ZoomInfo CEO Blocks Researcher After Documenting Pre-Consent Biometric Tracking

Summary

ZoomInfo GTM Studio: Pre-Consent Tracking Documentation "You can block the researcher. You can't block the evidence." What Happened On November 25, 2025, ZoomInfo CEO Henry Schuck posted a product demo of GTM Studio on LinkedIn — their AI-powered platform that "identifies person-level website visits." A security researcher analyzed the GTM Studio landing page and documented extensive pre-consent tracking infrastructure. The findings were posted as a comment on the CEO's LinkedIn post. Within minutes, the researcher was blocked. No correction. No clarification. Just silence. This evidence pack ensures the findings cannot be suppressed. Key Findings Finding Evidence 50+ tracking requests before consent Network capture shows tracking fires before consent banner loads Sardine.ai biometrics enabled enableBiometrics: true in decoded config PerimeterX fingerprinting Collector fires at request #79 (pre-consent) DNS fingerprinting active enableDNS: true in Sardine config 118 unique tracking domains Contacted on single page load Session fingerprinting Fraud detection API creates session pre-consent The Smoking Gun Decoded Sardine.ai Configuration { "enableBiometrics" : true , "enableDNS" : true , "partnerId" : " zoominfo " , "dBaseDomain" : " d.sardine.ai " , "environment" : " production " } This configuration was decoded from a base64-encoded payload in the collector iframe URL. Translation: Mouse movements tracked by default Typing patterns recorded DNS fingerprinting enabled ZoomInfo has a formal partnership with Sardine.ai This is production, not testing The Irony ZoomInfo markets GTM Studio as a tool to "identify person-level website visits." Yet on their own landing page for this product, they deploy: 3 external identity/fingerprinting vendors (Sardine.ai, PerimeterX, IdentityMatrix.ai) (Sardine.ai, PerimeterX, IdentityMatrix.ai) Behavioral biometrics before consent 118 different tracking domains Even the visitor identification vendor doesn't trust their own product for...