Skip to main content

Website evidence · pilot dataset

Does max.com fingerprint you?

No monitored fingerprinting signals observed in the latest measured scans.

No monitored signal family met its threshold in the latest measured scans. One browser setup is unmeasured or missing. This limited visit does not establish that the site never fingerprints visitors. Earlier runs remain available below.

Open evidence JSON ↗

All 9 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T21:53:11.862940Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleHBO Max | Stream Series and Movies

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
canvas.getContext1 calls

Frame: https://www.hbomax.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.1 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.userAgent2 calls

Frame: https://www.hbomax.com/

  • https://browser.sentry-cdn.com/7.120.3/bundle.es5.min.jsline 2 · col 34317
  • https://www.hbomax.com/line 11 · col 770
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 55 requests
Captured scripts
1
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • beam-images.warnermediacdn.com
  • braze-images.com
  • browser.sentry-cdn.com
  • s.go-mpulse.net
  • www.googletagmanager.com
Other recorded API calls 1
  • document.cookie.read1 calls
Source record and integrity
Original source
results/headful/max-com-20261022T215311.json
Original file SHA-256
ceb85d695b7072454ec504d6d1f97fa4ba0fe0af64526679636d291bf6bbcfd2

Run ID: headful-ceb85d695b70. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (5)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T23:20:19.398627Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/max-com-20261021T232019.json
Original file SHA-256
6a7344e574a86d0064e46bcca848cfc92187e3e4e704ada4c8df6bda095e0726

Run ID: headful-6a7344e574a8. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T15:06:40.704167Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/max-com-20261022T150640.json
Original file SHA-256
1250e465ee71f8db1b1be5043655cb655b185e08f0e46f7282ed42e35a5a53c5

Run ID: headful-1250e465ee71. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T20:35:39.435597Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/max-com-20261022T203539.json
Original file SHA-256
354d66377594257887e28099bdaa9f0abcd415811be109e29e4f22e4f69cc109

Run ID: headful-354d66377594. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T20:35:40.258640Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/max-com-20261022T203540.json
Original file SHA-256
ea03e97eb07aa6345bdc944e7afcd8f050b4531c585a15c59b6b6772119bc237

Run ID: headful-ea03e97eb07a. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T21:53:10.734633Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/max-com-20261022T215310.json
Original file SHA-256
e4e8e5551d26c91a6410094ac115f7f512f26fe7e69a9264fdcdb1876efb9c90

Run ID: headful-e4e8e5551d26. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Unmeasured

Unmeasured

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Unmeasured
Page context
Challenge page
Scan time
2026-10-22T22:47:27.314456Z
Browser / scanner
156.0.8078.4 / 0.4
Unmeasured — no usable scan result

Only a challenge page was measured; the normal page remains unmeasured.

Source record and integrity
Original source
results/headless/max-com-20261022T224727.json
Original file SHA-256
e9a961c8d61e17bdbf80187742c66ede5c35cf5e60bf243a0aa05dd35958684c

Run ID: research-e9a961c8d61e. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Challenge page
Scan time
2026-10-21T21:29:22.538508Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleAccess Denied

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.max.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 2 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

    Source record and integrity
    Original source
    results/headless/max-com-20261021T212922.json
    Original file SHA-256
    832e78687704ae32ec123e42b32f5446c3ba2dd58e30f1d1ebe1e9dc7403e27e

    Run ID: research-832e78687704. The JSON contains sanitized observations, not the original private scan payload.

    Research setup

    Navigation failed

    Navigation failed

    Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
    Measurement
    Navigation failed
    Page context
    Page not measured
    Scan time
    2026-10-22T18:27:38.315854Z
    Browser / scanner
    156.0.8078.4 / 0.4
    Navigation failed — no usable scan result

    Navigation or page loading failed in this browser setup. The record does not establish why it failed.

    Source record and integrity
    Original source
    results/headless/max-com-20261022T182738.json
    Original file SHA-256
    bc2fd01a016c016ae93b302d26d4a16a1d8a5b4cd5a4eebf966e0f3d7738b8e2

    Run ID: research-bc2fd01a016c. The JSON contains sanitized observations, not the original private scan payload.

    Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

    Read the sanitized JSON →