Skip to main content

Website evidence · pilot dataset

Does cloudflare.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 6 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T14:21:04.968806Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCloudflare: Build for the agent era

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.cloudflare.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.userAgent36 calls

Frame: https://www.cloudflare.com/

  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20335
  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20372
  • https://www.cloudflare.com/line 474 · col 36
  • https://www.cloudflare.com/go9u/line 544 · col 493
screen.colorDepth1 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/static/z/i.jsline 1 · col 717
screen.height1 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/static/z/i.jsline 1 · col 612
screen.width1 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/static/z/i.jsline 1 · col 590
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 222 requests
Captured scripts
26
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.cloudflareinsights.com
  • www.googletagmanager.com
Other recorded API calls 1
  • document.cookie.read10 calls
Source record and integrity
Original source
results/headful/cloudflare-com-20261022T142104.json
Original file SHA-256
f6bc7dfc2117e16bf64f9f7d0776a90281f595cd0aa582a335616c10f12cfd02

Run ID: headful-f6bc7dfc2117. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleCloudflare: Build for the agent era

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.7 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.doNotTrack2 calls
  • https://ot.www.cloudflare.com/ot/scripttemplates/202503.1.0/otBannerSdk.jsline 7 · col 93434
  • https://ot.www.cloudflare.com/ot/scripttemplates/202503.1.0/otBannerSdk.jsline 7 · col 93462
navigator.language1 calls
  • https://www.cloudflare.com/line 287 · col 38
navigator.maxTouchPoints1 calls
  • https://www.cloudflare.com/_astro/index.DXv0uO8u.jsline 2 · col 22857
navigator.userAgent43 calls
  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20335
  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20372
  • https://www.cloudflare.com/line 474 · col 36
  • https://www.cloudflare.com/_astro/proxy.DbB8impi.jsline 1 · col 93340
  • https://www.cloudflare.com/go9u/line 543 · col 493
screen.colorDepth1 calls
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 717
screen.height1 calls
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 612
screen.width1 calls
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 590
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 142 requests
Captured scripts
86
Instrumented frames
Not recorded
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.cloudflareinsights.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read56 calls
  • document.cookie.write10 calls
Source record and integrity
Original source
results/headful/cloudflare-com.json
Original file SHA-256
848b570302ba1952a02b7db8517dc25f16c121ff0b96b8e6b66e61edf120b7b7

Run ID: headful-848b570302ba. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T02:41:13.561450Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleCloudflare: Build for the agent era

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.cloudflare.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.1 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.userAgent36 calls

Frame: https://www.cloudflare.com/

  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20335
  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20372
  • https://www.cloudflare.com/line 474 · col 36
  • https://www.cloudflare.com/go9u/line 543 · col 493
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 151 requests
Captured scripts
63
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.cloudflareinsights.com
  • www.googletagmanager.com
Other recorded API calls 1
  • document.cookie.read10 calls
Source record and integrity
Original source
results/headful/cloudflare-com-20261019T024113.json
Original file SHA-256
351725a4574785aab964be87f9defa5e62bf40d5d6a2571cc434d2ab087771a8

Run ID: headful-351725a45747. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T17:50:03.955561Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCloudflare: Build for the agent era

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://match.adsrvr.org/track/cei

  • Inline caller recorded
canvas.getContext4 calls

Frame: https://www.cloudflare.com/

  • Inline caller recorded
  • https://www.cloudflare.com/_astro/_logos.Ad8_khH9.jsline 1 · col 907
  • https://www.cloudflare.com/_astro/_use-webgl-support._QQf5KV5.jsline 1 · col 350
canvas2d.getImageData2 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/_astro/_logos.Ad8_khH9.jsline 1 · col 1005
WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension1 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/_astro/_use-webgl-support._QQf5KV5.jsline 1 · col 902
webgl2renderingcontext.getParameter1 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/_astro/_use-webgl-support._QQf5KV5.jsline 1 · col 950
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.7 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.doNotTrack2 calls

Frame: https://www.cloudflare.com/

  • https://ot.www.cloudflare.com/ot/scripttemplates/202503.1.0/otBannerSdk.jsline 7 · col 93434
  • https://ot.www.cloudflare.com/ot/scripttemplates/202503.1.0/otBannerSdk.jsline 7 · col 93462
navigator.language2 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/line 287 · col 38
  • https://www.cloudflare.com/go9u/[redacted-id]line 1161 · col 208
navigator.maxTouchPoints1 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/_astro/index.DXv0uO8u.jsline 2 · col 22857
navigator.userAgent143 calls

Frame: https://www.cloudflare.com/

  • https://ot.www.cloudflare.com/ot/scripttemplates/202503.1.0/otBannerSdk.jsline 7 · col 383529
  • https://www.cloudflare.com/line 474 · col 36
  • https://www.cloudflare.com/_astro/proxy.DbB8impi.jsline 1 · col 93340
  • https://www.cloudflare.com/_astro/proxy.DbB8impi.jsline 1 · col 93361
  • https://www.cloudflare.com/go9u/line 544 · col 493
screen.colorDepth1 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/static/z/i.jsline 1 · col 717
screen.height4 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/go9u/[redacted-id]line 916 · col 1651
  • https://www.cloudflare.com/go9u/[redacted-id]line 953 · col 1651
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 612
screen.width4 calls

Frame: https://www.cloudflare.com/

  • https://www.cloudflare.com/go9u/[redacted-id]line 916 · col 1632
  • https://www.cloudflare.com/go9u/[redacted-id]line 953 · col 1632
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 590
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsad.doubleclick.net, googleads.g.doubleclick.net
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 271 requests
Captured scripts
34
Instrumented frames
2
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • ad.doubleclick.net
  • alb.reddit.com
  • googleads.g.doubleclick.net
  • insight.adsrvr.org
  • js.adsrvr.org
  • match.adsrvr.org
  • munchkin.marketo.net
  • static.ads-twitter.com
  • static.cloudflareinsights.com
  • tag.demandbase.com
  • www.google.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read142 calls
  • document.cookie.write13 calls
Source record and integrity
Original source
results/headless/cloudflare-com-20261022T175003.json
Original file SHA-256
eadf4f01bea86fc40dd95d299c851d5cff6a98822294a4f9ff4e17590a7bb524

Run ID: research-eadf4f01bea8. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleCloudflare: Build for the agent era

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.7 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.doNotTrack2 calls
  • https://ot.www.cloudflare.com/ot/scripttemplates/202503.1.0/otBannerSdk.jsline 7 · col 93434
  • https://ot.www.cloudflare.com/ot/scripttemplates/202503.1.0/otBannerSdk.jsline 7 · col 93462
navigator.language2 calls
  • https://www.cloudflare.com/line 287 · col 38
  • https://www.cloudflare.com/go9u/[redacted-id]line 1155 · col 208
navigator.maxTouchPoints1 calls
  • https://www.cloudflare.com/_astro/index.DXv0uO8u.jsline 2 · col 22857
navigator.userAgent146 calls
  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20335
  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20372
  • https://www.cloudflare.com/line 474 · col 36
  • https://www.cloudflare.com/_astro/proxy.DbB8impi.jsline 1 · col 93340
  • https://www.cloudflare.com/_astro/proxy.DbB8impi.jsline 1 · col 93361
screen.colorDepth1 calls
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 717
screen.height4 calls
  • https://www.cloudflare.com/go9u/[redacted-id]line 917 · col 1651
  • https://www.cloudflare.com/go9u/[redacted-id]line 954 · col 1651
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 612
screen.width4 calls
  • https://www.cloudflare.com/go9u/[redacted-id]line 917 · col 1632
  • https://www.cloudflare.com/go9u/[redacted-id]line 954 · col 1632
  • https://www.cloudflare.com/static/z/i.jsline 1 · col 590
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsad.doubleclick.net, googleads.g.doubleclick.net
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 153 requests
Captured scripts
90
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • ad.doubleclick.net
  • googleads.g.doubleclick.net
  • static.cloudflareinsights.com
  • www.google.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read141 calls
  • document.cookie.write12 calls
Source record and integrity
Original source
results/headless/cloudflare-com.json
Original file SHA-256
ecc7fdd065cde4586227c762746e9a7eb20336fbd7d24108e0a7d28a5fd66bb7

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-ecc7fdd065cd. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T02:33:48.999135Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleCloudflare: Build for the agent era

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.cloudflare.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.1 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.userAgent3 calls

Frame: https://www.cloudflare.com/

  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20335
  • https://static.cloudflareinsights.com/beacon.min.js/[redacted-id]line 1 · col 20372
  • https://www.cloudflare.com/line 474 · col 36
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 158 requests
Captured scripts
80
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.cloudflareinsights.com
Other recorded API calls 1
  • document.cookie.read8 calls
Source record and integrity
Original source
results/headless/cloudflare-com-20261019T023348.json
Original file SHA-256
42a21bb8d6592be043f7069040f5d790ba625ae17481dd96f60ca0f8fa4252cc

Run ID: research-42a21bb8d659. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →