Skip to main content

Website evidence · pilot dataset

Does chase.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 7 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T19:50:55.997908Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCredit Card, Mortgage, Banking, Auto | Chase Online | Chase.com

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.chase.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 30 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • s2.go-mpulse.net
Other recorded API calls 1
  • document.cookie.read1 calls
Source record and integrity
Original source
results/headful/chase-com-20261022T195055.json
Original file SHA-256
42951e458af8e8091593b4cdf4f53fdeda152b37434e5b5f463fd4341fd35132

Run ID: headful-42951e458af8. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-21T22:49:45.934057Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleCredit Card, Mortgage, Banking, Auto | Chase Online | Chase.com

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://www.chase.com/line 226 · col 1097
canvas.getContext1 calls

Frame: https://www.chase.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.10 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170284
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170323
navigator.hardwareConcurrency2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170023
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170069
navigator.language3 calls

Frame: https://www.chase.com/

  • https://www.chase.com/hp/_next/static/chunks/552-6fce2be9cee17eee.jsline 47 · col 877
navigator.maxTouchPoints1 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170095
navigator.userAgent276 calls

Frame: https://www.chase.com/

  • https://www.chase.com/hp/_next/static/chunks/732-f67917326b449162.jsline 1 · col 55808
  • https://www.chase.com/hp/_next/static/chunks/732-f67917326b449162.jsline 2 · col 24115
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 1 · col 8246
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 4 · col 61096
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 4 · col 141201
screen.colorDepth2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169725
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122569
screen.height2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169706
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122660
screen.pixelDepth1 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169743
screen.width2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169694
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122637
window.devicePixelRatio1 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169853
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 57 requests
Captured scripts
12
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • 17de4c1d.akstat.io
  • c.go-mpulse.net
  • s2.go-mpulse.net
  • static.chasecdn.com
Other recorded API calls 2
  • document.cookie.read64 calls
  • document.cookie.write24 calls
Source record and integrity
Original source
results/headful/chase-com-20261021T224945.json
Original file SHA-256
acbf1f657b1f3f65e2aff613b8ab6ed6b511a6eb1d82fbebc09cc808d0baf891

Run ID: headful-acbf1f657b1f. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T14:18:55.891907Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/chase-com-20261022T141855.json
Original file SHA-256
66a4aac7be3b143b941faee3202b77ef4a1af95ace48d65a95a9dbffa70055f5

Run ID: headful-66a4aac7be3b. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T19:50:54.692214Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/chase-com-20261022T195054.json
Original file SHA-256
31a84fe3174805b992e4acf682c6fe5c589bd563a1b42239e7d9d7f722ef107d

Run ID: headful-31a84fe31748. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Draw + readback

5 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: ObservedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T21:22:06.982030Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCredit Card, Mortgage, Banking, Auto | Chase Online | Chase.com

CanvasDraws text and reads canvas output.6 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://www.chase.com/line 228 · col 1097
canvas.getContext50 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
canvas.toDataURL6 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
canvas2d.fillText40 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
canvas2d.getImageData67 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
canvas2d.measureText184 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
WebGLQueries the graphics environment.3 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.readPixels1 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
webglrenderingcontext.getExtension1 calls

Frame: https://www.chase.com/

  • Inline caller recorded
webglrenderingcontext.getParameter5 calls

Frame: https://www.chase.com/

  • Inline caller recorded
AudioRenders or reads audio samples.3 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createOscillator1 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
audiobuffer.getChannelData2 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
offlineaudio.startRendering1 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText184 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
DeviceReads browser and display properties.17 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory3 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170284
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170323
  • https://www.chase.com/auth/fcc/js/channela.js
navigator.doNotTrack1 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
navigator.hardwareConcurrency5 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170023
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170069
  • https://www.chase.com/auth/fcc/js/channela.js
navigator.language6 calls

Frame: https://www.chase.com/

  • https://www.chase.com/hp/_next/static/chunks/552-6fce2be9cee17eee.jsline 47 · col 877
navigator.maxTouchPoints4 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170095
  • https://www.chase.com/auth/fcc/js/channela.js
navigator.mimeTypes4 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
navigator.platform1 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
navigator.plugins6 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
navigator.userAgent549 calls

Frame: https://www.chase.com/

  • https://www.chase.com/hp/_next/static/chunks/732-f67917326b449162.jsline 1 · col 55808
  • https://www.chase.com/hp/_next/static/chunks/732-f67917326b449162.jsline 2 · col 24115
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 1 · col 8246
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 4 · col 61096
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 4 · col 141201
navigator.webdriver1 calls

Frame: https://www.chase.com/

  • https://www.chase.com/auth/fcc/js/channela.js
screen.availHeight3 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
screen.availWidth3 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://www.chase.com/auth/fcc/js/channela.js
screen.colorDepth6 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169725
  • https://www.chase.com/auth/fcc/js/channela.js
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122569
screen.height6 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169706
  • https://www.chase.com/auth/fcc/js/channela.js
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122660
screen.pixelDepth4 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169743
  • https://www.chase.com/auth/fcc/js/channela.js
screen.width6 calls

Frame: https://www.chase.com/

  • Inline caller recorded
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169694
  • https://www.chase.com/auth/fcc/js/channela.js
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122637
window.devicePixelRatio2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169853
  • https://www.chase.com/auth/fcc/js/channela.js
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://www.chase.com/auth/fcc/js/channela.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 70 requests
Captured scripts
17
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • acea4743.akstat.io
  • c.go-mpulse.net
  • s2.go-mpulse.net
  • static.chasecdn.com
  • trial-eum-clientnsv4-s.akamaihd.net
  • trial-eum-clienttons-s.akamaihd.net
Other recorded API calls 3
  • document.cookie.read100 calls
  • document.cookie.write37 calls
  • webrtc.RTCPeerConnection1 calls
Source record and integrity
Original source
results/headless/chase-com-20261022T212206.json
Original file SHA-256
f7c63b35cb5dc6ea4d46a87e787aef0c64f46b6ebb7f37893cb74eef90031fc2

Run ID: research-f7c63b35cb5d. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-21T21:09:07.983990Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleCredit Card, Mortgage, Banking, Auto | Chase Online | Chase.com

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://www.chase.com/line 226 · col 1097
canvas.getContext1 calls

Frame: https://www.chase.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.10 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170284
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170323
navigator.hardwareConcurrency2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170023
  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170069
navigator.language3 calls

Frame: https://www.chase.com/

  • https://www.chase.com/hp/_next/static/chunks/552-6fce2be9cee17eee.jsline 47 · col 877
navigator.maxTouchPoints1 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 170095
navigator.userAgent276 calls

Frame: https://www.chase.com/

  • https://www.chase.com/hp/_next/static/chunks/732-f67917326b449162.jsline 1 · col 55808
  • https://www.chase.com/hp/_next/static/chunks/732-f67917326b449162.jsline 2 · col 24115
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 1 · col 8246
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 4 · col 61096
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 4 · col 141201
screen.colorDepth2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169725
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122569
screen.height2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169706
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122660
screen.pixelDepth1 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169743
screen.width2 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169694
  • https://www.chase.com/hp/_next/static/chunks/982-cdad9e35f605f239.jsline 2 · col 122637
window.devicePixelRatio1 calls

Frame: https://www.chase.com/

  • https://s2.go-mpulse.net/boomerang/[redacted-id]line 10 · col 169853
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 52 requests
Captured scripts
12
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • acef428f.akstat.io
  • c.go-mpulse.net
  • s2.go-mpulse.net
  • static.chasecdn.com
Other recorded API calls 2
  • document.cookie.read64 calls
  • document.cookie.write24 calls
Source record and integrity
Original source
results/headless/chase-com-20261021T210907.json
Original file SHA-256
ebb9edd0d916b1759986099a33371ccdf246dc546ab3d90aa3e71a2e70451038

Run ID: research-ebb9edd0d916. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T17:48:08.945423Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/chase-com-20261022T174808.json
Original file SHA-256
ef30565d171614308cf2db560dce80100b5330e7a6a3a34a244ff3fe5e2e9980

Run ID: research-ef30565d1716. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →