Skip to main content

Website evidence · pilot dataset

Does apartments.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. Some activity was recorded on a challenge page. One browser setup is unmeasured or missing. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 4 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Draw + readback

5 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: ObservedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Challenge page
Scan time
2026-10-22T13:40:59.523320Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleAccess Denied

CanvasDraws text and reads canvas output.4 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext4 calls

Frame: https://www.apartments.com/

  • Inline caller recorded
  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
canvas.toDataURL1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
canvas2d.fillText2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
canvas2d.measureText11 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
WebGLQueries the graphics environment.4 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension4 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
webgl2renderingcontext.getParameter22 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
webglrenderingcontext.getExtension1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
webglrenderingcontext.getParameter2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
AudioRenders or reads audio samples.7 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

analyser.getFloatFrequencyData1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
analyser.getFloatTimeDomainData1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
audio.createAnalyser2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
audio.createDynamicsCompressor1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
audio.createOscillator2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
audiobuffer.getChannelData1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
offlineaudio.startRendering1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText11 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
DeviceReads browser and display properties.14 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.hardwareConcurrency2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.language1 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.languages2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.maxTouchPoints2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.platform4 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.plugins19 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.userAgent7 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
navigator.webdriver3 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
screen.colorDepth2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
screen.height2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
screen.pixelDepth2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
screen.width2 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
window.devicePixelRatio3 calls

Frame: https://www.apartments.com/

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://www.apartments.com/Fqdsbi/Yi/GX/n15m/2jZyl_Q7OlHdM/NtGarGOViS/BCwKdz4/J29NBT/wHAT0V
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 5 requests
Captured scripts
1
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

    Other recorded API calls 2
    • document.cookie.read28 calls
    • document.cookie.write2 calls
    Source record and integrity
    Original source
    results/headful/apartments-com-20261022T134059.json
    Original file SHA-256
    fbe37b060ba24b4fcd89f7e7b393b0a670f3c31f0fd4775115cf4d1aeb0227f0

    Run ID: headful-fbe37b060ba2. The JSON contains sanitized observations, not the original private scan payload.

    Other scan attempts (1)

    Visitor setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-21T23:18:53.138623Z
    Browser / scanner
    156.0.8078.4 / 0.3
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headful/apartments-com-20261021T231853.json
    Original file SHA-256
    7e588395bd25f8731dcf6fa4f1642ea41fdf8d7abaa4ac6ddeb31f9b3f3a4704

    Run ID: headful-7e588395bd25. The JSON contains sanitized observations, not the original private scan payload.

    Research setup

    Unmeasured

    Unmeasured

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Unmeasured
    Page context
    Challenge page
    Scan time
    2026-10-22T17:32:55.350161Z
    Browser / scanner
    156.0.8078.4 / 0.4
    Unmeasured — no usable scan result

    Only a challenge page was measured; the normal page remains unmeasured.

    Source record and integrity
    Original source
    results/headless/apartments-com-20261022T173255.json
    Original file SHA-256
    390b20909d48e6822aa58b6377a2ecea046a8a622e1b64d0edeb3fd4ac5a39b8

    Run ID: research-390b20909d48. The JSON contains sanitized observations, not the original private scan payload.

    Other scan attempts (1)

    Research setup

    Not observed

    0 of 5 signal families observed

    Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
    Measurement
    Measured
    Page context
    Challenge page
    Scan time
    2026-10-21T21:27:38.007963Z
    Browser / scanner
    156.0.8078.4 / 0.3

    Captured titleAccess Denied

    CanvasDraws text and reads canvas output.1 API entries

    Observed requires a text-drawing API and a canvas readback API. Guide ↗

    canvas.getContext1 calls

    Frame: https://apartments.com/

    • Inline caller recorded
    WebGLQueries the graphics environment.0 API entries

    Observed requires at least three distinct WebGL probing APIs. Guide ↗

    No matching API call was captured.

    AudioRenders or reads audio samples.0 API entries

    Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

    No matching API call was captured.

    FontsMeasures text repeatedly.0 API entries

    Observed requires at least ten text-measurement calls. Guide ↗

    No matching API call was captured.

    DeviceReads browser and display properties.0 API entries

    Observed requires at least three distinct browser, screen, or window properties. Guide ↗

    No matching API call was captured.

    Providers, script signatures, and DNS 0 provider labels

    Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

    No provider or DNS evidence in this record.

    Network and worker observations 1 requests
    Captured scripts
    0
    Instrumented frames
    1
    Google Ads observed
    No
    Transmission evidence
    Not validated

    Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

    Third-party hosts

      Source record and integrity
      Original source
      results/headless/apartments-com-20261021T212738.json
      Original file SHA-256
      4ec1ea10cc299df95375e2e6bfb5f2b4668a2b074d2b28c985f12c2a95b06820

      Run ID: research-4ec1ea10cc29. The JSON contains sanitized observations, not the original private scan payload.

      Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

      Read the sanitized JSON →