Skip to main content

Website evidence · pilot dataset

Does coinbase.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 7 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T19:55:23.144852Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCoinbase - Buy and Sell Bitcoin, Ethereum, and more with trust

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.coinbase.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 258 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • asset-metadata-service-production.s3.amazonaws.com
  • images.ctfassets.net
Source record and integrity
Original source
results/headful/coinbase-com-20261022T195523.json
Original file SHA-256
9009fce3cfc75bb87a7e6610248140102767b46a487fd8349afbbfba5dd14738

Run ID: headful-9009fce3cfc7. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T22:46:32.373972Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/coinbase-com-20261021T224632.json
Original file SHA-256
cb9242edb72a6cf573de1df3288e5af066d4b4e36eb582027b3dd944b269b8a8

Run ID: headful-cb9242edb72a. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T14:23:04.968830Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/coinbase-com-20261022T142304.json
Original file SHA-256
55ae017fbae7a5658dd987d0961789dfd8ec11037de8a2b858761aff134822ed

Run ID: headful-55ae017fbae7. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T19:55:21.552336Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/coinbase-com-20261022T195521.json
Original file SHA-256
0a94597ae46ccd9949e29475f51d7c7738d7ff8f9955ccda69f02e2c2f7631cb

Run ID: headful-0a94597ae46c. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

2 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T21:26:11.435788Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleCoinbase - Buy and Sell Bitcoin, Ethereum, and more with trust

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext573 calls

Frame: https://www.coinbase.com/

  • Inline caller recorded
  • https://www.coinbase.com/assets/sw-cache/c_DW3kDfjO.jsline 6 · col 388
canvas2d.measureText143 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/c_DW3kDfjO.jsline 6 · col 674
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText143 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/c_DW3kDfjO.jsline 6 · col 674
DeviceReads browser and display properties.6 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory5 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/c_EVqF295Y.jsline 1 · col 671
navigator.hardwareConcurrency25 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/c_EVqF295Y.jsline 1 · col 707
navigator.languages4 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/c_DRruC_XW.jsline 2 · col 29899
  • https://www.coinbase.com/assets/sw-cache/e_BWmK5VHR.jsline 6 · col 28317
  • https://www.coinbase.com/assets/sw-cache/e_BWmK5VHR.jsline 6 · col 28338
  • https://www.coinbase.com/assets/sw-cache/e_BWmK5VHR.jsline 6 · col 28367
navigator.platform6 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/c_BUXWKMIf.jsline 11 · col 14439
navigator.userAgent16 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/c_BUXWKMIf.jsline 3 · col 11210
  • https://www.coinbase.com/assets/sw-cache/c_BUXWKMIf.jsline 11 · col 14415
  • https://www.coinbase.com/assets/sw-cache/c_CSyJlUj6.jsline 8 · col 31219
  • https://www.coinbase.com/assets/sw-cache/c_DRruC_XW.jsline 2 · col 29533
  • https://www.coinbase.com/assets/sw-cache/c_X_2gbQem.jsline 1 · col 2560
window.devicePixelRatio1 calls

Frame: https://www.coinbase.com/

  • https://www.coinbase.com/assets/sw-cache/e_BWmK5VHR.jsline 14 · col 15819
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 389 requests
Captured scripts
41
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • accounts.google.com
  • asset-metadata-service-production.s3.amazonaws.com
  • cdn.cookielaw.org
  • images.ctfassets.net
Other recorded API calls 2
  • document.cookie.read560 calls
  • document.cookie.write1 calls
Source record and integrity
Original source
results/headless/coinbase-com-20261022T212611.json
Original file SHA-256
00f46c49c38b7c82ae58b8073d18be3659c5e866a868aa8bdb7f489192203bd6

Run ID: research-00f46c49c38b. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T21:05:25.056052Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/coinbase-com-20261021T210525.json
Original file SHA-256
c8f48cd2c01e1fc3fd3eaa2e973408c75adc58a9e27e63268a2fb8dd6674c11c

Run ID: research-c8f48cd2c01e. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T17:51:37.904025Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/coinbase-com-20261022T175137.json
Original file SHA-256
1f6c6e476fac380574f3df6d3f0ae7e11a8a5c96457d89edf381cc46633a2044

Run ID: research-1f6c6e476fac. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →