How This Briefing Works
This report opens with key findings, then maps the gaps between what Index Exchange discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Key Findings
18 detections across 15 sites100% pre-consent activity
CRITICAL
Pre-Consent Activity
Index Exchange was observed loading and executing before user consent was obtained on 100% of sites where it was detected.
GDPRePrivacy
IOC Manifest
IOC Manifest
3 INDICATORS
Indicators of compromise across 2 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
No indicators in this category
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
3 detection signatures across scripts, domains, cookies, and network endpoints