Website evidence · pilot dataset

Does cvs.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 5 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Measurement: Measured · Partial load
Page context: Page document
Scan time: 2026-10-22T14:27:18.133109Z
Browser / scanner: 156.0.8078.4 / 0.4

Captured titleCVS - Online Drugstore, Pharmacy, Prescriptions & Health Information

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Inline caller recorded

canvas.getContext1 calls

https://www.cvs.com/line 2 · col 1065

canvas.getContext1 calls

Frame: https://www.cvs.com/

Inline caller recorded

WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.2 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.userAgent2 calls

Inline caller recorded

window.devicePixelRatio1 calls

Inline caller recorded

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 111 requests

Captured scripts: 7
Instrumented frames: 3
Google Ads observed: No
Transmission evidence: Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

cdn.cookielaw.org
s.go-mpulse.net
tags.tiqcdn.com
www.youtube.com

Source record and integrity

Original source: results/headful/cvs-com-20261022T142718.json
Original file SHA-256: 85fb722a4995c3359106e6f86e8c013a456dd484ce1e482d941b4c3f611e8f12

Run ID: headful-85fb722a4995. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-21T22:42:21.473319Z
Browser / scanner: 156.0.8078.4 / 0.3

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headful/cvs-com-20261021T224221.json
Original file SHA-256: 1a127ecd2ca76fc81c2707bd07fd7aa503c44b4d9d779da47184dc3871bb072e

Run ID: headful-1a127ecd2ca7. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Measurement: Scanner error
Page context: Page not measured
Scan time: 2026-10-22T14:27:17.569826Z
Browser / scanner: 156.0.8078.4 / 0.4

Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity

Original source: results/headful/cvs-com-20261022T142717.json
Original file SHA-256: 2da6cad7a83eeb35259090ea08229bf2ae651565d9a5a1007e4d963fb3d4e9cf

Run ID: headful-2da6cad7a83e. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Draw + readback

5 of 5 signal families observed

Measurement: Measured
Page context: Page document
Scan time: 2026-10-22T17:54:10.861009Z
Browser / scanner: 156.0.8078.4 / 0.4

Captured titleCVS - Online Drugstore, Pharmacy, Prescriptions & Health Information

CanvasDraws text and reads canvas output.7 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

https://www.cvs.com/line 2 · col 1065

canvas.getContext1 calls

https://www.cvs.com/line 2 · col 1065

canvas.getContext8 calls

Frame: https://www.cvs.com/

Inline caller recorded
https://www.cvs.com//retail-component-server/v1/ui/header-build/v2/p-cb74971a.entry.jsline 1 · col 93908
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 107168
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 109533
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 427116

canvas.getContext4 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

Inline caller recorded
https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473
https://www.youtube.com/s/embeds/3bd17fcd/lottie-light.vflset/lottie-light.jsline 549 · col 86

canvas.toDataURL2 calls

Frame: https://www.cvs.com/

https://www.cvs.com//retail-component-server/v1/ui/header-build/v2/p-cb74971a.entry.jsline 1 · col 94265
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

canvas2d.fillText4 calls

Frame: https://www.cvs.com/

https://www.cvs.com//retail-component-server/v1/ui/header-build/v2/p-cb74971a.entry.jsline 1 · col 94174
https://www.cvs.com//retail-component-server/v1/ui/header-build/v2/p-cb74971a.entry.jsline 1 · col 94230
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

canvas2d.measureText22 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 107492
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 107852
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

WebGLQueries the graphics environment.6 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension8 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 110309
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 110480
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 113674
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 440254
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

webgl2renderingcontext.getParameter44 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 111924
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 440318
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 440468
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

webglrenderingcontext.getExtension3 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 427185
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 439751
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

webglrenderingcontext.getExtension1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

webglrenderingcontext.getParameter6 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 427257
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 427502
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 439805
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 439898
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

webglrenderingcontext.getParameter1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

AudioRenders or reads audio samples.7 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

analyser.getFloatFrequencyData2 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 88282
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

analyser.getFloatTimeDomainData2 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 88791
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

audio.createAnalyser4 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 87920
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 101523
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

audio.createDynamicsCompressor2 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 86882
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

audio.createOscillator4 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 86575
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 101602
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

audiobuffer.getChannelData2 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 87729
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

offlineaudio.startRendering2 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 87628
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

FontsMeasures text repeatedly.2 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText22 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 107492
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 107852
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

fonts.load2 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.youtube.com/embed/avqIAbqyDesline 1 · col 9813
https://www.youtube.com/embed/avqIAbqyDesline 1 · col 9858

