Skip to main content

Website evidence · pilot dataset

Does airbnb.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T19:42:04.399752Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleAirbnb: Vacation Rentals, Cabins, Beach Houses, Unique Homes & Experiences

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.airbnb.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 56 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a0.muscache.com
Source record and integrity
Original source
results/headful/airbnb-com-20261022T194204.json
Original file SHA-256
87d9ef1177e5784e81c74638d724da6d41f3f4619ebaa280fb7f10c27a4b1887

Run ID: headful-87d9ef1177e5. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T23:14:57.414243Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/airbnb-com-20261021T231457.json
Original file SHA-256
6f4666d805116908efd2fc36eb820e79131c0bbbe012cc9ebbf90a1aa42a5baa

Run ID: headful-6f4666d80511. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T13:35:27.893993Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/airbnb-com-20261022T133527.json
Original file SHA-256
22b09ef5637e87a5d9fed3aaebfc233321bb2d2edc3027db738e358759021a35

Run ID: headful-22b09ef5637e. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T19:42:03.769234Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/airbnb-com-20261022T194203.json
Original file SHA-256
cf47e918746f012fe29a4e42cb1f534a714e67b25177e800f56d25e14898219b

Run ID: headful-cf47e918746f. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T17:27:37.785990Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleAirbnb: Vacation Rentals, Cabins, Beach Houses, Unique Homes & Experiences

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.airbnb.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.9 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory4 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/ef24.68e25f2c7b.jsline 55 · col 777
  • https://a0.muscache.com/airbnb/static/packages/web/common/ef24.68e25f2c7b.jsline 55 · col 807
navigator.getBattery1 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/en/e6f0.39e48b5b0e.jsline 66 · col 146
navigator.hardwareConcurrency4 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/ef24.68e25f2c7b.jsline 55 · col 882
  • https://a0.muscache.com/airbnb/static/packages/web/common/ef24.68e25f2c7b.jsline 55 · col 919
navigator.maxTouchPoints2 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/frontend/core-guest-spa/entrypoints/initializer.e661e24250.jsline 4 · col 255
  • https://a0.muscache.com/airbnb/static/packages/web/en/e6f0.39e48b5b0e.jsline 37 · col 184
navigator.userAgent15 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/5878.fe347149cf.jsline 26 · col 1430
  • https://a0.muscache.com/airbnb/static/packages/web/common/5878.fe347149cf.jsline 66 · col 11635
  • https://a0.muscache.com/airbnb/static/packages/web/common/5878.fe347149cf.jsline 228 · col 980
  • https://a0.muscache.com/airbnb/static/packages/web/common/9958.9783ba5b15.jsline 83 · col 153
  • https://a0.muscache.com/airbnb/static/packages/web/common/frontend/core-guest-spa/entrypoints/initializer.e661e24250.jsline 10 · col 129
navigator.webdriver1 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/9958.9783ba5b15.jsline 83 · col 190
screen.height1 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/ef24.68e25f2c7b.jsline 43 · col 1271
screen.width1 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/ef24.68e25f2c7b.jsline 43 · col 1262
window.devicePixelRatio1 calls

Frame: https://www.airbnb.com/

  • https://a0.muscache.com/airbnb/static/packages/web/common/ef24.68e25f2c7b.jsline 43 · col 716
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://a0.muscache.com/airbnb/static/packages/web/common/5878.fe347149cf.jsAkamai Bot Manager, Arkose Labs, DataDome, reCAPTCHA · 0 API patterns
  • https://a0.muscache.com/airbnb/static/packages/web/en/frontend/airmetro/browser/asyncRequire.7e0849eb86.jsArkose Labs · 0 API patterns
Network and worker observations 67 requests
Captured scripts
17
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a0.muscache.com
Other recorded API calls 2
  • document.cookie.read7 calls
  • document.cookie.write12 calls
Source record and integrity
Original source
results/headless/airbnb-com-20261022T172737.json
Original file SHA-256
823b9940fd60a637f34cee38c4fa3829a7008b3e589a3a4afd54aebfadbf60c4

Run ID: research-823b9940fd60. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T21:24:18.691761Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/airbnb-com-20261021T212418.json
Original file SHA-256
4a025d694126d21054a2cbc270af92c7d38a561deac867bb7fc38a906d9d5b8b

Run ID: research-4a025d694126. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →