Website evidence · pilot dataset
Does usatoday.com fingerprint you?
Browser signals observed; fingerprinting is unconfirmed.
Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.
All 5 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗
Inside the scan
← All websitesVisitor setup
Signals observed
1 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- 2026-10-22T16:55:56.744413Z
- Browser / scanner
- 156.0.8078.4 / 0.4
Captured titleUSA TODAY - Breaking News and Latest News Today
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext1 callshttps://www.usatoday.com/line 57 · col 198
canvas.getContext1 callshttps://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 32 · col 220
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 callshttps://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 19 · col 278294
canvas.getContext1 callshttps://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 57 · col 5
canvas.getContext1 callshttps://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 308488
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 calls- Inline caller recorded
canvas.getContext1 callshttps://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 308488
canvas.getContext1 callshttps://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 308488
canvas.getContext1 callsFrame: https://767274b8ff0fccc8b679afc14e51d5b1.safeframe.googlesyndication.com/safeframe/1-0-45/html/container.html
- Inline caller recorded
canvas.getContext1 callsFrame: https://767274b8ff0fccc8b679afc14e51d5b1.safeframe.googlesyndication.com/safeframe/1-0-45/html/container.html
- Inline caller recorded
canvas.getContext1 callsFrame: https://cdn.taboola.com/scripts/prebid_iframe_sync.html
- Inline caller recorded
canvas.getContext1 callsFrame: https://cm.g.doubleclick.net/partnerpixels
- Inline caller recorded
canvas.getContext1 callsFrame: https://hbx.media.net/checksync.php
- Inline caller recorded
canvas.getContext1 callsFrame: https://www.usatoday.com/
- Inline caller recorded
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
navigator.deviceMemory9 callsFrame: https://www.usatoday.com/
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 318827https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 80 · col 104https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 172 · col 16
navigator.doNotTrack1 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 123 · col 78
navigator.language9 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 123 · col 114https://www.usatoday.com/gcdn/dcjs/prod/main.jsline 2 · col 202https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 172 · col 446https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 390 · col 74https://www.usatoday.com/uaxobl/line 1064 · col 208
navigator.languages1 callsFrame: https://www.usatoday.com/
https://cdn.taboola.com/libtrc/usatodaydemo/loader.jsline 1 · col 706205
navigator.maxTouchPoints2 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 3 · col 326https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 173 · col 91
navigator.platform2 callsFrame: https://www.usatoday.com/
https://cdn.taboola.com/libtrc/usatodaydemo/loader.jsline 1 · col 706529https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 173 · col 340
navigator.plugins1 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 25 · col 83
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent79 callshttps://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.jsline 134 · col 722
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent2 calls- Inline caller recorded
navigator.userAgent79 callshttps://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.jsline 134 · col 722
navigator.userAgent79 callshttps://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.jsline 134 · col 722
navigator.userAgent1 callsFrame: https://767274b8ff0fccc8b679afc14e51d5b1.safeframe.googlesyndication.com/safeframe/1-0-45/html/container.html
https://767274b8ff0fccc8b679afc14e51d5b1.safeframe.googlesyndication.com/safeframe/1-0-45/html/container.htmlline 17 · col 4169
navigator.userAgent1 callsFrame: https://hbx.media.net/checksync.php
https://hbx.media.net/checksync.php
navigator.userAgent220 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 3 · col 65https://www.usatoday.com/gcdn/dcjs/prod/main.jsline 13 · col 378https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 25 · col 54https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 329 · col 356https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 389 · col 70
navigator.webdriver3 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 22 · col 939https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 25 · col 297https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsline 25 · col 314
screen.availHeight8 callsFrame: https://www.usatoday.com/
https://cdn.taboola.com/libtrc/usatodaydemo/loader.jsline 1 · col 706459https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 318483
screen.availWidth8 callsFrame: https://www.usatoday.com/
https://cdn.taboola.com/libtrc/usatodaydemo/loader.jsline 1 · col 706443https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 318543
screen.colorDepth7 callsFrame: https://www.usatoday.com/
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 318602
screen.height41 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 11 · col 348https://www.usatoday.com/line 123 · col 58https://www.usatoday.com/gcdn/dcjs/prod/main.jsline 2 · col 202https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 266 · col 66https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 408 · col 398
screen.width41 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 11 · col 398https://www.usatoday.com/line 123 · col 47https://www.usatoday.com/gcdn/dcjs/prod/main.jsline 2 · col 202https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 266 · col 47https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 408 · col 372
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio1 calls- Inline caller recorded
window.devicePixelRatio32 callsFrame: https://www.usatoday.com/
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610190101/pubads_impl.jsline 23 · col 318651https://www.usatoday.com/line 11 · col 139https://www.usatoday.com/line 170 · col 141https://www.usatoday.com/gcdn/dcjs/prod/main.jsline 2 · col 202https://www.usatoday.com/tangstatic/js/pbjsandwichdirecta9-q1a2z3dff6494e.min.jsline 329 · col 33
Providers, script signatures, and DNS 3 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
- Google Ads767274b8ff0fccc8b679afc14e51d5b1.safeframe.googlesyndication.com, ad.doubleclick.net, cm.g.doubleclick.net, googleads.g.doubleclick.net, googleads4.g.doubleclick.net, pagead2.googlesyndication.com, securepubads.g.doubleclick.net, tpc.googlesyndication.com
- Google Analyticswww.google-analytics.com
- Google Tag Managerwww.googletagmanager.com
Static script signatures
https://www.usatoday.com/tangstatic/js/main-q1a2z3757e1aa5.min.jsDataDome · 1 API patterns
CNAME delegation
static.criteo.net → in-ftd-172.us5.vip.prod.criteo.com
DNS delegation identifies infrastructure; it does not prove which browser code ran.
Network and worker observations 639 requests
- Captured scripts
- 21
- Instrumented frames
- 22
- Google Ads observed
- Yes
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
767274b8ff0fccc8b679afc14e51d5b1.safeframe.googlesyndication.coma.teads.tva.tribalfusion.comab.dns-finder.comad-delivery.netad.doubleclick.netads.pubmatic.comap.lijit.combeacon.bidder.taboola.combtloader.comcdn.ampproject.orgcdn.api.btloader.comcdn.brandmetrics.comcdn.btloader.comcdn.confiant-integrations.netcdn.taboola.comcdn.undertone.comch-trc-events.taboola.comclient.aps.amazon-adsystem.comcm.g.doubleclick.netconfig.aps.amazon-adsystem.comconnectid.analytics.yahoo.comcrb.kargo.comcs.media.netdeeperdive.aidis.criteo.comdisplay.bidder.taboola.comdsum-sec.casalemedia.comeb2.3lift.comep2.adtrafficquality.googleexbd.ex.cofonts.googleapis.comgannett-player.ex.cogoogleads.g.doubleclick.netgoogleads4.g.doubleclick.netgrid-bidder.criteo.comgum.criteo.comhbx.media.nethp.taboola.comib.adnxs.comimages.taboola.comjadserve.postrelease.commatch.adsrvr.orgmatch.sharethrough.commetrics.getrockerbox.compagead2.googlesyndication.compbs-cs.minutemedia-prebid.compixel.adsafeprotected.compixel.rubiconproject.compm-widget.taboola.comreporting-api.gannettinnovation.comrtb.adentifi.coms.ad.smaato.nets.seedtag.coms0.2mdn.netsb.scorecardresearch.comsecurepubads.g.doubleclick.netssp.api.tappx.comssum-sec.casalemedia.comstatic.adsafeprotected.comstatic.cdn.trustx.orgstatic.criteo.netstatic.polarcdn.comstrandedgame.comsync.1rx.iosync.colossusssp.comtag.simpli.fitpc.googlesyndication.comtr.blismedia.comtraxex.gannettdigital.comtrc.taboola.comtsdtocl.comu.openx.netups.analytics.yahoo.comvidstat.taboola.comwww.google-analytics.comwww.google.comwww.googletagmanager.com
Other recorded API calls 3
document.cookie.read3 callsdocument.cookie.read27 callsdocument.cookie.write6 calls
Source record and integrity
- Original source
results/headful/usatoday-com-20261022T165556.json- Original file SHA-256
e5c66b36ca64aa2183b7e1ceabc90b813948aa51ec965da305b9400a7ead8e19
Run ID: headful-e5c66b36ca64. The JSON contains sanitized observations, not the original private scan payload.
Other scan attempts (2)
Visitor setup
Signals observed
1 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- 2026-10-21T22:19:56.553345Z
- Browser / scanner
- 156.0.8078.4 / 0.3
Captured titleUSA TODAY - Breaking News and Latest News Today
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext1 callsFrame: https://www.usatoday.com/
- Inline caller recorded
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
navigator.doNotTrack1 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 123 · col 78
navigator.language1 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 123 · col 114
navigator.maxTouchPoints1 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 3 · col 347
navigator.userAgent79 callsFrame: https://www.usatoday.com/
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610160101/pubads_impl.jsline 19 · col 3841https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610160101/pubads_impl.jsline 19 · col 166744https://securepubads.g.doubleclick.net/tag/js/gpt.jsline 6 · col 1336https://securepubads.g.doubleclick.net/tag/js/gpt.jsline 11 · col 33529https://www.usatoday.com/line 3 · col 65
navigator.webdriver1 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 22 · col 939
screen.height14 callsFrame: https://www.usatoday.com/
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610160101/pubads_impl.jsline 19 · col 166679https://static.adsafeprotected.com/publisher/922805/e8d59411-27ac-11f1-aa09-0e6958f30139.min.jsline 1 · col 6769https://www.usatoday.com/line 11 · col 348https://www.usatoday.com/line 123 · col 58
screen.width14 callsFrame: https://www.usatoday.com/
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610160101/pubads_impl.jsline 19 · col 166661https://static.adsafeprotected.com/publisher/922805/e8d59411-27ac-11f1-aa09-0e6958f30139.min.jsline 1 · col 6734https://www.usatoday.com/line 11 · col 398https://www.usatoday.com/line 123 · col 47
window.devicePixelRatio10 callsFrame: https://www.usatoday.com/
https://www.usatoday.com/line 11 · col 139https://www.usatoday.com/line 173 · col 141
Providers, script signatures, and DNS 1 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
- Google Adssecurepubads.g.doubleclick.net
Network and worker observations 40 requests
- Captured scripts
- 8
- Instrumented frames
- 1
- Google Ads observed
- Yes
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
c.amazon-adsystem.comcdn.brandmetrics.comcdn.confiant-integrations.netcdn.taboola.comclient.aps.amazon-adsystem.comconfig.aps.amazon-adsystem.comexbd.ex.cogum.criteo.commatch.adsrvr.orgmug.criteo.comphx.bmtrcs.compixel.adsafeprotected.comsecure.cdn.fastclick.netsecurepubads.g.doubleclick.netstatic.adsafeprotected.comweb-banner.ads.aps.amazon-adsystem.com
Other recorded API calls 1
document.cookie.read3 calls
Source record and integrity
- Original source
results/headful/usatoday-com-20261021T221956.json- Original file SHA-256
c9086ea61a15911416c5aca55e0560da649636b1110442f0ce0e346f45eb147f
Run ID: headful-c9086ea61a15. The JSON contains sanitized observations, not the original private scan payload.
Visitor setup
Scanner error
Scanner error
- Measurement
- Scanner error
- Page context
- Page not measured
- Scan time
- 2026-10-22T16:55:55.874296Z
- Browser / scanner
- 156.0.8078.4 / 0.4
The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.
Source record and integrity
- Original source
results/headful/usatoday-com-20261022T165555.json- Original file SHA-256
97b01262fbbe4d43d8ead400c0acb6a617339fabcdcb04fad57588d43a3d3a69
Run ID: headful-97b01262fbbe. The JSON contains sanitized observations, not the original private scan payload.
Research setup
Not observed
0 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- 2026-10-22T19:16:35.916708Z
- Browser / scanner
- 156.0.8078.4 / 0.4
Captured titleAccess Restricted
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext1 callsFrame: https://www.usatoday.com/
- Inline caller recorded
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
No matching API call was captured.
Providers, script signatures, and DNS 0 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
No provider or DNS evidence in this record.
Network and worker observations 2 requests
- Captured scripts
- 0
- Instrumented frames
- 1
- Google Ads observed
- No
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
Source record and integrity
- Original source
results/headless/usatoday-com-20261022T191635.json- Original file SHA-256
95703400b7249d456e6c172356e604a2b621dd228dadbbf45377d499644071c1
Run ID: research-95703400b724. The JSON contains sanitized observations, not the original private scan payload.
Other scan attempts (1)
Research setup
Not observed
0 of 5 signal families observed
- Measurement
- Measured
- Page context
- Page document
- Scan time
- 2026-10-21T20:48:00.195959Z
- Browser / scanner
- 156.0.8078.4 / 0.3
Captured titleAccess Restricted
CanvasDraws text and reads canvas output.
Observed requires a text-drawing API and a canvas readback API. Guide ↗
canvas.getContext1 callsFrame: https://www.usatoday.com/
- Inline caller recorded
WebGLQueries the graphics environment.
Observed requires at least three distinct WebGL probing APIs. Guide ↗
No matching API call was captured.
AudioRenders or reads audio samples.
Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗
No matching API call was captured.
FontsMeasures text repeatedly.
Observed requires at least ten text-measurement calls. Guide ↗
No matching API call was captured.
DeviceReads browser and display properties.
Observed requires at least three distinct browser, screen, or window properties. Guide ↗
No matching API call was captured.
Providers, script signatures, and DNS 0 provider labels
Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.
No provider or DNS evidence in this record.
Network and worker observations 2 requests
- Captured scripts
- 0
- Instrumented frames
- 1
- Google Ads observed
- No
- Transmission evidence
- Not validated
Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.
Third-party hosts
Source record and integrity
- Original source
results/headless/usatoday-com-20261021T204800.json- Original file SHA-256
7e325c8dbda215a55b9ba836d461850a10f81da01a715ae4373158067230a43e
Run ID: research-7e325c8dbda2. The JSON contains sanitized observations, not the original private scan payload.
Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.
Read the sanitized JSON →