Website evidence · pilot dataset

Does baidu.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

1 of 5 signal families observed

Measurement: Measured · Partial load
Page context: Page document
Scan time: 2026-10-22T13:48:32.870020Z
Browser / scanner: 156.0.8078.4 / 0.4

Captured title百度一下，你就知道

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.baidu.com/

Inline caller recorded

WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.3 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.maxTouchPoints1 calls

Frame: https://www.baidu.com/

https://www.baidu.com/line 2089 · col 40

navigator.userAgent4 calls

Frame: https://www.baidu.com/

https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/es6-polyfill_388d059.jsline 46 · col 80
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 75 · col 290
https://www.baidu.com/line 2150 · col 19
https://www.baidu.com/line 5942 · col 22

window.devicePixelRatio2 calls

Frame: https://www.baidu.com/

https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 18 · col 549
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 18 · col 577

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 79 requests

Captured scripts: 10
Instrumented frames: 1
Google Ads observed: No
Transmission evidence: Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

pss.bdstatic.com
psstatic.cdn.bcebos.com

Other recorded API calls 2

document.cookie.read2 calls
document.cookie.write1 calls

Source record and integrity

Original source: results/headful/baidu-com-20261022T134832.json
Original file SHA-256: 24f45508b5bf91d250add9d1c89794dc50fab002f8a26fb777745311280007f5

Run ID: headful-24f45508b5bf. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Draw + readback

3 of 5 signal families observed

Measurement: Measured
Page context: Page document
Scan time: 2026-10-19T01:32:29.389474Z
Browser / scanner: 156.0.8078.4 / 0.3

Captured title百度一下，你就知道

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext7 calls

Frame: https://www.baidu.com/

Inline caller recorded
https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473
https://pss.bdstatic.com/static/superman-san/app/chat-input/result_5df0eda.jsline 10 · col 185896

canvas.toDataURL2 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

canvas2d.fillText4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

webgl2renderingcontext.getParameter4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

AudioRenders or reads audio samples.4 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createDynamicsCompressor1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

audio.createOscillator1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

audiobuffer.getChannelData1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

offlineaudio.startRendering1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.17 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.doNotTrack1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.hardwareConcurrency9 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210

navigator.language5 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.languages5 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.maxTouchPoints8 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://www.baidu.com/line 2069 · col 40

navigator.mimeTypes11 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 2166 · col 392
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 2166 · col 437
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 2166 · col 504

navigator.platform30 calls

Frame: https://www.baidu.com/

https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 2168 · col 40
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 327
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 357
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 390
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 422

navigator.plugins5 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.userAgent281 calls

Frame: https://www.baidu.com/

https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/es6-polyfill_388d059.jsline 46 · col 80
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 75 · col 290
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 20 · col 33
https://www.baidu.com/line 2130 · col 19
https://www.baidu.com/line 5873 · col 22

navigator.webdriver5 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210

screen.availHeight3 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 1995 · col 530

screen.availWidth3 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 1995 · col 546

screen.colorDepth1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

screen.height3 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 1995 · col 519

screen.width4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_b732276.jsline 1995 · col 509
https://pss.bdstatic.com/static/superman/js/components/content-info-5988a1696b.jsline 12 · col 413

window.devicePixelRatio7 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 18 · col 549
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 18 · col 577

Scripts with both text drawing and canvas readback 2

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

https://hectorstatic.baidu.com/96c9c06653ba892e.js
https://hectorstatic.baidu.com/cd37ed75a9387c5b.js

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 78 requests

Captured scripts: 30
Instrumented frames: 1
Google Ads observed: No
Transmission evidence: Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

pss.bdstatic.com
psstatic.cdn.bcebos.com

Other recorded API calls 2

document.cookie.read50 calls
document.cookie.write6 calls

Source record and integrity

Original source: results/headful/baidu-com-20261019T013229.json
Original file SHA-256: b177026b5020cf86a998fe30ddb92682bed4984892d87781916062e4e193d81c

Run ID: headful-b177026b5020. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-19T02:40:19.378272Z
Browser / scanner: 156.0.8078.4 / 0.3

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headful/baidu-com-20261019T024019.json
Original file SHA-256: 24e4bffca15478ddd12c6cee4d89bffba359865fc8d4787c8de6d5710656fbab

Run ID: headful-24e4bffca154. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Draw + readback

3 of 5 signal families observed

Measurement: Measured · Partial load
Page context: Page document
Scan time: 2026-10-22T17:39:58.124045Z
Browser / scanner: 156.0.8078.4 / 0.4

Captured title百度一下，你就知道

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext6 calls

Frame: https://www.baidu.com/

Inline caller recorded
https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

canvas.toDataURL2 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

canvas2d.fillText4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

webgl2renderingcontext.getParameter4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11473

AudioRenders or reads audio samples.4 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createDynamicsCompressor1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

audio.createOscillator1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

audiobuffer.getChannelData1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

offlineaudio.startRendering1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11473

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.15 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.hardwareConcurrency5 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210

navigator.language1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.languages1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.maxTouchPoints4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://www.baidu.com/line 2089 · col 40

navigator.mimeTypes1 calls

Frame: https://www.baidu.com/

https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 2166 · col 392

navigator.platform26 calls

Frame: https://www.baidu.com/

https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 2168 · col 40
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 327
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 357
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 390
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 19 · col 422

navigator.plugins1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

navigator.userAgent158 calls

Frame: https://www.baidu.com/

https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/es6-polyfill_388d059.jsline 46 · col 80
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 75 · col 290
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/instant_search_newi_3c1ab84.jsline 20 · col 33
https://www.baidu.com/line 2150 · col 19
https://www.baidu.com/line 5893 · col 22

navigator.webdriver1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210

screen.availHeight3 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 1995 · col 530

screen.availWidth3 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 1995 · col 546

screen.colorDepth1 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210

screen.height3 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 1995 · col 519

screen.width4 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/96c9c06653ba892e.jsline 1 · col 11210
https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 1995 · col 509
https://pss.bdstatic.com/static/superman/js/components/content-info-5988a1696b.jsline 12 · col 413

window.devicePixelRatio9 calls

Frame: https://www.baidu.com/

https://hectorstatic.baidu.com/cd37ed75a9387c5b.jsline 1 · col 11210
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 18 · col 549
https://pss.bdstatic.com/r/www/cache/static/protocol/https/bundles/polyfill_9354efa.jsline 18 · col 577
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 1997 · col 215
https://pss.bdstatic.com/r/www/cache/static/protocol/https/global/js/all_async_search_6110409.jsline 1997 · col 250

Scripts with both text drawing and canvas readback 2

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

https://hectorstatic.baidu.com/96c9c06653ba892e.js
https://hectorstatic.baidu.com/cd37ed75a9387c5b.js

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 76 requests

Captured scripts: 25
Instrumented frames: 1
Google Ads observed: No
Transmission evidence: Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

pss.bdstatic.com
psstatic.cdn.bcebos.com

Other recorded API calls 2

document.cookie.read49 calls
document.cookie.write6 calls

Source record and integrity

Original source: results/headless/baidu-com-20261022T173958.json
Original file SHA-256: 8680354df801f685bd3f7d6060334d4308533b0dbd3a0bbe6dbeb6ec5e31af7d

Run ID: research-8680354df801. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-19T01:24:29.729960Z
Browser / scanner: 156.0.8078.4 / 0.3

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/baidu-com-20261019T012429.json
Original file SHA-256: 734ed3845a830e9cd523b06598341bc38c928612af80be711a6c2bd5c750a85f

Run ID: research-734ed3845a83. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Scanner error

Measurement: Scanner error
Page context: Page not measured
Scan time: 2026-10-22T17:39:57.967428Z
Browser / scanner: 156.0.8078.4 / 0.4

Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity

Original source: results/headless/baidu-com-20261022T173957.json
Original file SHA-256: 064920e463fa6430dcbc3ac008295629235698c5dbd490956a2114d0c273e93f

Run ID: research-064920e463fa. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →

Browser fingerprinting guides

Demos

Self-led privacy

Use cases

Software

Audits

Training

Does baidu.com fingerprint you?

Inside the scan

Signals observed

Third-party hosts

Draw + readback

Third-party hosts

Navigation failed

Draw + readback

Third-party hosts

Navigation failed

Scanner error