Skip to main content

Website evidence · pilot dataset

Does nike.com fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 7 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T20:46:57.848150Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleNike. Just Do It. Nike.com

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://www.nike.com/line 180 · col 1098
canvas.getContext1 calls

Frame: https://www.nike.com/

  • Inline caller recorded
canvas.getContext1 calls

Frame: https://www.nike.com/static/uxf/guest-session-html/index.html

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.5 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language8 calls

Frame: https://www.nike.com/

  • https://www.nike.com/static/analytics-client/public/web.chunk.4b6a5c.jsline 1 · col 3106
navigator.languages2 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 254358
  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 254372
navigator.maxTouchPoints1 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 51730
navigator.userAgent32 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 50908
  • https://www.nike.com/line 2 · col 2609
  • https://www.nike.com/line 2 · col 2687
  • https://www.nike.com/static/experience/experimentation-eng/optimization-client/optimization-client.jsline 3 · col 275598
  • https://www.nike.com/static/uxf/dotcom-nav-v3/packages/header-footer-renderer/public/commons.clientBundle.5dbf1e17554e46984b8e.jsline 711 · col 1161
window.devicePixelRatio78 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 20 · col 134155
  • https://www.nike.com/_next/static/chunks/pages/%5B%5B...page%5D%5D-9cfab754430b7360.jsline 3 · col 52260
  • https://www.nike.com/_next/static/chunks/pages/%5B%5B...page%5D%5D-9cfab754430b7360.jsline 3 · col 52288
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

CNAME delegation

  • abt.nike.com → nike.tt.omtrdc.net

DNS delegation identifies infrastructure; it does not prove which browser code ran.

Network and worker observations 356 requests
Captured scripts
35
Instrumented frames
3
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • c.go-mpulse.net
  • cloudflare.com
  • insights-collector.newrelic.com
  • nikeconsumerservices.my.site.com
  • reporting.cdndex.io
  • s.go-mpulse.net
Other recorded API calls 2
  • document.cookie.read355 calls
  • document.cookie.write18 calls
Source record and integrity
Original source
results/headful/nike-com-20261022T204657.json
Original file SHA-256
f5db463ac0a3c2e0604d40f6a9e8a054184cd19fa8f2a809f8235efa76045141

Run ID: headful-f5db463ac0a3. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T22:44:11.544321Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/nike-com-20261021T224411.json
Original file SHA-256
84d6b49c9813ae7d1796c8b59ae5c42a304e97f5a130e0fa4fb0757fbcb3c5ac

Run ID: headful-84d6b49c9813. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T15:15:19.592612Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/nike-com-20261022T151519.json
Original file SHA-256
2a2f2bb5515d075ee073792de682dc8f4bee0a8d7886e63911cebe16d98374f0

Run ID: headful-2a2f2bb5515d. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T15:15:20.045627Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/nike-com-20261022T151520.json
Original file SHA-256
1747deb7aafac286bb8870ba780a35cefd74d924693b33e04adb3c873f9be25f

Run ID: headful-1747deb7aafa. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-22T22:59:38.419178Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleNike. Just Do It. Nike.com

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.nike.com/

  • Inline caller recorded
canvas.getContext1 calls

Frame: https://www.nike.com/static/uxf/guest-session-html/index.html

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.5 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language16 calls

Frame: https://www.nike.com/

  • https://www.nike.com/static/analytics-client/public/web.chunk.4b6a5c.jsline 1 · col 3106
navigator.languages2 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 254358
  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 254372
navigator.maxTouchPoints1 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 51730
navigator.userAgent41 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 18 · col 50908
  • https://www.nike.com/line 2 · col 2609
  • https://www.nike.com/line 2 · col 2687
  • https://www.nike.com/static/experience/experimentation-eng/optimization-client/optimization-client.jsline 3 · col 275598
  • https://www.nike.com/static/uxf/dotcom-nav-v3/packages/header-footer-renderer/public/commons.clientBundle.5dbf1e17554e46984b8e.jsline 711 · col 1161
window.devicePixelRatio84 calls

Frame: https://www.nike.com/

  • https://static-assets.nike.com/video-player/2.2.0/nike-one-video-player.min.jsline 20 · col 134155
  • https://www.nike.com/_next/static/chunks/pages/%5B%5B...page%5D%5D-59f32ddc2c8a37bf.jsline 3 · col 52260
  • https://www.nike.com/_next/static/chunks/pages/%5B%5B...page%5D%5D-59f32ddc2c8a37bf.jsline 3 · col 52288
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

CNAME delegation

  • abt.nike.com → nike.tt.omtrdc.net

DNS delegation identifies infrastructure; it does not prove which browser code ran.

Network and worker observations 306 requests
Captured scripts
35
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • c.go-mpulse.net
  • cloudflare.com
  • insights-collector.newrelic.com
  • nikeconsumerservices.my.site.com
  • reporting.cdndex.io
  • s.go-mpulse.net
Other recorded API calls 2
  • document.cookie.read437 calls
  • document.cookie.write19 calls
Source record and integrity
Original source
results/headless/nike-com-20261022T225938.json
Original file SHA-256
0a2744f13ee29d1108fc5320dcd7ae13ca6b9b913bf924c7ed351a6ef79573c5

Run ID: research-0a2744f13ee2. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-21T21:03:35.998270Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/nike-com-20261021T210335.json
Original file SHA-256
0539b8c6be2937e5d498b6f90d9d7efb4c0fb8b1c7677737360784e7cb2f8ca7

Run ID: research-0539b8c6be29. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T18:39:44.840707Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/nike-com-20261022T183944.json
Original file SHA-256
00107edb8592a0b79afb245abb49bf36825a4992a86e8d056fc84ce6fc21476c

Run ID: research-00107edb8592. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →