All Vendors
analytics

Verbiflow

Verbiflow exhibits moderate revenue risk driven by demand signal leakage and consent opacity in analytics implementations.

51 IOCs1 detections1 sites
13
Vendor Risk Score

How This Briefing Works

This report opens with key findings, then maps the gaps between what Verbiflow discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.

Key Findings

Key Findings

1 detection across 1 site
Disclosure Gaps

Claims vs. Observed Behavior

1 gaps

Pending Analysis

UNKNOWN
They Claim

“Claims extraction pending”

Observed Behavior

Claims extraction pending — CDT analysis required.

Customer Impact

What This Means For You

Sites deploying Verbiflow for analytics unknowingly contribute behavioral fingerprints to vendor-side benchmarking that competitors use for product optimization. Biometric capture without disclosure creates GDPR Article 9 violations with maximum penalty exposure.
Recommended Actions

What To Do About It

Role-specific actions based on observed behavior

If You Use Verbiflow

  • →Audit analytics vendor contract for data aggregation and benchmarking clauses
  • →Demand biometric data opt-out and customer-specific data isolation
  • →Implement consent requiring explicit biometric data processing disclosure per GDPR Article 13(1)(c)

If You're Evaluating Verbiflow

  • →Privacy-preserving analytics that use aggregate metrics instead of individual fingerprints
  • →On-premise analytics solutions that prevent vendor-side data aggregation

Negotiation Leverage

  • →Behavioral biometrics detected in analytics implementation — require special category data handling per GDPR Article 9
  • →CAC subsidization: prohibit use of customer behavioral data for vendor benchmarking, industry reports, or competitive intelligence products
  • →Legal exposure: biometric fingerprinting without disclosure violates GDPR transparency requirements — demand liability cap and indemnification for regulatory enforcement
Runtime Detections

Runtime Detections

1 BTI-C CODES

BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.

BTI-C06Behavioral Biometrics

Keystroke/mouse tracking

Impact: Analytics vendors aggregate behavioral fingerprints across customers to build industry benchmarks and product intelligence that competitors access, directly subsidizing competitive analysis with customer data.

IOC Manifest

IOC Manifest

51 INDICATORS

Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.

TRACK
*verbiflow.com/_next/static/chunks/webpack-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/main-app-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/255-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/527-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/619-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/*-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/app/layout-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/app/not-found-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/40-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/643-*.js*
Tracking script
TRACK
*verbiflow.com/_next/static/chunks/app/page-*.js*
Tracking script
TRACK
verbiflow.com/_next/static/chunks/webpack-fce8bbfd9219f711.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/4bd1b696-c023c6e3521b1417.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/255-47484af636b98715.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/main-app-538e106ad0e86e08.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/527-314e242665d19812.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/619-9168df9c2a29b74b.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/40-920c920f8ce2922e.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/app/layout-4dd22c44d49abbb4.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/app/not-found-c1345e2f80630d65.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/8e1d74a4-df4fbe17b32cfae7.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/643-2dcaa8d88abb87e0.js
Auto-extracted from scan
TRACK
verbiflow.com/_next/static/chunks/app/page-aa4088459d79c600.js
Auto-extracted from scan
Ecosystem

Ecosystem & Supply Chain

Verbiflow operates in the web analytics space where behavioral data collection has escalated from page views to biometric fingerprinting, creating systemic privacy and competitive intelligence risks.
Evidence

Evidence Artifacts

Artifacts collected during analysis, available with evidence-tier access.

HAR Capture

Complete network capture with all requests and responses

IOC Manifest

51 detection signatures across scripts, domains, cookies, and network endpoints

Vendor Details