Skip to main content

Website evidence · pilot dataset

Does twitter.com fingerprint you?

No monitored fingerprinting signals observed in the latest measured scans.

No monitored signal family met its threshold in the latest measured scans. This limited visit does not establish that the site never fingerprints visitors. Earlier runs remain available below.

Open evidence JSON ↗

All 7 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T16:50:50.691458Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleX. It’s what’s happening / X

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://x.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://abs.twimg.com/x-web/x-web/assets/startup-dynamic-vSg9WwmN.jsArkose Labs · 0 API patterns
Network and worker observations 25 requests
Captured scripts
9
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • abs.twimg.com
  • x.com
Other recorded API calls 1
  • document.cookie.read1 calls
Source record and integrity
Original source
results/headful/twitter-com-20261022T165050.json
Original file SHA-256
3cb9d5d233d67221c64aeedc88de3753c10894660861195b25d13e5ea5546b4e

Run ID: headful-3cb9d5d233d6. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Draw + readback

3 of 5 signal families observed

Canvas: ObservedWebGL: Not observedAudio: Not observedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleX. It’s what’s happening / X

CanvasDraws text and reads canvas output.5 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext70 calls
  • Inline caller recorded
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 11192
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 7 · col 6101
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 7 · col 7111
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 250091
canvas.toDataURL7 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 2373
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 7 · col 20296
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 92547
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 214200
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 218871
canvas2d.fillText28 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 214118
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 214141
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 214165
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 248867
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 250195
canvas2d.getImageData24 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 9891
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 99635
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 249295
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 250234
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 253039
canvas2d.measureText313 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 16941
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 249265
WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension5 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 12481
webglrenderingcontext.getParameter3 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 60686
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 167492
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText313 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 16941
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 249265
DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory5 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 221871
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-DNvjukR9.jsline 1 · col 33234
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-DNvjukR9.jsline 1 · col 33353
navigator.doNotTrack1 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 65167
navigator.hardwareConcurrency5 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 221871
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-DNvjukR9.jsline 1 · col 33378
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-DNvjukR9.jsline 1 · col 33512
navigator.language3 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 221871
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 243073
navigator.languages5 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 2480
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 95465
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 221871
navigator.maxTouchPoints10 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 2899
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 135973
  • https://abs.twimg.com/x-web/x-web/assets/startup-CiRaahFx.jsline 5 · col 69600
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-DkHDE0be.jsline 29 · col 76267
navigator.mimeTypes3 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 10541
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 27596
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 221871
navigator.platform4 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-DkHDE0be.jsline 29 · col 76229
navigator.plugins4 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 88499
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 218349
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 221871
navigator.userAgent86 calls
  • https://abs.twimg.com/x-web/x-web/assets/startup-CiRaahFx.jsline 1 · col 7095
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-DkHDE0be.jsline 21 · col 334801
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-DkHDE0be.jsline 21 · col 334822
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-DkHDE0be.jsline 29 · col 76200
  • https://abs.twimg.com/x-web/x-web/entry-client-logged-out-dczARPQh.jsline 2 · col 22239
navigator.webdriver3 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 221871
screen.availHeight2 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 7 · col 27661
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 7 · col 27686
screen.availWidth2 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 245296
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 245321
screen.colorDepth3 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 2480
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 2245
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 2325
screen.height4 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 3105
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 162868
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 162896
screen.pixelDepth1 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
screen.width4 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 2336
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 82747
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 8 · col 82775
window.devicePixelRatio2 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 7 · col 31396
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsline 7 · col 31428
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://abs.twimg.com/x-web/x-web/assets/_headerless-D5n8EekD.jsArkose Labs · 0 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/arkose-challenge-CCFzBz4n.jsArkose Labs · 0 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-C_4d8xIr.jsAPI patterns only · 6 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/startup-dynamic-CZ_11KXN.jsArkose Labs · 0 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/use-jetfuel-dev-CWeFHJK2.jsArkose Labs · 0 API patterns
Network and worker observations 148 requests
Captured scripts
26
Instrumented frames
Not recorded
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • abs.twimg.com
  • api.x.com
  • o30969.ingest.us.sentry.io
  • x.com
Other recorded API calls 3
  • document.cookie.read44 calls
  • document.cookie.write4 calls
  • webrtc.RTCPeerConnection2 calls
Source record and integrity
Original source
results/headful/twitter-com.json
Original file SHA-256
368a28c4b3226477464108dbd2eb16abc561ce741da1bf2b0e920155b162a18f

Run ID: headful-368a28c4b322. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Draw + readback

3 of 5 signal families observed

Canvas: ObservedWebGL: Not observedAudio: Not observedFonts: ObservedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T02:46:55.916846Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleX. It’s what’s happening / X

CanvasDraws text and reads canvas output.6 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 39360
canvas.getContext70 calls

