Skip to main content

Website evidence · pilot dataset

Does wa.me fingerprint you?

No monitored fingerprinting signals observed in the latest measured scans.

No monitored signal family met its threshold in the latest measured scans. This limited visit does not establish that the site never fingerprints visitors. Earlier runs remain available below.

Open evidence JSON ↗

All 2 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Earlier measurement shown. Review the scan time and subsequent attempts below.

Visitor setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T01:35:05.665771Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleOpen WhatsApp

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://api.whatsapp.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.2 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language5 calls

Frame: https://api.whatsapp.com/

  • https://static.whatsapp.net/rsrc.php/v4/yA/r/2DIDUjbJt84.jsline 49 · col 2238
navigator.userAgent4 calls

Frame: https://api.whatsapp.com/

  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 37 · col 140
  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 37 · col 175
  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 286 · col 154
  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 340 · col 1656
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 21 requests
Captured scripts
10
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • api.whatsapp.com
  • chat
  • static.whatsapp.net
Source record and integrity
Original source
infrastructure/results/headful/wa-me-20261019T013505.json
Original file SHA-256
7e23ff82859bff9cef939d560c44b862e0d3a635bc89d150bfcb2a4060f00872

Run ID: headful-7e23ff82859b. The JSON contains sanitized observations, not the original private scan payload.

Earlier measurement shown. Review the scan time and subsequent attempts below.

Research setup

Not observed

0 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Not observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T01:26:32.942231Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleOpen WhatsApp

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://api.whatsapp.com/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.2 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language5 calls

Frame: https://api.whatsapp.com/

  • https://static.whatsapp.net/rsrc.php/v4/yA/r/2DIDUjbJt84.jsline 49 · col 2238
navigator.userAgent4 calls

Frame: https://api.whatsapp.com/

  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 37 · col 140
  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 37 · col 175
  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 286 · col 154
  • https://static.whatsapp.net/rsrc.php/v4/yS/r/jGJsW1yF_H8.jsline 340 · col 1656
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

No provider or DNS evidence in this record.

Network and worker observations 22 requests
Captured scripts
10
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • api.whatsapp.com
  • chat
  • static.whatsapp.net
Source record and integrity
Original source
infrastructure/results/headless/wa-me-20261019T012632.json
Original file SHA-256
e0068cd29789948d23413c2a97a398da992bd0a3bd309e22636aa1da4626e114

Run ID: research-e0068cd29789. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →