Website evidence · pilot dataset
Does imdb.com fingerprint you?
No monitored fingerprinting signals observed in the latest measured scans.
No monitored signal family met its threshold in the latest measured scans. This limited visit does not establish that the site never fingerprints visitors. Earlier runs remain available below.
All 6 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗
Inside the scan
← All websitesVisitor setup
Not observed
0 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- 2026-10-22T14:57:54.843203Z
- Browser / scanner
- 156.0.8078.4 / 0.4
Captured titleHuman Verification
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext1 callsFrame: https://www.imdb.com/
- Inline caller recorded
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
navigator.languages3 callsFrame: https://www.imdb.com/
https://awswaf.com/[redacted-challenge]line 1 · col 25023https://awswaf.com/[redacted-challenge]line 1 · col 25044https://awswaf.com/[redacted-challenge]line 1 · col 25102
navigator.userAgent2 callsFrame: https://www.imdb.com/
https://awswaf.com/[redacted-challenge]line 1 · col 468904https://awswaf.com/[redacted-challenge]line 1 · col 469034
Providers, script signatures, and DNS 0 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
Static script signatures
https://awswaf.com/[redacted-challenge]API patterns only · 9 API patterns
Network and worker observations 12 requests
- Captured scripts
- 2
- Instrumented frames
- 1
- Google Ads observed
- No
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
awswaf.com
Other recorded API calls 2
document.cookie.read2 callsdocument.cookie.write12 calls
Source record and integrity
- Original source
results/headful/imdb-com-20261022T145754.json- Original file SHA-256
262301780ec64764aefa8d94774fa7e0623509ccc07dfc9a8c55ac66893e7a1a
Run ID: headful-262301780ec6. The JSON contains sanitized observations, not the original private scan payload.
Other scan attempts (2)
Visitor setup
Not observed
0 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- Not recorded
- Browser / scanner
- Unknown browser / Unversioned
Captured titleHuman Verification
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext1 calls- Inline caller recorded
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
navigator.languages3 callshttps://awswaf.com/[redacted-challenge]line 1 · col 25023https://awswaf.com/[redacted-challenge]line 1 · col 25044https://awswaf.com/[redacted-challenge]line 1 · col 25102
navigator.userAgent2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 471945https://awswaf.com/[redacted-challenge]line 1 · col 472054
Providers, script signatures, and DNS 0 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
Static script signatures
https://awswaf.com/[redacted-challenge]API patterns only · 7 API patterns
Network and worker observations 12 requests
- Captured scripts
- 2
- Instrumented frames
- Not recorded
- Google Ads observed
- No
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
awswaf.com
Other recorded API calls 2
document.cookie.read2 callsdocument.cookie.write12 calls
Source record and integrity
- Original source
results/headful/imdb-com.json- Original file SHA-256
004942a82ef23f2a89834033f61765d1d0cac9362e0a795722a0000c5c62e478
Run ID: headful-004942a82ef2. The JSON contains sanitized observations, not the original private scan payload.
Visitor setup
Navigation failed
Navigation failed
- Measurement
- Navigation failed
- Page context
- Page not measured
- Scan time
- 2026-10-19T06:00:40.761382Z
- Browser / scanner
- 156.0.8078.4 / 0.3
Navigation or page loading failed in this browser setup. The record does not establish why it failed.
Source record and integrity
- Original source
results/headful/imdb-com-20261019T060040.json- Original file SHA-256
5ac5388b0d4011090541e96c135741bd84639597387033be72c6d65fc69c644a
Run ID: headful-5ac5388b0d40. The JSON contains sanitized observations, not the original private scan payload.
Research setup
Not observed
0 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- 2026-10-22T18:19:15.643374Z
- Browser / scanner
- 156.0.8078.4 / 0.4
Captured titleHuman Verification
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext1 callsFrame: https://www.imdb.com/
- Inline caller recorded
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
navigator.languages3 callsFrame: https://www.imdb.com/
https://awswaf.com/[redacted-challenge]line 1 · col 25023https://awswaf.com/[redacted-challenge]line 1 · col 25044https://awswaf.com/[redacted-challenge]line 1 · col 25102
navigator.userAgent2 callsFrame: https://www.imdb.com/
https://awswaf.com/[redacted-challenge]line 1 · col 464892https://awswaf.com/[redacted-challenge]line 1 · col 465027
Providers, script signatures, and DNS 0 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
Static script signatures
https://awswaf.com/[redacted-challenge]API patterns only · 8 API patterns
Network and worker observations 14 requests
- Captured scripts
- 2
- Instrumented frames
- 1
- Google Ads observed
- No
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
awswaf.com
Other recorded API calls 2
document.cookie.read2 callsdocument.cookie.write12 calls
Source record and integrity
- Original source
results/headless/imdb-com-20261022T181915.json- Original file SHA-256
a32c8f87e7af246664c7e97c14cad3bc7d7e395c4174af20fba3c2beb41fbef2
Run ID: research-a32c8f87e7af. The JSON contains sanitized observations, not the original private scan payload.
Other scan attempts (2)
Research setup
Draw + readback
2 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- Not recorded
- Browser / scanner
- Unknown browser / Unversioned
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext4 calls- Inline caller recorded
https://awswaf.com/[redacted-challenge]line 1 · col 100901https://awswaf.com/[redacted-challenge]line 1 · col 142481https://awswaf.com/[redacted-challenge]line 1 · col 142765
canvas.toDataURL1 callshttps://awswaf.com/[redacted-challenge]line 1 · col 147446
canvas2d.fillText4 callshttps://awswaf.com/[redacted-challenge]line 1 · col 143395https://awswaf.com/[redacted-challenge]line 1 · col 143557https://awswaf.com/[redacted-challenge]line 1 · col 145579https://awswaf.com/[redacted-challenge]line 1 · col 145698
canvas2d.getImageData1 callshttps://awswaf.com/[redacted-challenge]line 1 · col 148191
canvas2d.strokeText1 callshttps://awswaf.com/[redacted-challenge]line 1 · col 145460
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
webglrenderingcontext.getExtension2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 101144https://awswaf.com/[redacted-challenge]line 1 · col 101580
webglrenderingcontext.getParameter2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 101235https://awswaf.com/[redacted-challenge]line 1 · col 101297
webglrenderingcontext.getSupportedExtensions1 callshttps://awswaf.com/[redacted-challenge]line 1 · col 101363
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
navigator.doNotTrack1 callshttps://awswaf.com/[redacted-challenge]line 1 · col 135618
navigator.plugins3 callshttps://awswaf.com/[redacted-challenge]line 1 · col 51432https://awswaf.com/[redacted-challenge]line 1 · col 128836https://awswaf.com/[redacted-challenge]line 1 · col 128876
navigator.userAgent2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 52580https://awswaf.com/[redacted-challenge]line 1 · col 151991
navigator.webdriver4 callshttps://awswaf.com/[redacted-challenge]line 1 · col 152116https://awswaf.com/[redacted-challenge]line 1 · col 152142https://awswaf.com/[redacted-challenge]line 1 · col 154852https://awswaf.com/[redacted-challenge]line 1 · col 154876
screen.availHeight2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 49869
screen.colorDepth2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 49907
screen.height2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 49831
screen.width2 callshttps://awswaf.com/[redacted-challenge]line 1 · col 49793
Scripts with both text drawing and canvas readback 1
These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.
https://awswaf.com/[redacted-challenge]
Providers, script signatures, and DNS 0 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
No provider or DNS evidence in this record.
Network and worker observations 5 requests
- Captured scripts
- 0
- Instrumented frames
- Not recorded
- Google Ads observed
- No
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
awswaf.com
Other recorded API calls 1
document.cookie.read2 calls
Source record and integrity
- Original source
results/headless/imdb-com.json- Original file SHA-256
1137160d2991f13a6996b22ed887881e9b0ac5ebe4532cfa933f539d41d384b8
The research mode is inferred from the archive folder because this legacy record has no mode field.
Run ID: research-1137160d2991. The JSON contains sanitized observations, not the original private scan payload.
Research setup
Not observed
0 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- 2026-10-19T02:36:30.005371Z
- Browser / scanner
- 156.0.8078.4 / 0.3
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
No matching API call was captured.
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
No matching API call was captured.
Providers, script signatures, and DNS 0 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
Static script signatures
https://awswaf.com/[redacted-challenge]API patterns only · 7 API patterns
Network and worker observations 6 requests
- Captured scripts
- 1
- Instrumented frames
- 1
- Google Ads observed
- No
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
awswaf.com
Source record and integrity
- Original source
results/headless/imdb-com-20261019T023630.json- Original file SHA-256
ac92acc5f45a472dd368ef3b28f9c94bb0232149598ad1ed7e985a5e8fa47aa3
Run ID: research-ac92acc5f45a. The JSON contains sanitized observations, not the original private scan payload.
Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.
Read the sanitized JSON →