How This Briefing Works
This report opens with key findings, then maps the gaps between what Versium discloses and what BLACKOUT observed at runtime. From there: what it means for your organization, what to do about it, and the detection data and evidence underneath.
Key Findings
Key Findings
25 detections across 25 sites8% pre-consent activity
MEDIUM
Pre-Consent Activity
Versium was observed loading and executing before user consent was obtained on 8% of sites where it was detected.
GDPRePrivacy
Disclosure Gaps
Claims vs. Observed Behavior
1 gaps
pending
UNKNOWN
They Claim
“Requires claims extraction via CDT”
Observed Behavior
Defeat device, behavioral biometrics, session recording, cross-domain sync, consent bypass, and fingerprinting detected in runtime
Customer Impact
What This Means For You
Marketing teams lose attribution clarity when data enrichment distorts visitor behavior analysis. Analytics teams face measurement corruption from third-party identity layering. Legal teams inherit maximum liability exposure when contact platform deploys comprehensive surveillance. Revenue operations teams subsidize complete competitor intelligence through shared enrichment infrastructure.
Recommended Actions
What To Do About It
Role-specific actions based on observed behavior
If You Use Versium
- →Audit defeat device deployment within data enrichment infrastructure
- →Review session recording scope in contact intelligence workflows
- →Verify cross-domain sync boundaries for enrichment continuity mechanisms
- →Require consent collection before Versium surveillance initialization
If You're Evaluating Versium
- →Data enrichment solutions without embedded visitor surveillance
- →Privacy-respecting contact intelligence platforms limiting tracking scope
- →Self-hosted enrichment workflows eliminating cross-customer intelligence leakage
Negotiation Leverage
- →Challenge defeat device mechanisms within contact intelligence platform
- →Require disclosure of all surveillance capabilities beyond data enrichment
- →Demand opt-out from cross-customer enrichment monitoring analysis
- →Request data processing agreement amendments addressing visitor surveillance through enrichment infrastructure
- →Negotiate liability indemnification for maximum tracking deployed through data intelligence platform
Runtime Detections
Runtime Detections
6 BTI-C CODES
BLACKOUT observed this vendor's JavaScript executing in a live browser and classified each hostile behavior using our BTI-C (Behavioral Threat Intelligence — Capability) taxonomy. These are not theoretical risks — each code below was triggered by something we watched this vendor's code actually do.
BTI-C01Defeat Device
Evasion infrastructure, auditor bypass
Impact: Detection evasion mechanisms obscure surveillance deployment within data enrichment infrastructure.
BTI-C06Behavioral Biometrics
Keystroke/mouse tracking
Impact: Interaction patterns captured to enhance contact enrichment profiles with behavioral context.
BTI-C07Session Recording
Full session replay
Impact: Website sessions captured in full fidelity to contextualize contact data enrichment workflows.
BTI-C08Cross-Domain Sync
Identity stitching
Impact: Contact enrichment synchronized across organizational properties and external data touchpoints.
BTI-C09Consent Bypass
Ignoring CMP signals
Impact: Visitor surveillance and data enrichment active before consent collection completes.
BTI-C10Fingerprinting
Device identification
Impact: Device characteristics harvested to maintain contact continuity and enhance enrichment accuracy.
IOC Manifest
IOC Manifest
205 INDICATORS
Indicators of compromise across 4 categories. Use for detection rules, CSP policies, or Pi-hole blocklists.
TRACK
*versium.com/wp-content/plugins/cookie-law-info/lite/frontend/js/gcm.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/easy-pricing-tables/includes/v4/blocks/table/table-frontend.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-editor-common.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-toolbar.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-editor.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-sidebar.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/layout1/fca-ept-layout1.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/layout2/fca-ept-layout2.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.js*
Tracking script
TRACK
*versium.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/webpack.runtime.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/jetpack/modules/wpgroho.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor-pro/assets/js/frontend.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/frontend.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/frontend-modules.js*
Tracking script
TRACK
*versium.com/wp-content/uploads/essential-addons-elementor/eael-*.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/page-links-to/dist/new-tab.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js*
Tracking script
TRACK
*versium.com/%E2%80%9Chttps://app.identitymatrix.ai/trackingScript.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/nested-tabs.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor-pro/assets/js/animated-headline.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/text-editor.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor-pro/assets/js/carousel.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/image-carousel.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-content/plugins/elementor/assets/js/nested-title-keyboard-handler.*.bundle.js*
Tracking script
TRACK
*versium.com/wp-includes/js/wp-emoji-release.js*
Tracking script
EXFIL
*api2b.versium.com/bk.js*
Data collection endpoint
TRACK
versium.com/wp-content/plugins/cookie-law-info/lite/frontend/js/gcm.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/iconHelper.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/easy-pricing-tables/includes/v4/blocks/table/table-frontend.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-editor-common.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-sidebar.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-toolbar.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/editor/fca-ept-editor.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/layout1/fca-ept-layout1.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/easy-pricing-tables/assets/blocks/layout2/fca-ept-layout2.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/eae.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/build/index.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/animated-main.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/js/particles.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/magnific.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/addon-elements-for-elementor-page-builder/assets/lib/vegas/vegas.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/jetpack/modules/wpgroho.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/essential-addons-for-elementor-lite/assets/front-end/js/view/general.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/uploads/essential-addons-elementor/eael-1216.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/lib/swiper/v8/swiper.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/page-links-to/dist/new-tab.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/jetpack/_inc/build/carousel/jetpack-carousel.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/animate-circle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/elementor.js
Auto-extracted from scan
TRACK
versium.com/%E2%80%9Chttps://app.identitymatrix.ai/trackingScript.js
Auto-extracted from scan
EXFIL
api2b.versium.com/bk.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/nested-tabs.a2401356d329f179475e.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor-pro/assets/js/animated-headline.c009d6fa482515df23f8.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor-pro/assets/js/carousel.3620fca501cb18163600.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/image-carousel.6167d20b95b33386757b.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-content/plugins/elementor/assets/js/nested-title-keyboard-handler.2a67d3cc630e11815acc.bundle.min.js
Auto-extracted from scan
TRACK
versium.com/wp-includes/js/wp-emoji-release.min.js
Auto-extracted from scan
Ecosystem
Ecosystem & Supply Chain
Versium integrates with CRM platforms and marketing automation systems, creates measurement interference through data enrichment layer, and establishes cross-customer monitoring channels observing contact intelligence strategies across shared customer base.
Evidence
Evidence Artifacts
Artifacts collected during analysis, available with evidence-tier access.
HAR Capture
Complete network capture with all requests and responses
IOC Manifest
209 detection signatures across scripts, domains, cookies, and network endpoints