Skip to main content

Website evidence · pilot dataset

Does espn.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 4 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Earlier measurement shown. Review the scan time and subsequent attempts below.

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleESPN - Serving Sports Fans. Anytime. Anywhere.

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.6 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language4 calls
  • https://dcf.espn.com/TWDC-DTCI/prod/Bootstrap.jsline 1040 · col 435
  • https://micro.rubiconproject.com/prebid/dynamic/18138.jsline 27 · col 139327
  • https://micro.rubiconproject.com/prebid/dynamic/18138.jsline 58 · col 4455
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 44600
navigator.maxTouchPoints1 calls
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 7197
navigator.userAgent105 calls
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 5734
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 6071
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 6464
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 6845
  • https://dcf.espn.com/TWDC-DTCI/prod/Bootstrap.jsline 43 · col 396
screen.height12 calls
  • https://a.espncdn.com/redesign/0.796.0/js/espn-critical.jsline 11 · col 779
  • https://micro.rubiconproject.com/prebid/dynamic/18138.jsline 27 · col 94570
  • https://micro.rubiconproject.com/prebid/dynamic/18138.jsline 44 · col 25698
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45403
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610140101/pubads_impl.js
screen.width11 calls
  • https://micro.rubiconproject.com/prebid/dynamic/18138.jsline 27 · col 94570
  • https://micro.rubiconproject.com/prebid/dynamic/18138.jsline 44 · col 25730
  • https://micro.rubiconproject.com/prebid/dynamic/18138.jsline 45 · col 3294
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45358
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610140101/pubads_impl.js
window.devicePixelRatio1 calls
  • https://scripts.webcontentassessor.com/scripts/[redacted]line 1 · col 45433
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adssecurepubads.g.doubleclick.net, www.googletagservices.com
  • The Media Trust (client-side security monitoring)scripts.webcontentassessor.com
Network and worker observations 256 requests
Captured scripts
12
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a.espncdn.com
  • a1.espncdn.com
  • a2.espncdn.com
  • a3.espncdn.com
  • a4.espncdn.com
  • ads.rubiconproject.com
  • ads.trustx.org
  • artwork.espncdn.com
  • beacon.bidder.taboola.com
  • c2shb.pubgw.yahoo.com
  • cdn.cookielaw.org
  • cdn.jsdelivr.net
  • cdn.registerdisney.go.com
  • display.bidder.taboola.com
  • espnmedia-cdn.akamaized.net
  • fastlane.rubiconproject.com
  • fundingchoicesmessages.google.com
  • htlb.casalemedia.com
  • ib.adnxs.com
  • krk2.kargo.com
  • micro.rubiconproject.com
  • scripts.webcontentassessor.com
  • securepubads.g.doubleclick.net
  • targeting.unrulymedia.com
  • www.googletagservices.com
Other recorded API calls 2
  • document.cookie.read155 calls
  • document.cookie.write42 calls
Source record and integrity
Original source
results/headful/espn-com.json
Original file SHA-256
e64514d95d8376ca86d72bf3a2f1eca05b1b213485f11393fdf21549df230b11

Run ID: headful-e64514d95d83. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T05:56:29.431347Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/espn-com-20261019T055629.json
Original file SHA-256
a4f00f2ae07100f3b2d1d6dae245e0528aba39983995a0c465b45d8be6cb32f1

Run ID: headful-a4f00f2ae071. The JSON contains sanitized observations, not the original private scan payload.

Earlier measurement shown. Review the scan time and subsequent attempts below.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleESPN - Serving Sports Fans. Anytime. Anywhere.

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.maxTouchPoints1 calls
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 7197
navigator.userAgent106 calls
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 5734
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 6071
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 6180
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 6289
  • https://a.espncdn.com/redesign/0.796.0/js/espn-head.jsline 1 · col 6397
screen.height2 calls
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610140101/pubads_impl.js
screen.width2 calls
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610140101/pubads_impl.js
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adspagead2.googlesyndication.com, securepubads.g.doubleclick.net, www.googletagservices.com
Network and worker observations 75 requests
Captured scripts
0
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a.espncdn.com
  • a1.espncdn.com
  • a2.espncdn.com
  • a3.espncdn.com
  • a4.espncdn.com
  • ads.rubiconproject.com
  • artwork.espncdn.com
  • cdn.jsdelivr.net
  • espnmedia-cdn.akamaized.net
  • fundingchoicesmessages.google.com
  • micro.rubiconproject.com
  • pagead2.googlesyndication.com
  • securepubads.g.doubleclick.net
  • www.googletagservices.com
Other recorded API calls 2
  • document.cookie.read21 calls
  • document.cookie.write4 calls
Source record and integrity
Original source
results/headless/espn-com.json
Original file SHA-256
4ced5db38ce26019ad4fca4e7083c835f8ec2256f7c2adbe722bdd178100b705

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-4ced5db38ce2. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T05:45:55.794758Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/espn-com-20261019T054555.json
Original file SHA-256
62c8672326e55230d9ea507dcc54b60be2a8eac643dbec2edd8adf03ed545ff5

Run ID: research-62c8672326e5. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →