How This Briefing Works
This report opens with key findings, then maps the gaps between what Fullenrich discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Claims vs. Observed Behavior
pending
“Requires claims extraction via CDT”
Live website analysis pending
What This Means For You
What To Do About It
Role-specific actions based on observed behavior
If You Use Fullenrich
- →Audit upstream data providers for GDPR compliance and consent documentation
- →Implement enrichment batching to reduce real-time lookup pattern exposure
- →Review data processing addendum for clarity on data provider relationships
If You're Evaluating Fullenrich
- →First-party data collection strategies to reduce third-party enrichment dependency
- →Alternative providers with transparent data sourcing and stronger privacy commitments
- →Self-hosted enrichment using purchased datasets to eliminate lookup signal leakage
Negotiation Leverage
- →Request exhaustive list of upstream data providers and explicit controls over which sources are used for enrichment
- →Demand contractual prohibition on Fullenrich or partners using your lookup patterns for competitive intelligence or benchmarking
- →Negotiate data sourcing transparency including consent basis and collection methods for all contact data returned
Runtime Detections
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
Identity stitching
Impact: Synchronizes prospect identity across multiple data provider sources to compile enriched profiles
IOC Manifest
Indicators of compromise across 2 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
No indicators in this category
Ecosystem & Supply Chain
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
Complete network capture with all requests and responses
11 detection signatures across scripts, domains, cookies, and network endpoints