gathering. IP-based identification creates accuracy concerns (VPNs, shared IPs, remote workers).

Recommended Actions

What To Do About It

Role-specific actions based on observed behavior

If You Use CaliberMind

→Implement strict consent-gating before CaliberMind visitor identification activates
→Configure identity resolution to require explicit opt-in before linking sessions to CRM accounts
→Disable IP-based deanonymization in favor of authenticated user tracking only
→Enable data minimization controls to limit account intelligence retention to active deal cycles
→Conduct quarterly audits of deanonymization accuracy and false-positive account matching
→Deploy segregated tracking for EU/CA visitors with consent-first architecture

If You're Evaluating CaliberMind

→Request DPA with explicit limitations on visitor identification and CRM data linking
→Verify CaliberMind honors consent signals before initiating deanonymization workflows
→Demand contractual prohibition on using customer account intelligence for CaliberMind's own data products
→Assess alternative ABM platforms with privacy-preserving measurement (aggregated account signals only)
→Require technical documentation on IP matching methodology and accuracy rates
→Negotiate liability protection for GDPR fines arising from unconsented visitor identification

Negotiation Leverage

→CaliberMind identity resolution (BTI-C14) deanonymizes visitors without consent—require explicit opt-in before any session-to-account linking
→Consent bypass (BTI-C09) during visitor identification creates regulatory exposure—demand technical implementation of consent verification before deanonymization
→IP-based identification creates accuracy concerns—request documentation on false-positive rates and methodology for shared IP handling
→Demand contractual prohibition on using customer account intelligence for CaliberMind's cross-customer insights or data marketplace
→Negotiate maximum 90-day retention for account-level behavioral data with automated deletion for incomplete deal cycles

Runtime Detections

2 BTI-C CODES

BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.

BTI-C09Consent Bypass

Ignoring CMP signals

Impact: Activates visitor identification infrastructure before consent collection, creating automatic legal violations for deanonymization workflows.

BTI-C14Identity Resolution

PII deanonymization

Impact: Links anonymous website sessions to CRM accounts and individual contacts without explicit consent, enabling account-level surveillance of buyer research activities.

IOC Manifest

285 INDICATORS

Indicators of compromise across 3 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-gdpr.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/jquery/jquery-migrate.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/jquery/jquery.js*

Tracking script

TRACK

*calibermind.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js*

Tracking script

EXFIL

*cdn.calibermind.com/js/identifyEmail.latest.js*

Data collection endpoint

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/frontend-modules.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/jquery/ui/core.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/frontend.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.js*

Tracking script

TRACK

*cdn.calibermind.com/js/abm.js*

Tracking script

TRACK

*cdn.calibermind.com/a.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/underscore.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/wp-util.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/dist/hooks.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/dist/i18n.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.date.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.time.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/common.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-modal.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/common-frontend.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/jquery-form/jquery-form.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/fileupload/fileupload.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-responsive.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-conditional.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-functions.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/select2/i18n/en.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-scripts.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-profile.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-account.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/frontend.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/jet-elements/assets/js/jet-elements.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/jet-blog/assets/js/jet-blog.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/search-form.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/mega-menu.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/search.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/text-editor.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/image-carousel.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor-pro/assets/js/nested-carousel.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/nested-tabs.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/nested-accordion.*.bundle.js*

Tracking script

TRACK

*calibermind.com/wp-includes/js/wp-emoji-release.js*

Tracking script

TRACK

*calibermind.com/wp-content/plugins/elementor/assets/js/nested-title-keyboard-handler.*.bundle.js*

Tracking script

TRACK

cdn.calibermind.com

Tracking script

TRACK

calibermind.com/wp-includes/js/jquery/jquery.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-includes/js/jquery/jquery-migrate.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-gdpr.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-includes/js/jquery/ui/core.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/frontend.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-includes/js/underscore.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-includes/js/wp-util.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-includes/js/dist/hooks.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-includes/js/dist/i18n.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/tipsy/tipsy.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/um-confirm/um-confirm.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.date.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/pickadate/picker.time.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/common.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/cropper/cropper.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/common-frontend.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-modal.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/jquery-form/jquery-form.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/fileupload/fileupload.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-functions.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-responsive.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-conditional.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/select2/select2.full.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/select2/i18n/en.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/libs/raty/um-raty.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-scripts.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-profile.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/ultimate-member/assets/js/um-account.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/jet-elements/assets/js/jet-elements.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/jet-tabs/assets/js/jet-tabs-frontend.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/jet-blog/assets/js/jet-blog.min.js

Auto-extracted from scan

EXFIL

cdn.calibermind.com/js/identifyEmail.latest.js

Auto-extracted from scan

TRACK

cdn.calibermind.com/a.js

Auto-extracted from scan

TRACK

cdn.calibermind.com/js/abm.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/search-form.b7065999d77832a1b764.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.8521a0597c50611efdc6.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/mega-menu.82093824ddb3f5531ab4.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.480e081cebe071d683e8.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.f0362773c21105d2c65c.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/search.5d88e65c03029f91931d.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor-pro/assets/js/nested-carousel.db797a097fdc5532ef4a.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/nested-tabs.a2401356d329f179475e.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/nested-accordion.10705241212f7b6c432b.bundle.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-includes/js/wp-emoji-release.min.js

Auto-extracted from scan

TRACK

calibermind.com/wp-content/plugins/elementor/assets/js/nested-title-keyboard-handler.2a67d3cc630e11815acc.bundle.min.js

Auto-extracted from scan

Ecosystem

Ecosystem & Supply Chain

CaliberMind integrates with CRM platforms (Salesforce, HubSpot), marketing automation (Marketo, Pardot), and advertising systems to enable account-based marketing. The platform resolves visitor identities through IP address matching, reverse email lookup, and CRM data enrichment. Data flows bidirectionally with sales intelligence platforms and intent data providers.

Commonly Deployed With

G2 Salesloft Googletagmanager Drift Marketo Ketch Linkedinads Bing Ads Hotjar 6sense

Evidence

Evidence Artifacts

Artifacts collected during analysis, available with evidence-tier access.

HAR Capture

Complete network capture with all requests and responses

IOC Manifest

285 detection signatures across scripts, domains, cookies, and network endpoints