Skip to main content

Website evidence · pilot dataset

Does aliexpress.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. Some activity was recorded on a challenge page. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 7 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T19:43:31.313510Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titlelogin.aliexpress.us

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.2 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.userAgent2 calls
  • Inline caller recorded
window.devicePixelRatio1 calls
  • Inline caller recorded
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 7 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • login.aliexpress.us
  • www.aliexpress.us
Source record and integrity
Original source
results/headful/aliexpress-com-20261022T194331.json
Original file SHA-256
7d5ea0acc77e6fe8bd0dde8debba42ab769a2cad0fba99d8038c79fe602f78e0

Run ID: headful-7d5ea0acc77e. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T22:38:00.126197Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/aliexpress-com-20261021T223800.json
Original file SHA-256
9774550a4bc4b7f896227bcd39057308d10c6a77fe58654077765e8c5efd8cf1

Run ID: headful-9774550a4bc4. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T13:36:42.913559Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/aliexpress-com-20261022T133642.json
Original file SHA-256
301357bd10f2ea85e1f12646a837ea420b70a1c1416bab18de58d6902ad10f20

Run ID: headful-301357bd10f2. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T19:43:30.562752Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/aliexpress-com-20261022T194330.json
Original file SHA-256
78b6f4ab8ff9d9cb2a58e2e8fa71b159803aa8bed2eafc9b4afd49b8d21e9e86

Run ID: headful-78b6f4ab8ff9. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Draw + readback

2 of 5 signal families observed

Canvas: ObservedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Challenge page
Scan time
2026-10-22T17:28:35.082373Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCAPTCHA Verification

CanvasDraws text and reads canvas output.4 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext11 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • Inline caller recorded
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 85591
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 177419
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 188042
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 209917
canvas.toDataURL3 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 210083
  • https://g.alicdn.com/bsop-static/sufei-punish/0.1.129/build/punishpage.min.jsline 1 · col 104377
  • https://g.alicdn.com/sd/punish/0.0.1/qrcode.min.jsline 1 · col 16008
canvas2d.fillText5 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 210028
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 210064
  • https://o.alicdn.com/seclab/f/index1.jsline 1 · col 448040
canvas2d.getImageData4 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
  • https://o.alicdn.com/seclab/f/index1.jsline 1 · col 453261
  • https://o.alicdn.com/seclab/f/index1.jsline 1 · col 454923
WebGLQueries the graphics environment.3 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension6 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 60690
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 85760
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 122875
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 230569
  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
webglrenderingcontext.getParameter12 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 65343
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 65359
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 248958
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 248976
  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://o.alicdn.com/seclab/f/index1.jsline 1 · col 439294
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.16 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.getBattery2 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 117807
  • https://o.alicdn.com/seclab/f/index1.jsline 1 · col 6912
navigator.hardwareConcurrency28 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 50155
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 114500
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 175608
  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
navigator.language2 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 165440
  • https://g.alicdn.com/bsop-static/sufei-punish/0.1.129/build/punishpage.min.jsline 1 · col 82422
navigator.languages15 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 114514
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 175622
  • https://o.alicdn.com/seclab/f/index1.jsline 1 · col 418811
navigator.mimeTypes1 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • Inline caller recorded
navigator.platform22 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 106655
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 197874
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 218606
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 244130
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 248045
navigator.plugins1 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 69471
navigator.userAgent35 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://g.alicdn.com/AWSC/CAPTCHA/0.0.1/awsc.jsline 1 · col 1611
  • https://g.alicdn.com/bsop-static/sufei-punish/0.1.129/build/punishpage.min.jsline 1 · col 104449
  • https://g.alicdn.com/bsop-static/sufei-punish/0.1.129/build/punishpage.min.jsline 1 · col 104497
  • https://g.alicdn.com/bsop-static/sufei-punish/0.1.129/build/punishpage.min.jsline 1 · col 109241
  • https://g.alicdn.com/mtb/
navigator.webdriver15 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 163716
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 183395
  • https://o.alicdn.com/seclab/f/index1.jsline 1 · col 42947
screen.availHeight1 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
screen.availWidth2 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 234545
  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
screen.colorDepth1 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
screen.height19 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • Inline caller recorded
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 118312
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 240195
  • https://g.alicdn.com/alilog/mlog/aplus_v2.jsline 8 · col 2296
  • https://g.alicdn.com/trace/trace/1.3.22/
screen.pixelDepth1 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
screen.width19 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • Inline caller recorded
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 129705
  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.jsline 1 · col 236324
  • https://g.alicdn.com/alilog/mlog/aplus_v2.jsline 8 · col 2296
  • https://g.alicdn.com/trace/trace/1.3.22/
window.devicePixelRatio3 calls

Frame: https://aliexpress.com///_____tmd_____/punish

  • https://g.alicdn.com/secdev/entry/x/362f987b88325959.jsline 1 · col 418
  • https://g.alicdn.com/trace/trace/1.3.22/
Scripts with both text drawing and canvas readback 2

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://aeis.alicdn.com/AWSC/et/1.83.8/et_f.js
  • https://o.alicdn.com/seclab/f/index1.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://g.alicdn.com/bsop-static/sufei-punish/0.1.129/build/htmltocanvas.min.jsAPI patterns only · 4 API patterns
Network and worker observations 39 requests
Captured scripts
15
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a31feo.tdum.alibaba.com
  • aeis.alicdn.com
  • at.alicdn.com
  • cf.aliyun.com
  • fourier.taobao.com
  • g.alicdn.com
  • img.alicdn.com
  • log.mmstat.com
  • o.alicdn.com
  • s-gm.mmstat.com
  • ynuf.aliapp.org
Other recorded API calls 3
  • document.cookie.read25 calls
  • document.cookie.write25 calls
  • webrtc.RTCPeerConnection1 calls
Source record and integrity
Original source
results/headless/aliexpress-com-20261022T172835.json
Original file SHA-256
91d0290ffdcf2d27736f202959956e2054a852edf7f03877c6571dac35bc030c

Run ID: research-91d0290ffdcf. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T20:59:50.002665Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/aliexpress-com-20261021T205950.json
Original file SHA-256
2b5fa03b2d2acb26046dc76846752d7884b8beb4f086b39689939ed9b1ca5359

Run ID: research-2b5fa03b2d2a. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T17:28:34.994422Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headless/aliexpress-com-20261022T172834.json
Original file SHA-256
89158cb51716c271e6445fcd886f6663bfba1d3500c06d6666bf2bae931724f4

Run ID: research-89158cb51716. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →