How This Briefing Works
This report opens with key findings, then maps the gaps between what LeadInfo discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Analysis pending. Findings will appear here once intelligence collection is complete.
Disclosure Gaps
Claims vs. Observed Behavior
4 gaps
pending
UNKNOWN
They Claim
“Works completely cookieless with no tracking cookies, no device fingerprinting, no cross-site monitoring”
Observed Behavior
Awaiting scanner verification to confirm no cookies are set and no fingerprinting techniques are used. Cookieless claim is strong but requires runtime validation of the tracking pixel behavior.
data_collection
HIGH
They Claim
“Processes only business data — no personal data, no individual tracking, no personal profiles”
Observed Behavior
Contact enrichment feature provides verified email addresses, mobile phone numbers, and LinkedIn profiles for individuals at identified companies, filtered by seniority and role. This constitutes individual personal data processing layered on top of the company-level identification.
data_retention
MEDIUM
They Claim
“IP addresses are not saved”
Observed Behavior
Awaiting verification. The claim that IPs are processed for resolution but not stored requires independent technical validation of data retention practices.
consent
MEDIUM
They Claim
“100% GDPR compliant with ISO 27001 certification”
Observed Behavior
Company-level IP resolution may qualify as legitimate interest processing, but the contact enrichment layer introducing individual employee PII (emails, phones, LinkedIn) from anonymous visits likely requires separate legal basis analysis.
Customer Impact
What This Means For You
LeadInfo presents a more favorable risk profile than many deanon vendors due to its cookieless architecture and European data processing infrastructure. Organizations operating in GDPR-regulated markets benefit from the platform's ISO 27001 certification, EU-only data storage, and the legitimate interest argument for company-level IP resolution. The cookieless approach also sidesteps ePrivacy Directive cookie consent requirements, reducing friction in the consent management workflow.
However, the contact enrichment layer introduces risk that undercuts the privacy-forward positioning. When LeadInfo surfaces individual employee email addresses, phone numbers, and LinkedIn profiles based on a company's anonymous website visit, this crosses from firmographic intelligence into personal data processing. Organizations using this enrichment feature need to establish a valid legal basis for processing these individuals' personal data — the employees themselves did not visit the website, and their contact information is being surfaced based on their employer's IP address appearing in site logs. The 70+ integration ecosystem also means that once this data enters CRM systems and automation workflows, it propagates across platforms that may not have been evaluated for compatibility with the original data processing purpose.
Recommended Actions
What To Do About It
Role-specific actions based on observed behavior
Recommended Actions for LeadInfo
- →- Verify LeadInfo's cookieless claim through runtime analysis — confirm no cookies are set and no fingerprinting occurs in the tracking pixel - If using contact enrichment (individual emails, phones, LinkedIn), conduct a separate legal basis analysis under GDPR Article 6 for processing these individuals' personal data - Audit the full list of LeadInfo integrations activated in your account and ensure each downstream system is covered in your data processing inventory - Review Zapier/Make workflows to prevent LeadInfo visitor data from flowing to systems not assessed for privacy compliance - Validate that IP addresses are truly not retained by requesting LeadInfo's technical data flow documentation and retention schedules
Negotiation Leverage
- →LeadInfo's strong privacy positioning (cookieless, ISO 27001, EU data centers, GDPR compliance) provides a solid foundation for negotiation, but the contact enrichment feature creates leverage points. Request explicit documentation separating the legal basis for company-level IP resolution (likely legitimate interest) from the legal basis for providing individual employee contact details (which may require a different justification). Ask for contractual guarantees that IP addresses are processed transiently and not stored or logged.
- →Key leverage points: LeadInfo's 220-million-company database and 300-million-profile contact database draw from 45+ external sources. Request transparency on these data sources and their own GDPR compliance status. If any source has faced regulatory action or data breach, this cascades into LeadInfo's data quality and compliance posture. Negotiate the right to use company-level identification without the contact enrichment layer if your legal team determines the individual PII processing introduces unacceptable risk. Ensure your DPA specifies data deletion obligations that cover both the primary identification and any enrichment data that has been pushed to your CRM systems.
IOC Manifest
IOC Manifest
172 INDICATORS
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.js*
Tracking script
TRACK
*www.leadinfo.com/wp-includes/js/jquery/jquery-migrate.js*
Tracking script
TRACK
*www.leadinfo.com/wp-includes/js/jquery/jquery.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/dynamicconditions/Public/js/dynamic-conditions-public.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/frontend.js*
Tracking script
TRACK
*www.leadinfo.com/wp-includes/js/dist/hooks.js*
Tracking script
TRACK
*www.leadinfo.com/wp-includes/js/dist/i18n.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/js/frontend-modules.js*
Tracking script
TRACK
*www.leadinfo.com/wp-includes/js/jquery/ui/core.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/js/frontend.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.*.bundle.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/mega-menu.*.bundle.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/js/text-editor.*.bundle.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.*.bundle.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/js/image-carousel.*.bundle.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/js/video.*.bundle.js*
Tracking script
TRACK
*www.leadinfo.com/wp-includes/js/wp-emoji-release.js*
Tracking script
TRACK
*www.leadinfo.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.js*
Tracking script
TRACK
*sst.leadinfo.com/lucuwxgkco.js*
Tracking script
TRACK
www.leadinfo.com/wp-includes/js/jquery/jquery.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-includes/js/jquery/jquery-migrate.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/dynamicconditions/Public/js/dynamic-conditions-public.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-includes/js/dist/hooks.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-includes/js/dist/i18n.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-includes/js/jquery/ui/core.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js
Auto-extracted from scan
TRACK
sst.leadinfo.com/lucuwxgkco.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/lib/dialog/dialog.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/mega-menu.cd787a5946bfee971978.bundle.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/mega-menu-stretch-content.480e081cebe071d683e8.bundle.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor-pro/assets/js/menu-title-keyboard-handler.dff562edd49e93d1658e.bundle.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/js/text-editor.2c35aafbe5bf0e127950.bundle.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/js/image-carousel.4455c6362492d9067512.bundle.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/js/video.78c625e89ab767d621c5.bundle.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-includes/js/wp-emoji-release.min.js
Auto-extracted from scan
TRACK
www.leadinfo.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js
Auto-extracted from scan
Ecosystem
Ecosystem & Supply Chain
LeadInfo operates a substantial integration ecosystem with 70+ native connectors spanning CRM, marketing automation, and sales enablement platforms. Direct integrations include HubSpot, Salesforce, Pipedrive, Zoho, Microsoft Dynamics 365, Mailchimp, ActiveCampaign, and Sendinblue. Zapier and Make connectivity extends the reach to over 1,000 additional platforms, enabling custom automation workflows triggered by visitor identification events.
The platform's data supply chain draws from over 45 external data sources to enrich company identifications beyond basic IP resolution. The 220-million-company database is built from publicly available sources including commercial registries, and the contact enrichment layer with 300+ million profiles introduces additional data partnerships. LeadInfo emphasizes that native in-house integrations avoid sharing data with third parties that do not provide direct benefits, and all data processing occurs in European data centers with ISO 27001 and BSI C5 certifications. However, once visitor identification data enters customer CRM systems through any of the 70+ integrations, retention, access control, and downstream sharing become governed by the customer's own data governance practices.
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
172 detection signatures across scripts, domains, cookies, and network endpoints