All Vendors
deanon

Moxiegtm

Signature-only detection. No behavioral threat indicators observed. De-anonymization vendors are critical-priority for runtime analysis — their core function is identity resolution.

28 IOCs1 detections100% pre-consent1 sites
80
Vendor Risk Score

How This Briefing Works

This report opens with key findings, then maps the gaps between what Moxiegtm discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.

Key Findings

Key Findings

1 detection across 1 site100% pre-consent activity
CRITICAL

Pre-Consent Activity

Moxiegtm was observed loading and executing before user consent was obtained on 100% of sites where it was detected.

GDPRePrivacy
Disclosure Gaps

Claims vs. Observed Behavior

1 gaps

Pending Analysis

UNKNOWN
They Claim

“Claims extraction pending”

Observed Behavior

CDT analysis critical — deanon vendors core function is identity resolution (BTI-C14)

Customer Impact

What This Means For You

No measurable behavioral risk from current detection data. However, de-anonymization vendors are the highest-risk category in the BLACKOUT taxonomy — their core function is resolving anonymous visitors to PII. Runtime recon is critical before any risk assessment can be considered reliable.
Recommended Actions

What To Do About It

Role-specific actions based on observed behavior

If You Use Moxiegtm

  • →do not deploy without full behavioral audit
  • →review consent mechanisms for identity resolution

If You're Evaluating Moxiegtm

  • →critical-priority recon investigation — deanon vendors require immediate behavioral analysis

Negotiation Leverage

  • →Baseline detection only — behavioral analysis is critical for deanon vendors
  • →Identity resolution vendors operate at the intersection of privacy law and surveillance
  • →Require complete data flow documentation including identity graph sources and retention policies
Runtime Detections

Runtime Detections

5 BTI-C CODES

BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.

BTI-C06Behavioral Biometrics

Keystroke/mouse tracking

BTI-C07Session Recording

Full session replay

BTI-C08Cross-Domain Sync

Identity stitching

BTI-C09Consent Bypass

Ignoring CMP signals

BTI-C14Identity Resolution

PII deanonymization

IOC Manifest

IOC Manifest

28 INDICATORS

Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.

TRACK
*moxiegtm.com/_astro-*/Integrations.DWJRu9mo.js*
Tracking script
TRACK
*moxiegtm.com/_astro-*/client.B5QXyxkk.js*
Tracking script
TRACK
*moxiegtm.com/_astro-*/Page.DpdfKrR2.js*
Tracking script
TRACK
*moxiegtm.com/_astro-*/ClientHead.BslolIjd.js*
Tracking script
TRACK
*moxiegtm.com/_astro-*/siteModulesConstants.ZF4BdlzC.js*
Tracking script
TRACK
*moxiegtm.com/_astro-*/scrollToSection.r8KH5z1l.js*
Tracking script
TRACK
*moxiegtm.com/_astro-*/_plugin-vue_export-helper.KrJQkJWK.js*
Tracking script
TRACK
*moxiegtm.com/_astro-*/addDocumentElements.BKsK34K5.js*
Tracking script
TRACK
moxiegtm.com/_astro-1761105474561/ClientHead.BslolIjd.js
Auto-extracted from scan
TRACK
moxiegtm.com/_astro-1761105474561/client.B5QXyxkk.js
Auto-extracted from scan
TRACK
moxiegtm.com/_astro-1761105474561/Page.DpdfKrR2.js
Auto-extracted from scan
TRACK
moxiegtm.com/_astro-1761105474561/Integrations.DWJRu9mo.js
Auto-extracted from scan
TRACK
moxiegtm.com/_astro-1761105474561/_plugin-vue_export-helper.KrJQkJWK.js
Auto-extracted from scan
TRACK
moxiegtm.com/_astro-1761105474561/scrollToSection.r8KH5z1l.js
Auto-extracted from scan
TRACK
moxiegtm.com/_astro-1761105474561/siteModulesConstants.ZF4BdlzC.js
Auto-extracted from scan
TRACK
moxiegtm.com/_astro-1761105474561/addDocumentElements.BKsK34K5.js
Auto-extracted from scan
Ecosystem

Ecosystem & Supply Chain

Moxiegtm operates in the visitor de-anonymization market, converting anonymous website traffic into identifiable leads. This category represents the highest inherent privacy risk in the GTM vendor ecosystem.
Evidence

Evidence Artifacts

Artifacts collected during analysis, available with evidence-tier access.

HAR Capture

Complete network capture with all requests and responses

IOC Manifest

28 detection signatures across scripts, domains, cookies, and network endpoints

Vendor Details