How This Briefing Works
This report opens with key findings, then maps the gaps between what LiveIntent Ad Management discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Pre-Consent Activity
LiveIntent Ad Management was observed loading and executing before user consent was obtained on 64% of sites where it was detected.
Claims vs. Observed Behavior
pending
“Unknown”
Requires claims extraction via CDT
What This Means For You
What To Do About It
Role-specific actions based on observed behavior
If You Use LiveIntent Ad Management
- →Inspect sent email HTML for LiveIntent ad unit placeholders—often invisible in preview
- →Extract ad serving logs showing competitor brand appearances in your emails
- →Document customer complaints about unexpected advertising in brand emails
If You're Evaluating LiveIntent Ad Management
- →Quantify brand dilution from competitor ad impressions in owned email
- →Calculate revenue loss from LiveIntent capturing advertising monetization
- →Map GDPR Article 6 violations—advertising requires separate consent from marketing
Negotiation Leverage
- →LiveIntent Ad Management sells competitor advertising in YOUR emails—direct brand dilution
- →100/100 CAC subsidization as competitors pay LiveIntent to reach your customers in your emails
- →Consent bypass (C09)—email consent covers marketing communications, not third-party advertising
- →Cross-domain sync (C08) means every email open feeds universal targeting across advertising ecosystem
- →Persistence (C13) creates permanent advertising profile linked to customer email
- →95/100 legal exposure—GDPR requires separate consent for advertising vs marketing
- →Evidence pack includes email source showing competitor ad units and serving logs
Runtime Detections
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
Identity stitching
Impact: Universal ID enables targeting across all email publishers—your customers tracked everywhere
Ignoring CMP signals
Impact: Ad serving initiates on email open without advertising-specific consent
Long-lived identifiers
Impact: Advertising profile persists indefinitely through deterministic email matching
PII deanonymization
Impact: Email-based identity powers competitor conquest targeting across all channels
Container/loader (neutral)
IOC Manifest
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
Ecosystem & Supply Chain
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
Complete network capture with all requests and responses
83 detection signatures across scripts, domains, cookies, and network endpoints