Skip to main content

Website evidence · pilot dataset

Does expedia.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 6 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Draw + readback

5 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: ObservedFonts: ObservedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T20:13:53.849347Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleExpedia Travel: Vacation Homes, Hotels, Car Rentals, Flights & More

CanvasDraws text and reads canvas output.6 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://cdn.quantummetric.com/qscripts/quantum-expedia.jsline 74 · col 84
canvas.getContext6 calls

Frame: https://www.expedia.com/

  • Inline caller recorded
  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 1272
  • https://www.expedia.com/akam/13/61df546fline 2 · col 5999
canvas.toDataURL2 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 6238
canvas2d.fillText4 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 6066
  • https://www.expedia.com/akam/13/61df546fline 2 · col 6210
canvas2d.getImageData1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/akam/13/61df546fline 2 · col 1335
canvas2d.measureText11 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
WebGLQueries the graphics environment.4 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension4 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
webgl2renderingcontext.getParameter22 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
webglrenderingcontext.getExtension1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
webglrenderingcontext.getParameter2 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
AudioRenders or reads audio samples.7 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

analyser.getFloatFrequencyData1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
analyser.getFloatTimeDomainData1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
audio.createAnalyser2 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
audio.createDynamicsCompressor1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
audio.createOscillator2 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
audiobuffer.getChannelData1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
offlineaudio.startRendering1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText11 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory2 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
navigator.doNotTrack2 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/akam/13/61df546fline 2 · col 502
  • https://www.expedia.com/akam/13/61df546fline 2 · col 512
navigator.getBattery1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/akam/13/61df546fline 2 · col 1050
navigator.hardwareConcurrency4 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 502
  • https://www.expedia.com/akam/13/61df546fline 2 · col 512
navigator.language4 calls

Frame: https://www.expedia.com/

  • https://c.travel-assets.com/lotus-home-ui/vendor.6d05aa33832b9a53.jsline 5 · col 63832
  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 502
  • https://www.expedia.com/akam/13/61df546fline 2 · col 512
navigator.languages5 calls

Frame: https://www.expedia.com/

  • https://c.travel-assets.com/lotus-home-ui/vendor.6d05aa33832b9a53.jsline 5 · col 63859
  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 502
  • https://www.expedia.com/akam/13/61df546fline 2 · col 512
navigator.maxTouchPoints3 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 502
  • https://www.expedia.com/akam/13/61df546fline 2 · col 512
navigator.platform6 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 502
  • https://www.expedia.com/akam/13/61df546fline 2 · col 512
navigator.plugins25 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 145
  • https://www.expedia.com/akam/13/61df546fline 2 · col 4227
navigator.userAgent23 calls

Frame: https://www.expedia.com/

  • https://cdn.quantummetric.com/qscripts/quantum-expedia.jsline 376 · col 78
  • https://cdn.quantummetric.com/qscripts/quantum-expedia.jsline 427 · col 332
  • https://cdn.quantummetric.com/qscripts/quantum-expedia.jsline 428 · col 145
  • https://cdn.quantummetric.com/qscripts/quantum-expedia.jsline 428 · col 329
  • https://www.expedia.com/akam/13/61df546fline 2 · col 4853
navigator.webdriver5 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 502
  • https://www.expedia.com/akam/13/61df546fline 2 · col 512
screen.availHeight1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/akam/13/61df546fline 2 · col 6985
screen.availWidth1 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/akam/13/61df546fline 2 · col 6804
screen.colorDepth3 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 7098
screen.height8 calls

Frame: https://www.expedia.com/

  • https://c.travel-assets.com/lotus-home-ui/pap.2996319ca24b97a4.jsline 2 · col 47546
  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 7016
screen.pixelDepth3 calls

Frame: https://www.expedia.com/

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 7119
screen.width8 calls

Frame: https://www.expedia.com/

  • https://c.travel-assets.com/lotus-home-ui/pap.2996319ca24b97a4.jsline 2 · col 47483
  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546fline 2 · col 6816
window.devicePixelRatio14 calls

Frame: https://www.expedia.com/

  • https://c.travel-assets.com/lotus-home-ui/pap.2996319ca24b97a4.jsline 2 · col 31382
  • https://c.travel-assets.com/lotus-home-ui/vendor.6d05aa33832b9a53.jsline 5 · col 67062
  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
Scripts with both text drawing and canvas readback 2

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://www.expedia.com/H159y3ezw_/om6YbbO3/Ug/wVuprbY71V/RGw_K1RKBQ/Rz4Ub/2NoE3gV
  • https://www.expedia.com/akam/13/61df546f
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://c.travel-assets.com/lotus-home-ui/app.6a9d27a9ec04eca4.jsArkose Labs · 0 API patterns
  • https://c.travel-assets.com/lotus-home-ui/navigation.d4feabcbe6d44f05.jsArkose Labs · 0 API patterns
Network and worker observations 119 requests
Captured scripts
29
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • a.travel-assets.com
  • accounts.google.com
  • b.travel-assets.com
  • browser-intake-datadoghq.com
  • c.travel-assets.com
  • cdn.cookielaw.org
  • cdn.quantummetric.com
  • cdn.tagcommander.com
  • forever.travel-assets.com
  • ingest.quantummetric.com
  • www.uciservice.com
Other recorded API calls 3
  • document.cookie.read3 calls
  • document.cookie.read23 calls
  • document.cookie.write3 calls
Source record and integrity
Original source
results/headful/expedia-com-20261022T201353.json
Original file SHA-256
35c611bd127c77749a98e4372f2c1e45a3130fddc216bb7fb1f8dc0a2955c9f1

Run ID: headful-35c611bd127c. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T23:03:52.062542Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/expedia-com-20261021T230352.json
Original file SHA-256
6a2af0b3f76f09de78c8cb707d4c4148c951d026eacc55138bb140f95f375e59

Run ID: headful-6a2af0b3f76f. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T14:47:14.698606Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/expedia-com-20261022T144714.json
Original file SHA-256
ade9fb20c2fdf1b5e37dd4b26fc6fbef3cc31dd47e426f995e64e4c1bc78ece8

Run ID: headful-ade9fb20c2fd. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T14:47:15.237989Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/expedia-com-20261022T144715.json
Original file SHA-256
85173d333f40f401f846d9bbafaab4af285f8417e7cac4fcd884734256fb6aaa

Run ID: headful-85173d333f40. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T18:07:36.283995Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleBot or Not?

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.expedia.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 18 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • c.travel-assets.com
Source record and integrity
Original source
results/headless/expedia-com-20261022T180736.json
Original file SHA-256
d807c54ab9b1749740bc777880dda1c2196393bba12adde1bdb2d1370905d9e8

Run ID: research-d807c54ab9b1. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-21T21:22:49.081867Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleBot or Not?

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.expedia.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.1 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.userAgent1 calls

Frame: https://www.expedia.com/

  • https://c.travel-assets.com/captcha-pwa/egds.836103d6e395b5eb.jsline 2 · col 17518
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://c.travel-assets.com/captcha-pwa/app.dfa69de761a319a6.jsArkose Labs, DataDome · 0 API patterns
  • https://c.travel-assets.com/captcha-pwa/root-challenge.b3d21ae5f219dc55.jsArkose Labs, DataDome, reCAPTCHA · 0 API patterns
Network and worker observations 24 requests
Captured scripts
12
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • c.travel-assets.com
Other recorded API calls 1
  • document.cookie.read1 calls
Source record and integrity
Original source
results/headless/expedia-com-20261021T212249.json
Original file SHA-256
05608041ab6131fad52b53197d86b58908fa903d74f4dc90b489f731cb1759b7

Run ID: research-05608041ab61. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →