Skip to main content

Website evidence · pilot dataset

Does github.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 9 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

2 of 5 signal families observed

Canvas: Not observedWebGL: ObservedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T20:21:50.907783Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleGitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHub

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext4 calls

Frame: https://github.com/

  • Inline caller recorded
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 107975
  • https://github.githubassets.com/assets/landing-pages-1f1d0366a117c04d.jsline 717 · col 285152
WebGLQueries the graphics environment.3 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension32 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 956
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 1128
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 1656
webglrenderingcontext.getParameter26 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137920
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137944
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137968
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137991
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 138015
webglrenderingcontext.getShaderPrecisionFormat4 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137274
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137327
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.9 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.doNotTrack2 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/landing-pages-1f1d0366a117c04d.jsline 2 · col 33566
  • https://github.githubassets.com/assets/landing-pages-1f1d0366a117c04d.jsline 2 · col 33603
navigator.hardwareConcurrency12 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/behaviors-054f1bbd530b415d.jsline 27 · col 105654
navigator.languages6 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13730
  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13750
navigator.platform13 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/eon-36af335a1906af16.jsline 4 · col 4585
  • https://github.githubassets.com/assets/hotkey-c8899bfd61abc3fe.jsline 2 · col 2828
navigator.userAgent39 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/97-776738c2d3970541.jsline 56 · col 56251
  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13149
  • https://github.githubassets.com/assets/t1r-504e04e149eab7c3.jsline 2 · col 57264
  • https://github.githubassets.com/assets/t1r-504e04e149eab7c3.jsline 2 · col 57285
  • https://github.githubassets.com/assets/wc-a59655378c77af70.jsline 2 · col 103069
navigator.webdriver1 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-foundation-799625033ee8341e.jsline 2 · col 208
screen.height3 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13224
screen.width3 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13208
window.devicePixelRatio8 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13812
  • https://github.githubassets.com/assets/chunk-vk-0261936433747322.jsline 449 · col 5999
  • https://github.githubassets.com/assets/chunk-yfq-4ae8c82f944b7353.jsline 2 · col 564
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsAPI patterns only · 5 API patterns
  • https://github.githubassets.com/assets/ls-b2ec154382cd843f.jsDataDome · 0 API patterns
Network and worker observations 181 requests
Captured scripts
112
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • github.githubassets.com
  • images.ctfassets.net
  • videos.ctfassets.net
Other recorded API calls 2
  • document.cookie.read16 calls
  • document.cookie.write3 calls
Source record and integrity
Original source
results/headful/github-com-20261022T202150.json
Original file SHA-256
7356672e2753ffc3f0852cb426f5f3456d6a32288ea2fa9702a474cdd6b7ecb2

Run ID: headful-7356672e2753. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/github-com.json
Original file SHA-256
8daddef2559e1fd0f146f21c0af3d37ba2435b746a52cd845edbc7efbf508ca1

Run ID: headful-8daddef2559e. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T05:58:32.106694Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/github-com-20261019T055832.json
Original file SHA-256
5769aca2c5c91c19bc895f87095269f079080b531ff1aedf33a6ee1b8221826e

Run ID: headful-5769aca2c5c9. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T14:52:00.619119Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/github-com-20261022T145200.json
Original file SHA-256
ab37d4d14275f79339d468afc93ac6b591590377c45f842661115fb604dc3419

Run ID: headful-ab37d4d14275. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

2 of 5 signal families observed

Canvas: Not observedWebGL: ObservedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T22:35:08.046593Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleGitHub · Change is constant. GitHub keeps you ahead. · GitHub · GitHub

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext4 calls

Frame: https://github.com/

  • Inline caller recorded
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 107975
  • https://github.githubassets.com/assets/landing-pages-0c5b34849fbd5e7b.jsline 717 · col 285152
WebGLQueries the graphics environment.3 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension32 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 956
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 1128
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 187 · col 1656
webglrenderingcontext.getParameter26 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137920
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137944
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137968
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137991
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 138015
webglrenderingcontext.getShaderPrecisionFormat4 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137274
  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsline 37 · col 137327
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.9 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.doNotTrack2 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/landing-pages-0c5b34849fbd5e7b.jsline 2 · col 33567
  • https://github.githubassets.com/assets/landing-pages-0c5b34849fbd5e7b.jsline 2 · col 33604
navigator.hardwareConcurrency9 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/behaviors-0c16da6c66d9a698.jsline 27 · col 105654
navigator.languages4 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13730
  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13750
navigator.platform13 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/eon-36af335a1906af16.jsline 4 · col 4585
  • https://github.githubassets.com/assets/hotkey-c8899bfd61abc3fe.jsline 2 · col 2828
navigator.userAgent38 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/97-776738c2d3970541.jsline 56 · col 56251
  • https://github.githubassets.com/assets/eon-36af335a1906af16.jsline 4 · col 3793
  • https://github.githubassets.com/assets/t1r-504e04e149eab7c3.jsline 2 · col 57264
  • https://github.githubassets.com/assets/t1r-504e04e149eab7c3.jsline 2 · col 57285
  • https://github.githubassets.com/assets/wc-a59655378c77af70.jsline 2 · col 103069
navigator.webdriver1 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-foundation-799625033ee8341e.jsline 2 · col 208
screen.height2 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13224
screen.width2 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13208
window.devicePixelRatio7 calls

Frame: https://github.com/

  • https://github.githubassets.com/assets/app-runtime-24d1e3019d231636.jsline 2 · col 13812
  • https://github.githubassets.com/assets/chunk-vk-0261936433747322.jsline 449 · col 5999
  • https://github.githubassets.com/assets/chunk-yfq-4ae8c82f944b7353.jsline 2 · col 564
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://github.githubassets.com/assets/d8-c4cb62f1d8945e61.jsAPI patterns only · 5 API patterns
  • https://github.githubassets.com/assets/ls-b2ec154382cd843f.jsDataDome · 0 API patterns
Network and worker observations 179 requests
Captured scripts
77
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • github.githubassets.com
  • images.ctfassets.net
  • videos.ctfassets.net
Other recorded API calls 2
  • document.cookie.read15 calls
  • document.cookie.write3 calls
Source record and integrity
Original source
results/headless/github-com-20261022T223508.json
Original file SHA-256
deae64368dcb2ffd76550662b97bf9a413bf5d072cf6cc87c8f84f66613a2866

Run ID: research-deae64368dcb. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (4)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/github-com.json
Original file SHA-256
9cc8d8bf74b43dfba19ed546c224559d110bb99ac1ef13fccf6d2c128c731b0c

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-9cc8d8bf74b4. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T05:47:32.331200Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/github-com-20261019T054732.json
Original file SHA-256
5738c39abd623910935790bb534626eeb8a334268c3355d6b5d10105c6c00552

Run ID: research-5738c39abd62. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T18:13:39.233018Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/github-com-20261022T181339.json
Original file SHA-256
eddf42973bbc98cfbb1d75af97a9b3948881e4845ee40588a073cfa019de8561

Run ID: research-eddf42973bbc. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T22:35:07.944556Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headless/github-com-20261022T223507.json
Original file SHA-256
d9258fd730cd1edf501df43fb2a8845d31f15b5b690c0af0d180f70210948c8c

Run ID: research-d9258fd730cd. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →