How This Briefing Works
This report opens with key findings, then maps the gaps between what Singular discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Analysis pending. Findings will appear here once intelligence collection is complete.
Disclosure Gaps
Claims vs. Observed Behavior
3 gaps
pending_verification
MEDIUM
They Claim
“No fingerprinting on iOS post-ATT”
Observed Behavior
Public commitment verified in blog posts; runtime SDK behavior not yet observed via scanner
pending_verification
MEDIUM
They Claim
“Privacy-compliant modeled measurement”
Observed Behavior
Model methodology is opaque; awaiting technical documentation review and scanner verification of actual data collection
pending
UNKNOWN
They Claim
“Awaiting full scanner observation”
Observed Behavior
Analysis based on public documentation, blog posts, and published integration framework. Runtime SDK behavior and actual postback contents require direct observation.
Customer Impact
What This Means For You
Revenue Risk: Attribution data directly controls marketing budget allocation. Inaccurate or biased measurement can misdirect millions in ad spend toward underperforming channels or away from effective ones. Organizations relying on a single MMP for attribution truth have limited ability to independently verify measurement accuracy.
Compliance Exposure: Cross-platform tracking and attribution data sharing with 1,000+ partners creates a complex data processing chain. Each postback containing user-level data to an ad network is a data transfer that must be accounted for in privacy disclosures and data processing agreements.
Competitive Intelligence: Campaign performance data shared via postbacks reveals acquisition strategies, channel effectiveness, and willingness-to-pay signals to ad platforms that serve the entire market, including competitors.
Recommended Actions
What To Do About It
Role-specific actions based on observed behavior
Recommended Actions for Singular
- →- Audit postback configurations to understand exactly what user-level data is being shared with each ad network partner and whether data minimization principles are applied. - Review Singular's data retention policies and request documentation of what data is stored, for how long, and who has access within their organization. - Evaluate whether cross-platform attribution is necessary for your use case or whether channel-specific measurement would reduce data exposure while maintaining actionable insights. - Implement Singular's available privacy controls (data sharing filters, privacy configurations) to limit unnecessary data distribution to partners. - Consider independent measurement validation using server-side tracking or incrementality testing to verify attribution accuracy without sole reliance on MMP-reported data.
Negotiation Leverage
- →Leverage Points: Singular operates in a competitive MMP market alongside AppsFlyer, Adjust, Kochava, and Branch. This competition creates leverage for demanding stronger data protection terms and customized privacy configurations. The post-ATT environment has made privacy positioning a key differentiator, which means Singular is incentivized to accommodate privacy-forward contractual demands.
- →Key Questions: (1) What specific user-level data fields are included in postbacks to each ad network partner? (2) Does Singular use any aggregated or anonymized customer data for its own product development, benchmarking, or cross-customer insights? (3) What is the data retention period for user-level attribution data, and can it be reduced contractually? (4) How does modeled measurement work technically, and what data inputs feed the models?
- →Contract Protections: Negotiate explicit restrictions on secondary use of attribution data beyond your direct measurement needs. Require audit rights for data sharing practices with ad network partners. Include data deletion provisions with verified confirmation. Ensure contractual commitment to the no-fingerprinting policy with remediation provisions if violated.
IOC Manifest
IOC Manifest
122 INDICATORS
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
TRACK
*www.singular.net/wp-content/plugins/wp-swiper/build/frontend.build.js*
Tracking script
TRACK
*www.singular.net/wp-includes/js/dist/script-modules/interactivity/index.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/all-about-modal/assets/build/js/modules/module.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/linguise/assets/js/front.bundle.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/lottiefiles/build/lottiefiles-player.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/wp-swiper/assets/swiper/swiper-bundle.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/all-about-modal/assets/build/js/main.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/lottiefiles/build/lottiefiles-interactivity.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/lottiefiles/build/frontend-helper.js*
Tracking script
TRACK
*www.singular.net/wp-content/themes/_singular/dist/js/commons.*.js*
Tracking script
TRACK
*www.singular.net/wp-content/themes/_singular/dist/js/theme.*.js*
Tracking script
TRACK
*www.singular.net/wp-includes/js/dist/script-modules/block-library/query/view.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.js*
Tracking script
TRACK
*www.singular.net/wp-content/themes/_singular/dist/js/global.*.js*
Tracking script
TRACK
*www.singular.net/wp-content/plugins/linguise/assets/js/541.bundle.js*
Tracking script
TRACK
*www.singular.net/cdn-cgi/challenge-platform/scripts/jsd/main.js*
Tracking script
TRACK
*www.singular.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/*/main.js*
Tracking script
TRACK
*web-sdk-cdn.singular.net/singular-gtm-interface/latest/singular-gtm-interface.js*
Tracking script
TRACK
*web-sdk-cdn.singular.net/singular-sdk/latest/singular-sdk.js*
Tracking script
EXFIL
*sdk-api-v1.singular.net/api/v1/event*
Data collection endpoint
TRACK
www.singular.net/wp-content/plugins/wp-swiper/build/frontend.build.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/wp-swiper/assets/swiper/swiper-bundle.min.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/linguise/assets/js/front.bundle.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/all-about-modal/assets/build/js/modules/module.js
Auto-extracted from scan
TRACK
www.singular.net/wp-includes/js/dist/script-modules/interactivity/index.min.js
Auto-extracted from scan
TRACK
www.singular.net/wp-includes/js/dist/script-modules/block-library/query/view.min.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/lottiefiles/build/lottiefiles-player.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/lottiefiles/build/lottiefiles-interactivity.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/all-about-modal/assets/build/js/main.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/lottiefiles/build/frontend-helper.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/themes/_singular/dist/js/commons.191f3326dd78b40ef4bd.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/themes/_singular/dist/js/theme.6dfc05200418b29e9315.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/themes/_singular/dist/js/global.d81fa168b16f52a608e8.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js
Auto-extracted from scan
TRACK
www.singular.net/wp-content/plugins/linguise/assets/js/541.bundle.js
Auto-extracted from scan
TRACK
www.singular.net/cdn-cgi/challenge-platform/scripts/jsd/main.js
Auto-extracted from scan
TRACK
www.singular.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/ea2d291c0fdc/main.js
Auto-extracted from scan
TRACK
web-sdk-cdn.singular.net/singular-gtm-interface/latest/singular-gtm-interface.js
Auto-extracted from scan
TRACK
web-sdk-cdn.singular.net/singular-sdk/latest/singular-sdk.js
Auto-extracted from scan
Ecosystem
Ecosystem & Supply Chain
Singular integrates with over 1,000 media partners including major ad networks (Google, Meta, Apple Search Ads, TikTok, Snap), DSPs, and smaller ad networks. Data flows bidirectionally: attribution signals flow in from partners, and conversion postbacks flow out to enable campaign optimization. The platform connects with business intelligence tools, data warehouses, and marketing automation platforms. Singular also integrates with fraud prevention systems and SKAdNetwork/Google Privacy Sandbox infrastructure. The breadth of this integration network means Singular acts as a data nexus where marketing performance data from across an organization's entire paid acquisition stack converges and is redistributed to the advertising ecosystem.
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
122 detection signatures across scripts, domains, cookies, and network endpoints