Skip to main content

Website evidence · pilot dataset

Does facebook.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 7 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T20:14:54.588639Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleFacebook

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.facebook.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 17 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.xx.fbcdn.net
Source record and integrity
Original source
results/headful/facebook-com-20261022T201454.json
Original file SHA-256
3a7e0602aca556b6ffd5e360dad753f85c6c6aa61d69600213696c9b7605d6ba

Run ID: headful-3a7e0602aca5. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: Not observedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleFacebook

CanvasDraws text and reads canvas output.5 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext11 calls
  • Inline caller recorded
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 42 · col 345
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8498
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7926
canvas.toDataURL2 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8216
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7971
canvas2d.fillText13 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 1931
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2119
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2248
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2433
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2603
canvas2d.getImageData9 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8071
canvas2d.measureText102 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
WebGLQueries the graphics environment.8 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1228
webgl2renderingcontext.getParameter10 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1298
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1350
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1412
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1452
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1512
webgl2renderingcontext.getShaderPrecisionFormat4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 991
webgl2renderingcontext.getSupportedExtensions1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1910
webglrenderingcontext.getExtension3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8554
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 396
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 605
webglrenderingcontext.getParameter24 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8624
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8676
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8778
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8839
webglrenderingcontext.getSupportedExtensions1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 9976
webglrenderingcontext.readPixels1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 839
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText102 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory8 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3224
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3267
  • https://static.xx.fbcdn.net/rsrc.php/v4iIre4/ys/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6YzL4U8ibR_Kw.jsline 228 · col 334
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 796
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 828
navigator.doNotTrack1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4281
navigator.hardwareConcurrency21 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 29 · col 388
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 278 · col 178
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 278 · col 215
  • https://static.xx.fbcdn.net/rsrc.php/v4iIre4/ys/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6YzL4U8ibR_Kw.jsline 228 · col 228
  • https://static.xx.fbcdn.net/rsrc.php/v4iIre4/ys/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6YzL4U8ibR_Kw.jsline 228 · col 285
navigator.language1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3487
navigator.languages4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 22 · col 339
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4661
navigator.maxTouchPoints5 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 30 · col 377
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3292
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3347
navigator.mimeTypes7 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 307
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 327
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4589
navigator.platform5 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 32 · col 372
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3543
  • https://static.xx.fbcdn.net/rsrc.php/v4i_054/yP/l/en_US-j/TWy7kDl0Ykj.jsline 9 · col 137
navigator.plugins7 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 305
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 323
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4510
navigator.userAgent6 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 34 · col 373
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4080
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 37 · col 140
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 37 · col 175
navigator.webdriver4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 41 · col 306
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4338
screen.availHeight3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2973
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 173
screen.availWidth3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2943
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 152
screen.colorDepth3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3014
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 194
screen.height4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2904
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 876
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 135
screen.pixelDepth1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3054
screen.width4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2879
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 847
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 120
window.devicePixelRatio8 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6003
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6034
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6069
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3095
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 796
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsAPI patterns only · 10 API patterns
  • https://static.xx.fbcdn.net/rsrc.php/v4iVuW4/yl/l/en_US-j/dnVk8qwlBPR.jsArkose Labs · 3 API patterns
Network and worker observations 30 requests
Captured scripts
16
Instrumented frames
Not recorded
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.xx.fbcdn.net
  • www.instagram.com
Other recorded API calls 1
  • document.cookie.write1 calls
Source record and integrity
Original source
results/headful/facebook-com.json
Original file SHA-256
5c501504fc7df0098da7e3e9d5ec1557c162896feca35a8562fe0475802d064f

Run ID: headful-5c501504fc7d. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: Not observedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T02:42:38.560060Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleFacebook

CanvasDraws text and reads canvas output.5 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext11 calls

Frame: https://www.facebook.com/

  • Inline caller recorded
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 42 · col 345
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8498
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7926
canvas.toDataURL2 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8216
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7971
canvas2d.fillText13 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 1931
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2119
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2248
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2433
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2603
canvas2d.getImageData9 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8071
canvas2d.measureText102 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
WebGLQueries the graphics environment.8 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1228
webgl2renderingcontext.getParameter10 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1298
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1350
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1412
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1452
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1512
webgl2renderingcontext.getShaderPrecisionFormat4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 991
webgl2renderingcontext.getSupportedExtensions1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1910
webglrenderingcontext.getExtension3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8554
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 396
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 605
webglrenderingcontext.getParameter24 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8624
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8676
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8778
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8839
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 9976
webglrenderingcontext.readPixels1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 839
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText102 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory8 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3224
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3267
  • https://static.xx.fbcdn.net/rsrc.php/v4iQat4/yi/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6Y.jsline 228 · col 334
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 796
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 828
navigator.doNotTrack1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4281
navigator.hardwareConcurrency21 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 29 · col 388
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 278 · col 178
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 278 · col 215
  • https://static.xx.fbcdn.net/rsrc.php/v4iQat4/yi/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6Y.jsline 228 · col 228
  • https://static.xx.fbcdn.net/rsrc.php/v4iQat4/yi/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6Y.jsline 228 · col 285
navigator.language1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3487
navigator.languages4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 22 · col 339
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4661
navigator.maxTouchPoints5 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 30 · col 377
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3292
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3347
navigator.mimeTypes7 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 307
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 327
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4589
navigator.platform5 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 32 · col 372
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3543
  • https://static.xx.fbcdn.net/rsrc.php/v4i_054/ys/l/en_US-j/vR65U62SRoC.jsline 9 · col 137
navigator.plugins7 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 305
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 323
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4510
navigator.userAgent6 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 34 · col 373
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4080
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 37 · col 140
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 37 · col 175
navigator.webdriver4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 41 · col 306
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4338
screen.availHeight3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2973
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 173
screen.availWidth3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2943
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 152
screen.colorDepth3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3014
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 194
screen.height4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2904
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 876
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 135
screen.pixelDepth1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3054
screen.width4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2879
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 847
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 120
window.devicePixelRatio8 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6003
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6034
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6069
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3095
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 796
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsAPI patterns only · 10 API patterns
  • https://static.xx.fbcdn.net/rsrc.php/v4iVuW4/yz/l/en_US-j/BKfhSPIvo6W.jsArkose Labs · 3 API patterns
Network and worker observations 29 requests
Captured scripts
16
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.xx.fbcdn.net
  • www.instagram.com
Other recorded API calls 1
  • document.cookie.write1 calls
Source record and integrity
Original source
results/headful/facebook-com-20261019T024238.json
Original file SHA-256
0adc3e41731f9015148ad3e8df70deb0932c264e00c5cd5db0ca7843c738766f

Run ID: headful-0adc3e41731f. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T20:14:53.917412Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/facebook-com-20261022T201453.json
Original file SHA-256
c00729ffe91d481c6dbeb3d01ffe9c7ab5f2ae54f1da8c60ca9a97a78aad2179

Run ID: headful-c00729ffe91d. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: Not observedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T22:26:47.323370Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleFacebook

CanvasDraws text and reads canvas output.5 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext11 calls

Frame: https://www.facebook.com/

  • Inline caller recorded
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 42 · col 345
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8498
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7926
canvas.toDataURL2 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8216
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7971
canvas2d.fillText13 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 1931
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2119
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2248
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2433
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2603
canvas2d.getImageData9 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8071
canvas2d.measureText102 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
WebGLQueries the graphics environment.8 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1228
webgl2renderingcontext.getParameter10 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1298
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1350
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1412
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1452
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1512
webgl2renderingcontext.getShaderPrecisionFormat4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 991
webgl2renderingcontext.getSupportedExtensions1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1910
webglrenderingcontext.getExtension3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8554
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yd/l/en_US-j/6gq2prOc-NN.jsline 179 · col 396
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yd/l/en_US-j/6gq2prOc-NN.jsline 179 · col 605
webglrenderingcontext.getParameter24 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8624
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8676
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8778
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8839
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 9976
webglrenderingcontext.readPixels1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 839
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText102 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory9 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3224
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3267
  • https://static.xx.fbcdn.net/rsrc.php/v4iIre4/yW/l/en_US-j/EXRGS8jx8ZrrHSkZS1MaKYFUSobUKlg22SnWTKFd8-V8.jsline 229 · col 334
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yd/l/en_US-j/6gq2prOc-NN.jsline 179 · col 796
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yd/l/en_US-j/6gq2prOc-NN.jsline 179 · col 828
navigator.doNotTrack1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4281
navigator.hardwareConcurrency23 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 29 · col 388
  • https://static.xx.fbcdn.net/rsrc.php/v4/yo/r/DjBbaVZOF0Q.jsline 278 · col 178
  • https://static.xx.fbcdn.net/rsrc.php/v4/yo/r/DjBbaVZOF0Q.jsline 278 · col 215
  • https://static.xx.fbcdn.net/rsrc.php/v4iIre4/yW/l/en_US-j/EXRGS8jx8ZrrHSkZS1MaKYFUSobUKlg22SnWTKFd8-V8.jsline 229 · col 228
  • https://static.xx.fbcdn.net/rsrc.php/v4iIre4/yW/l/en_US-j/EXRGS8jx8ZrrHSkZS1MaKYFUSobUKlg22SnWTKFd8-V8.jsline 229 · col 285
navigator.language1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3487
navigator.languages4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 22 · col 339
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4661
navigator.maxTouchPoints5 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 30 · col 377
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3292
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3347
navigator.mimeTypes7 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 307
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 327
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4589
navigator.platform5 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 32 · col 372
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3543
  • https://static.xx.fbcdn.net/rsrc.php/v4i_054/yK/l/en_US-j/cA9w0QqFNo3.jsline 9 · col 137
navigator.plugins7 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 305
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 323
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4510
navigator.userAgent6 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 34 · col 373
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4080
  • https://static.xx.fbcdn.net/rsrc.php/v4/yo/r/DjBbaVZOF0Q.jsline 37 · col 140
  • https://static.xx.fbcdn.net/rsrc.php/v4/yo/r/DjBbaVZOF0Q.jsline 37 · col 175
navigator.webdriver4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 41 · col 306
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4338
screen.availHeight3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2973
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yI/l/en_US-j/8YGi6J_HUyg.jsline 86 · col 173
screen.availWidth3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2943
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yI/l/en_US-j/8YGi6J_HUyg.jsline 86 · col 152
screen.colorDepth3 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3014
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yI/l/en_US-j/8YGi6J_HUyg.jsline 86 · col 194
screen.height4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2904
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yd/l/en_US-j/6gq2prOc-NN.jsline 64 · col 876
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yI/l/en_US-j/8YGi6J_HUyg.jsline 86 · col 135
screen.pixelDepth1 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3054
screen.width4 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2879
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yd/l/en_US-j/6gq2prOc-NN.jsline 64 · col 847
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yI/l/en_US-j/8YGi6J_HUyg.jsline 86 · col 120
window.devicePixelRatio8 calls

Frame: https://www.facebook.com/

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6003
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6034
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6069
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3095
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yd/l/en_US-j/6gq2prOc-NN.jsline 64 · col 796
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsAPI patterns only · 10 API patterns
  • https://static.xx.fbcdn.net/rsrc.php/v4i5K94/yh/l/en_US-j/y5A1NyS05TN.jsArkose Labs · 3 API patterns
Network and worker observations 31 requests
Captured scripts
17
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.xx.fbcdn.net
  • www.instagram.com
Other recorded API calls 1
  • document.cookie.write1 calls
Source record and integrity
Original source
results/headless/facebook-com-20261022T222647.json
Original file SHA-256
99e582d7d4088589d0b3a380179f9125070827c3cadecaf100efefcf747e2982

Run ID: research-99e582d7d408. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: Not observedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleFacebook

CanvasDraws text and reads canvas output.5 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext11 calls
  • Inline caller recorded
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 42 · col 345
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8498
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7926
canvas.toDataURL2 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8216
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 7971
canvas2d.fillText13 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 1931
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2119
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2248
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2433
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 2603
canvas2d.getImageData9 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8071
canvas2d.measureText102 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
WebGLQueries the graphics environment.8 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.getExtension1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1228
webgl2renderingcontext.getParameter10 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1298
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1350
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1412
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1452
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1512
webgl2renderingcontext.getShaderPrecisionFormat4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 991
webgl2renderingcontext.getSupportedExtensions1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 1910
webglrenderingcontext.getExtension3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8554
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 396
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 605
webglrenderingcontext.getParameter24 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8624
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8676
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8738
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8778
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 8839
webglrenderingcontext.getSupportedExtensions1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 9976
webglrenderingcontext.readPixels1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 839
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText102 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 886
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 998
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 5732
DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory9 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3224
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3267
  • https://static.xx.fbcdn.net/rsrc.php/v4iQat4/yi/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6Y.jsline 228 · col 334
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 796
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 179 · col 828
navigator.doNotTrack1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4281
navigator.hardwareConcurrency23 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 29 · col 388
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 278 · col 178
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 278 · col 215
  • https://static.xx.fbcdn.net/rsrc.php/v4iQat4/yi/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6Y.jsline 228 · col 228
  • https://static.xx.fbcdn.net/rsrc.php/v4iQat4/yi/l/en_US-j/KNcRcwJ9d0yRenqJK5Q8WGHdvbJ2SLV6Y.jsline 228 · col 285
navigator.language1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3487
navigator.languages4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 22 · col 339
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4661
navigator.maxTouchPoints5 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 30 · col 377
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3292
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3347
navigator.mimeTypes7 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 307
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 23 · col 327
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4589
navigator.platform5 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 32 · col 372
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3543
  • https://static.xx.fbcdn.net/rsrc.php/v4i_054/yP/l/en_US-j/TWy7kDl0Ykj.jsline 9 · col 137
navigator.plugins7 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 305
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 37 · col 323
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4510
navigator.userAgent6 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 34 · col 373
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4080
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 37 · col 140
  • https://static.xx.fbcdn.net/rsrc.php/v4/yu/r/IlPOrKAje9L.jsline 37 · col 175
navigator.webdriver4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 41 · col 306
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 4338
screen.availHeight3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2973
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 173
screen.availWidth3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2943
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 152
screen.colorDepth3 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3014
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 194
screen.height4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2904
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 876
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 135
screen.pixelDepth1 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3054
screen.width4 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 2879
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 847
  • https://static.xx.fbcdn.net/rsrc.php/v4ilMs4/yR/l/en_US-j/9ssx_aaYc_E.jsline 86 · col 120
window.devicePixelRatio8 calls
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6003
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6034
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 60 · col 6069
  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.jsline 74 · col 3095
  • https://static.xx.fbcdn.net/rsrc.php/v4ikjj4/yU/l/en_US-j/OEY_Tdtsgji.jsline 64 · col 796
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://static.xx.fbcdn.net/rsrc.php/v4/yj/r/atBZ6RzieZ4.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 28 requests
Captured scripts
0
Instrumented frames
Not recorded
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • static.xx.fbcdn.net
  • www.instagram.com
Other recorded API calls 1
  • document.cookie.write1 calls
Source record and integrity
Original source
results/headless/facebook-com.json
Original file SHA-256
c6827796a8f7d90d131ec0a2680fb59657f214edbf6c1035f7b53af78ca1da84

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-c6827796a8f7. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T02:35:02.258631Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/facebook-com-20261019T023502.json
Original file SHA-256
19205d043dfda72b316c0f651c06aaec21ec98309b1f7af3b449277f25031a8f

Run ID: research-19205d043dfd. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →