Skip to main content

Website evidence · pilot dataset

Does target.com fingerprint you?

No monitored fingerprinting signals observed in the latest measured scans.

No monitored signal family met its threshold in the latest measured scans. This limited visit does not establish that the site never fingerprints visitors. Earlier runs remain available below.

Open evidence JSON ↗

All 7 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T16:41:00.962491Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleTarget : Expect More. Pay Less.

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://www.target.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adssecurepubads.g.doubleclick.net
Network and worker observations 119 requests
Captured scripts
7
Instrumented frames
1
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • assets.targetimg1.com
  • client.px-cloud.net
  • pub.doubleverify.com
  • securepubads.g.doubleclick.net
  • target.scene7.com
Other recorded API calls 1
  • document.cookie.read2 calls
Source record and integrity
Original source
results/headful/target-com-20261022T164100.json
Original file SHA-256
7f843571c1f7289241b9122f42f6ca3b8a6c1d6fb6b6b1036337ded0546425ed

Run ID: headful-7f843571c1f7. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/target-com.json
Original file SHA-256
781fca686ba941884f3b6229f6f05c79a903ddb1ffb79695fe3c143e5ba4dc1d

Run ID: headful-781fca686ba9. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T01:19:05.492872Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/target-com-20261019T011905.json
Original file SHA-256
2a571c9a150899e704fecaa2511e10462685290e16f052bb2807c7dad5a3d9d1

Run ID: headful-2a571c9a1508. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T19:03:30.019402Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleTarget : Expect More. Pay Less.

CanvasDraws text and reads canvas output.2 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 64942
canvas.getContext1 calls

Frame: https://www.target.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.2 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.platform1 calls

Frame: https://www.target.com/

  • https://client.px-cloud.net/[redacted-challenge]line 3 · col 5478
navigator.userAgent4 calls

Frame: https://www.target.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 51991
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 70231
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 70285
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 76267
Providers, script signatures, and DNS 1 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adssecurepubads.g.doubleclick.net

Static script signatures

  • https://client.px-cloud.net/[redacted-challenge]PerimeterX · 9 API patterns
Network and worker observations 123 requests
Captured scripts
3
Instrumented frames
2
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • assets.targetimg1.com
  • client.px-cloud.net
  • collector-pxgwpp4wus.px-cloud.net
  • ift.px-cloud.net
  • pub.doubleverify.com
  • securepubads.g.doubleclick.net
  • target.scene7.com
Other recorded API calls 2
  • document.cookie.read12 calls
  • document.cookie.write2 calls
Source record and integrity
Original source
results/headless/target-com-20261022T190330.json
Original file SHA-256
180a9ea57a637bf64fdc92989c7286bb70f9b8509800e0e1b69baa3116c34cc3

Run ID: research-180a9ea57a63. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Research setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: Not observedAudio: ObservedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleTarget : Expect More. Pay Less.

CanvasDraws text and reads canvas output.5 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext51 calls
  • Inline caller recorded
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140217
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144590
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 190828
canvas.toDataURL8 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140953
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141568
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144288
canvas2d.fillText259 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140903
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141427
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141510
canvas2d.getImageData67 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
canvas2d.measureText92 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.readPixels2 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 191644
webglrenderingcontext.getSupportedExtensions1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144324
AudioRenders or reads audio samples.3 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createDynamicsCompressor1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139163
audio.createOscillator2 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139057
audiobuffer.getChannelData2 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText92 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory6 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171623
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.jsline 23 · col 316110
navigator.doNotTrack22 calls
  • https://assets.adobedtm.com/[redacted-id]/[redacted-id]/launch-270dfdaa71b7.min.jsline 2 · col 2993
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://assets.targetimg1.com/webui/top-of-funnel/_next/static/chunks/pages/_app-bdc839ad410eeae1.jsline 1 · col 924108
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171517
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171537
navigator.hardwareConcurrency3 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172902
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177378
navigator.language1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171406
navigator.languages3 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171453
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171654
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171667
navigator.maxTouchPoints6 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 158756
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 158780
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174307
navigator.mimeTypes9 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171889
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171903
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176248
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176261
navigator.platform20 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://assets.targetimg1.com/webui/top-of-funnel/_next/static/chunks/pages/_app-bdc839ad410eeae1.jsline 1 · col 924047
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171429
  • https://client.px-cloud.net/[redacted-challenge]line 3 · col 5572
navigator.plugins25 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 117579
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154057
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154069
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154103
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154129
navigator.userAgent613 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 51073
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 72070
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 72269
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 77864
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 163385
navigator.webdriver4 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 146535
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 153724
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 187731
screen.availHeight6 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166324
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.jsline 23 · col 315766
screen.availWidth6 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166294
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.jsline 23 · col 315826
screen.colorDepth7 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166490
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177347
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.jsline 23 · col 315885
screen.height39 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://assets.targetimg1.com/webui/top-of-funnel/_next/static/chunks/pages/_app-bdc839ad410eeae1.jsline 1 · col 924195
  • https://assets.targetimg1.com/webui/top-of-funnel/_next/static/chunks/pages/_app-bdc839ad410eeae1.jsline 1 · col 1542511
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166267
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177573
screen.pixelDepth3 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166450
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177481
screen.width39 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://assets.targetimg1.com/webui/top-of-funnel/_next/static/chunks/pages/_app-bdc839ad410eeae1.jsline 1 · col 924161
  • https://assets.targetimg1.com/webui/top-of-funnel/_next/static/chunks/pages/_app-bdc839ad410eeae1.jsline 1 · col 1542477
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166240
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177539
window.devicePixelRatio7 calls
  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177433
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 192027
  • https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610120101/pubads_impl.jsline 23 · col 315934
Scripts with both text drawing and canvas readback 2

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://assets.targetimg1.com/ssx/ssx.mod.js
  • https://client.px-cloud.net/[redacted-challenge]
Providers, script signatures, and DNS 3 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • FullStoryedge.fullstory.com
  • Google Adsad.doubleclick.net, cm.g.doubleclick.net, f0f57f79dffec6fd96f89a730997db9e.safeframe.googlesyndication.com, pagead2.googlesyndication.com, securepubads.g.doubleclick.net, tpc.googlesyndication.com
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 251 requests
Captured scripts
0
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • ad.doubleclick.net
  • assets.adobedtm.com
  • assets.targetimg1.com
  • captcha.px-cdn.net
  • cdn.attn.tv
  • cdn.dv.tech
  • cdn.p-n.io
  • client.px-cloud.net
  • cm.everesttech.net
  • cm.g.doubleclick.net
  • collector-pxgwpp4wus.px-cloud.net
  • crcldu.com
  • dpm.demdex.net
  • edge.fullstory.com
  • f0f57f79dffec6fd96f89a730997db9e.safeframe.googlesyndication.com
  • fonts.googleapis.com
  • fonts.gstatic.com
  • ift.px-cloud.net
  • pagead2.googlesyndication.com
  • ponos.zeronaught.com
  • pub.doubleverify.com
  • pub.dv.tech
  • ri.px-cloud.net
  • securepubads.g.doubleclick.net
  • target.demdex.net
  • target.scene7.com
  • tpc.googlesyndication.com
  • vtrk.dv.tech
  • www.google.com
  • www.googletagmanager.com
Other recorded API calls 3
  • document.cookie.read1372 calls
  • document.cookie.write47 calls
  • webrtc.RTCPeerConnection1 calls
Source record and integrity
Original source
results/headless/target-com.json
Original file SHA-256
99b51b1719572fbd495417f4254c6641b7d842400ee8b8431081f89d198dff7c

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-99b51b171957. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T02:38:30.860162Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/target-com-20261019T023830.json
Original file SHA-256
b5e671a5267794f1ce79616631f760c11016f99e653817f52d70a105c79beebb

Run ID: research-b5e671a52677. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T19:03:29.938841Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headless/target-com-20261022T190329.json
Original file SHA-256
4e5519b9e484ceb8a4c764c2927ead3579ea4f176157e28e6b5a47f02035c801

Run ID: research-4e5519b9e484. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →