All Vendors
deanon

IdentityMatrix.ai

Signature-only detection. No behavioral threat indicators observed. De-anonymization vendors are critical-priority for runtime analysis — their core function is identity resolution.

11 IOCs2 detections2 sites
65
Vendor Risk Score

How This Briefing Works

This report opens with key findings, then maps the gaps between what IdentityMatrix.ai discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.

Key Findings

Key Findings

2 detections across 2 sites
Disclosure Gaps

Claims vs. Observed Behavior

1 gaps

Pending Analysis

UNKNOWN
They Claim

“Claims extraction pending”

Observed Behavior

CDT analysis critical — deanon vendors core function is identity resolution (BTI-C14)

Customer Impact

What This Means For You

No measurable behavioral risk from current detection data. However, de-anonymization vendors are the highest-risk category in the BLACKOUT taxonomy — their core function is resolving anonymous visitors to PII. Runtime recon is critical before any risk assessment can be considered reliable.
Recommended Actions

What To Do About It

Role-specific actions based on observed behavior

If You Use IdentityMatrix.ai

  • →do not deploy without full behavioral audit
  • →review consent mechanisms for identity resolution

If You're Evaluating IdentityMatrix.ai

  • →critical-priority recon investigation — deanon vendors require immediate behavioral analysis

Negotiation Leverage

  • →Baseline detection only — behavioral analysis is critical for deanon vendors
  • →Identity resolution vendors operate at the intersection of privacy law and surveillance
  • →Require complete data flow documentation including identity graph sources and retention policies
Runtime Detections

Runtime Detections

1 BTI-C CODES

BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.

BTI-C14Identity Resolution

PII deanonymization

IOC Manifest

IOC Manifest

9 INDICATORS

Indicators of compromise across 5 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.

EXFIL
api.identitymatrix.ai/tracker.js
Data collection endpoint
Ecosystem

Ecosystem & Supply Chain

IdentityMatrix.ai operates in the visitor de-anonymization market, converting anonymous website traffic into identifiable leads. This category represents the highest inherent privacy risk in the GTM vendor ecosystem.
Evidence

Evidence Artifacts

Artifacts collected during analysis, available with evidence-tier access.

HAR Capture

Complete network capture with all requests and responses

IOC Manifest

11 detection signatures across scripts, domains, cookies, and network endpoints

Vendor Details