DeviceReads browser and display properties.35 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory7 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17196
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 124531
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 426471
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 426598
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 588346

navigator.deviceMemory1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.doNotTrack3 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 22468
https://www.cvs.com/~/_next/static/chunks/9818-edac8ea1ce14303e.jsline 1 · col 75963
https://www.cvs.com/~/_next/static/chunks/9818-edac8ea1ce14303e.jsline 1 · col 75991

navigator.doNotTrack1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.getBattery1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.youtube.com/s/player/cbcfbf2f/player_embed_es6.vflset/en_US/base.jsline 5439 · col 139

navigator.hardwareConcurrency8 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17239
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 124636
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 428429
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 446782
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 588346

navigator.hardwareConcurrency1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.language7 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17630
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 124683
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 437501
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 437632
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

navigator.language1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.languages4 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 124714
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 588346
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

navigator.languages1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.maxTouchPoints6 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17660
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 285589
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 511019
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

navigator.maxTouchPoints1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.mimeTypes1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.platform8 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 12914
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 124754
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 588346
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

navigator.platform2 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.plugins60 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 57481
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 437887
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 438068
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 574916
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 575280

navigator.plugins2 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

navigator.userAgent32 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 506
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 376098
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 588346
https://www.cvs.com/~/_next/static/chunks/2623-ffb368e9153b1ee5.jsline 1 · col 96584
https://www.cvs.com/~/_next/static/chunks/2623-ffb368e9153b1ee5.jsline 1 · col 153263

navigator.userAgent109 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 93 · col 389
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 427 · col 904
https://www.youtube.com/s/embeds/3bd17fcd/lottie-light.vflset/lottie-light.jsline 503 · col 283
https://www.youtube.com/s/embeds/3bd17fcd/lottie-light.vflset/lottie-light.jsline 941 · col 104
https://www.youtube.com/s/player/cbcfbf2f/player_embed_es6.vflset/en_US/base.jsline 230 · col 53

navigator.webdriver12 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 436142
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 436245
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 582149
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 582325
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 588346

navigator.webdriver1 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473

screen.availHeight3 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17456
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 286198

screen.availHeight3 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 233 · col 334

screen.availWidth3 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17426
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 285939

screen.availWidth5 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 233 · col 364
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 234 · col 212

screen.colorDepth4 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 21263
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 21388
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

screen.colorDepth2 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 233 · col 393

screen.height5 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17401
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 286896
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

screen.height3 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 233 · col 286

screen.pixelDepth4 calls

Frame: https://www.cvs.com/

https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 21587
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 21716
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

screen.width5 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17375
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 286575
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

screen.width3 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 233 · col 310

window.devicePixelRatio7 calls

Frame: https://www.cvs.com/

https://www.cvs.com/static/scripts/appd.jsline 1 · col 17552
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 280519
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 280599
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/bYS1pb3S3wD3NG7awO/FQwyFXhyBA/KCV3/Yn5dTC0line 1 · col 588346
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

window.devicePixelRatio7 calls

Frame: https://www.youtube.com/embed/avqIAbqyDes

https://www.google.com/js/th/WqKOXfWIFxB-XN3hBm5zepers2HYXoMPp6sS78jI_4Y.jsline 2 · col 473
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/[redacted-id]/am=AAAAQABj/d=1/exm=base,root/excm=base,root/ed=1/br=1/[redacted-id]
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 284 · col 208
https://www.youtube.com/s/_/ytembeds/_/js/[redacted-id]/am=AAAAQABj/d=1/excm=base,root/br=1/[redacted-id]/m=root,baseline 929 · col 55
https://www.youtube.com/s/player/cbcfbf2f/player_embed_es6.vflset/en_US/base.jsline 1240 · col 210

Scripts with both text drawing and canvas readback 2

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

https://www.cvs.com//retail-component-server/v1/ui/header-build/v2/p-cb74971a.entry.js
https://www.cvs.com/v0daEZ9RzN2G-/OtiEeoEnWdgm/fc/twS1pb3S3wD3/bUI7FXhyBA/KiJR/PzRwBH4V

Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Google Adsgoogleads.g.doubleclick.net, static.doubleclick.net

Static script signatures

https://www.cvs.com/~/_next/static/chunks/0c12a006-6a88bc2ad62e3284.jsAPI patterns only · 4 API patterns

Network and worker observations 192 requests

Captured scripts: 26
Instrumented frames: 4
Google Ads observed: Yes
Transmission evidence: Explicit outbound evidence retained

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Explicit outbound observations

confirmed · First party: www.cvs.comcanvas.toDataURLhttps://www.cvs.com//retail-component-server/v1/ui/header-build/v2/p-cb74971a.entry.js

Third-party hosts

app.launchdarkly.com
cdn.appdynamics.com
cdn.cookielaw.org
events.launchdarkly.com
fonts.gstatic.com
googleads.g.doubleclick.net
i.ytimg.com
jnn-pa.googleapis.com
m.youtube.com
s.go-mpulse.net
static.doubleclick.net
tags.tiqcdn.com
www.google.com
www.youtube.com

Other recorded API calls 4

document.cookie.read86 calls
document.cookie.read29 calls
document.cookie.write2 calls
document.cookie.write5 calls

Source record and integrity

Original source: results/headless/cvs-com-20261022T175410.json
Original file SHA-256: b189a02d3885d57ed461a06fa86bb909e72686cee761c202f770b02359e97c4d

Run ID: research-b189a02d3885. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-21T21:02:15.441009Z
Browser / scanner: 156.0.8078.4 / 0.3

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/cvs-com-20261021T210215.json
Original file SHA-256: 5ff696ea2a899f5a4529e296e86116cffd5ead1caa074d35fb590b2b577cf6f2

Run ID: research-5ff696ea2a89. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →

Browser fingerprinting guides

Demos

Self-led privacy

Use cases

Software

Audits

Training

Does cvs.com fingerprint you?

Inside the scan

Not observed

Third-party hosts

Navigation failed

Scanner error

Draw + readback

Static script signatures

Explicit outbound observations

Third-party hosts

Navigation failed