Frame: https://x.com/

  • Inline caller recorded
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 11192
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 6101
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 7111
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 250091
canvas.toDataURL7 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 2373
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 20296
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 92547
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 214200
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 218871
canvas2d.fillText28 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 214118
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 214141
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 214165
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 248867
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 250195
canvas2d.getImageData24 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 9891
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 99635
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 249295
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 250234
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 253039
canvas2d.measureText313 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 16941
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 249265
WebGLQueries the graphics environment.2 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webglrenderingcontext.getExtension5 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 12481
webglrenderingcontext.getParameter3 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 60686
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 167492
AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.1 API entries

Observed requires at least ten text-measurement calls. Guide ↗

canvas2d.measureText313 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 16941
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 249265
DeviceReads browser and display properties.21 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory5 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 221871
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-qM7jcRxT.jsline 1 · col 33234
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-qM7jcRxT.jsline 1 · col 33353
navigator.doNotTrack1 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 65167
navigator.hardwareConcurrency5 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 221871
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-qM7jcRxT.jsline 1 · col 33378
  • https://abs.twimg.com/x-web/x-web/assets/install-sentry-tracing-qM7jcRxT.jsline 1 · col 33512
navigator.language3 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 221871
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 243073
navigator.languages5 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 2480
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 95465
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 221871
navigator.maxTouchPoints9 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 2899
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 135973
  • https://abs.twimg.com/x-web/x-web/assets/startup-BrB_8jTs.jsline 5 · col 69600
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-JfxF0Mjo.jsline 29 · col 76267
navigator.mimeTypes3 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 10541
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 27596
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 221871
navigator.platform2 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 124117
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 124154
navigator.platform4 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-JfxF0Mjo.jsline 29 · col 76229
navigator.plugins4 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 88499
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 218349
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 221871
navigator.userAgent2 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 65554
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 65616
navigator.userAgent84 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/startup-BrB_8jTs.jsline 1 · col 7095
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-JfxF0Mjo.jsline 21 · col 334801
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-JfxF0Mjo.jsline 21 · col 334822
  • https://abs.twimg.com/x-web/x-web/assets/startup-vendor-JfxF0Mjo.jsline 29 · col 76200
  • https://abs.twimg.com/x-web/x-web/entry-client-logged-out-DB9qOn4u.jsline 2 · col 22241
navigator.webdriver2 calls
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 43814
navigator.webdriver3 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 221871
screen.availHeight2 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 27661
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 27686
screen.availWidth2 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 245296
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 245321
screen.colorDepth3 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 2480
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 2245
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 2325
screen.height4 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 3105
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 162868
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 162896
screen.pixelDepth1 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
screen.width4 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 2336
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 1 · col 296030
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 82747
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 8 · col 82775
window.devicePixelRatio2 calls

Frame: https://x.com/

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 31396
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsline 7 · col 31428
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.js
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://abs.twimg.com/x-web/x-web/assets/_headerless-D3eB-MU3.jsArkose Labs · 0 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/arkose-challenge-a7gR05Ki.jsArkose Labs · 0 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/castle.umd-DpX19jpb.jsAPI patterns only · 6 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/startup-dynamic-CLArY-jA.jsArkose Labs · 0 API patterns
  • https://abs.twimg.com/x-web/x-web/assets/use-jetfuel-dev-u0E4Nigt.jsArkose Labs · 0 API patterns
Network and worker observations 148 requests
Captured scripts
25
Instrumented frames
2
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • abs.twimg.com
  • api.x.com
  • o30969.ingest.us.sentry.io
  • x.com
Other recorded API calls 3
  • document.cookie.read44 calls
  • document.cookie.write4 calls
  • webrtc.RTCPeerConnection2 calls
Source record and integrity
Original source
results/headful/twitter-com-20261019T024655.json
Original file SHA-256
cc8c4537af69781841b758266bac5d7f5dde793221fcfb20177d413973b3790f

Run ID: headful-cc8c4537af69. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-23T00:09:28.126300Z
Browser / scanner
156.0.8078.4 / 0.4
CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://x.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 2 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • x.com
Source record and integrity
Original source
results/headless/twitter-com-20261023T000928.json
Original file SHA-256
1a19775857590fbafd18ab2f5f6f549a82fe209364738664cd3e2788fa304ca5

Run ID: research-1a1977585759. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned
CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 2 requests
Captured scripts
0
Instrumented frames
Not recorded
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • x.com
Source record and integrity
Original source
results/headless/twitter-com.json
Original file SHA-256
8132bf394bdf518019e187f32bf0a4abca8b1fe1da5f8014bc07c50cc17499c3

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-8132bf394bdf. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T01:15:44.463133Z
Browser / scanner
156.0.8078.4 / 0.3
CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://x.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.0 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

No matching API call was captured.

Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 2 requests
Captured scripts
0
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • x.com
Source record and integrity
Original source
results/headless/twitter-com-20261019T011544.json
Original file SHA-256
76011dbefc95c9181dd864ef6da57e1d069a8839f9b4b002dde1f9548dae90ef

Run ID: research-76011dbefc95. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-22T19:14:01.654239Z
Browser / scanner
156.0.8078.4 / 0.4
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/twitter-com-20261022T191401.json
Original file SHA-256
d1c89151d7aab7b81320747ffec63b97c251cce46aa276b86dda577f6d3647ac

Run ID: research-d1c89151d7aa. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →