Skip to main content

Website evidence · pilot dataset

Does cdc.gov fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T19:49:46.696845Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCenters for Disease Control and Prevention | CDC

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.cdc.gov/index.html

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 48 requests
Captured scripts
2
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

    Source record and integrity
    Original source
    results/headful/cdc-gov-20261022T194946.json
    Original file SHA-256
    96ea7578e6c49b251c47522fbf0fc19b19f764d238ec09fbdd8be01e376aed3b

    Run ID: headful-96ea7578e6c4. The JSON contains sanitized observations, not the original private scan payload.

    Other scan attempts (2)

    Visitor setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-21T22:54:32.347998Z
    Browser / scanner
    156.0.8078.4 / 0.3
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headful/cdc-gov-20261021T225432.json
    Original file SHA-256
    c6b9d01cb4411b999388e4060ad9659b5e98abb7b01279582249027eb6c4d1b2

    Run ID: headful-c6b9d01cb441. The JSON contains sanitized observations, not the original private scan payload.

    Visitor setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-22T14:18:07.761635Z
    Browser / scanner
    156.0.8078.4 / 0.4
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headful/cdc-gov-20261022T141807.json
    Original file SHA-256
    06a84af613411a9da59dbd6e7e4db59697bf3062a7d236fc1149d55eae22af72

    Run ID: headful-06a84af61341. The JSON contains sanitized observations, not the original private scan payload.

    Research setup

    Signals observed

    1 of 5 signal families observed

    Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
    Measurement
    Measured
    Page context
    Page document
    Scan time
    2026-10-22T21:21:26.183369Z
    Browser / scanner
    156.0.8078.4 / 0.4

    Captured titleCenters for Disease Control and Prevention | CDC

    CanvasDraws text and reads canvas output.3 API entries

    Observed requires a text-drawing API and a canvas readback API. Guide ↗

    canvas.getContext1 calls
    • https://www.cdc.gov/JScript/surveys/redcap-survey-bundle.jsline 365 · col 22
    canvas.getContext2 calls

    Frame: https://www.cdc.gov/index.html

    • Inline caller recorded
    • https://www.cdc.gov/TemplatePackage/contrib/libs/qrcodejs/latest/qrcode.min.jsline 1 · col 21209
    canvas.toDataURL1 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.cdc.gov/TemplatePackage/contrib/libs/qrcodejs/latest/qrcode.min.jsline 1 · col 21626
    WebGLQueries the graphics environment.0 API entries

    Observed requires at least three distinct WebGL probing APIs. Guide ↗

    No matching API call was captured.

    AudioRenders or reads audio samples.0 API entries

    Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

    No matching API call was captured.

    FontsMeasures text repeatedly.0 API entries

    Observed requires at least ten text-measurement calls. Guide ↗

    No matching API call was captured.

    DeviceReads browser and display properties.7 API entries

    Observed requires at least three distinct browser, screen, or window properties. Guide ↗

    navigator.language1 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.googletagmanager.com/gtag/js
    navigator.maxTouchPoints1 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.cdc.gov/TemplatePackage/contrib/libs/bootstrap/5x/bootstrap.bundle.min.js
    navigator.userAgent32 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.googletagmanager.com/gtag/js
    screen.colorDepth1 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.cdc.gov/JScript/dmat/cdc-dmat.min.js
    screen.height2 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.cdc.gov/JScript/dmat/cdc-dmat.min.js
    • https://www.googletagmanager.com/gtag/js
    screen.width2 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.cdc.gov/JScript/dmat/cdc-dmat.min.js
    • https://www.googletagmanager.com/gtag/js
    window.devicePixelRatio1 calls

    Frame: https://www.cdc.gov/index.html

    • https://www.cdc.gov/JScript/dmat/cdc-dmat.min.js
    Providers, script signatures, and DNS 2 provider labels

    Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

    • Google Analyticswww.google-analytics.com
    • Google Tag Managerwww.googletagmanager.com
    Network and worker observations 52 requests
    Captured scripts
    14
    Instrumented frames
    2
    Google Ads observed
    No
    Transmission evidence
    Not validated

    Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

    Third-party hosts

    • dap.digitalgov.gov
    • www.google-analytics.com
    • www.googletagmanager.com
    Other recorded API calls 2
    • document.cookie.read21 calls
    • document.cookie.write13 calls
    Source record and integrity
    Original source
    results/headless/cdc-gov-20261022T212126.json
    Original file SHA-256
    3aee1c9a9db658c3f09610ecf025b9f4c217f8d3c07c2beae295a6845c931153

    Run ID: research-3aee1c9a9db6. The JSON contains sanitized observations, not the original private scan payload.

    Other scan attempts (2)

    Research setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-21T21:12:50.818169Z
    Browser / scanner
    156.0.8078.4 / 0.3
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headless/cdc-gov-20261021T211250.json
    Original file SHA-256
    3aacf9717fdcb34bf1d46a32302734e9b473b61ebd6f2e70636892b8111171f6

    Run ID: research-3aacf9717fdc. The JSON contains sanitized observations, not the original private scan payload.

    Research setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-22T17:47:33.951143Z
    Browser / scanner
    156.0.8078.4 / 0.4
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headless/cdc-gov-20261022T174733.json
    Original file SHA-256
    70a8c2812f563fbea1d226a986decef8d3ac73cb7714889233dcaa3a7bccd840

    Run ID: research-70a8c2812f56. The JSON contains sanitized observations, not the original private scan payload.

    Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

    Read the sanitized JSON →