Website evidence · pilot dataset

Does washingtonpost.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. One browser setup is unmeasured or missing. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 14 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Draw + readback

2 of 5 signal families observed

Measurement: Measured
Page context: Page document
Scan time: 2026-10-22T17:01:16.677739Z
Browser / scanner: 156.0.8078.4 / 0.4

Captured titleThe Washington Post - Breaking news and latest headlines, U.S. news, world news, and video

CanvasDraws text and reads canvas output.10 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

https://www.washingtonpost.com/zeus/main.jsline 7 · col 78436

canvas.getContext1 calls

https://www.washingtonpost.com/line 210 · col 1098

canvas.getContext1 calls

https://www.washingtonpost.com/subscribe/privacy-fe-api/privacy-fe-api.min.jsline 1 · col 2864

canvas.getContext1 calls

https://www.washingtonpost.com/line 210 · col 1098

canvas.getContext1 calls

Inline caller recorded

canvas.getContext1 calls

Frame: https://news.google.com/swg/ui/v1/serviceiframe

Inline caller recorded

canvas.getContext3 calls

Frame: https://www.washingtonpost.com/

Inline caller recorded
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 1272
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 5996

canvas.toDataURL1 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 6233

canvas2d.fillText2 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 6062
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 6206

canvas2d.getImageData1 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 1338

WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.20 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.doNotTrack2 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 507
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 517

navigator.getBattery1 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 1049

navigator.hardwareConcurrency2 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 507
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 517

navigator.language11 calls

Frame: https://www.washingtonpost.com/

https://ny77jj.washingtonpost.com/lrnojf.jsline 1 · col 40684
https://www.googletagmanager.com/gtag/js
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 507
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 517
https://www.washingtonpost.com/assembler/_next/static/chunks/pages/_app-fc15cb594b06fb8f.jsline 6 · col 138834

navigator.languages2 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 507
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 517

navigator.maxTouchPoints7 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 507
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 517
https://www.washingtonpost.com/assembler/_next/static/chunks/7898.65a773b1169a037b.jsline 1 · col 8556

navigator.platform3 calls

Frame: https://www.washingtonpost.com/

https://ny77jj.washingtonpost.com/lrnojf.jsline 1 · col 55735
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 507
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 517

navigator.plugins8 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 147
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 4232

navigator.userAgent69 calls

Frame: https://news.google.com/swg/ui/v1/serviceiframe

https://www.gstatic.com/_/mss/boq-subscribewithgoogle/_/js/[redacted-id]/[redacted-id]
https://www.gstatic.com/_/mss/boq-subscribewithgoogle/_/js/[redacted-id]/am=AAAAACAD/d=1/[redacted-id]/ed=1/dg=0/wt=2/u

navigator.userAgent304 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/assembler/_next/static/chunks/1675-fc704a31bc2ce674.jsline 175 · col 137442
https://www.washingtonpost.com/assembler/_next/static/chunks/3858-eb18a33e3efffeaf.jsline 1 · col 133958
https://www.washingtonpost.com/zeus/main.jsline 7 · col 201880
https://www.washingtonpost.com/zeus/main.jsline 7 · col 385024
https://www.washingtonpost.com/zeus/main.jsline 7 · col 391429

navigator.webdriver2 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 507
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 517

screen.availHeight2 calls

Frame: https://www.washingtonpost.com/

https://ny77jj.washingtonpost.com/lrnojf.jsline 1 · col 56221
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 6980

screen.availWidth2 calls

Frame: https://www.washingtonpost.com/

https://ny77jj.washingtonpost.com/lrnojf.jsline 1 · col 56062
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 6797

screen.colorDepth2 calls

Frame: https://www.washingtonpost.com/

https://ny77jj.washingtonpost.com/lrnojf.jsline 1 · col 27237
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 7089

screen.height1 calls

Frame: https://news.google.com/swg/ui/v1/serviceiframe

https://www.gstatic.com/_/mss/boq-subscribewithgoogle/_/js/[redacted-id]/[redacted-id]

screen.height12 calls

Frame: https://www.washingtonpost.com/

https://ny77jj.washingtonpost.com/lrnojf.jsline 1 · col 20443
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610200101/pubads_impl.js
https://www.googletagmanager.com/gtag/js
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 7012

screen.pixelDepth1 calls

Frame: https://www.washingtonpost.com/

https://www.washingtonpost.com/akam/13/672a467eline 2 · col 7110

screen.width1 calls

Frame: https://news.google.com/swg/ui/v1/serviceiframe

https://www.gstatic.com/_/mss/boq-subscribewithgoogle/_/js/[redacted-id]/[redacted-id]

screen.width12 calls

Frame: https://www.washingtonpost.com/

https://ny77jj.washingtonpost.com/lrnojf.jsline 1 · col 20209
https://securepubads.g.doubleclick.net/pagead/managed/js/gpt/m202610200101/pubads_impl.js
https://www.googletagmanager.com/gtag/js
https://www.washingtonpost.com/akam/13/672a467eline 2 · col 6809

window.devicePixelRatio3 calls

Frame: https://news.google.com/swg/ui/v1/serviceiframe

https://www.gstatic.com/_/mss/boq-subscribewithgoogle/_/js/[redacted-id]/[redacted-id]

Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

https://www.washingtonpost.com/akam/13/672a467e

Providers, script signatures, and DNS 4 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Chartbeat (analytics)static.chartbeat.com
Google Adssecurepubads.g.doubleclick.net, stats.g.doubleclick.net
Google Tag Managerwww.googletagmanager.com
Permutive (audience platform)5f1f2661-22d4-401c-9c10-4d7647fb6edc.edge.permutive.app, api.permutive.app, cdn.permutive.app

Network and worker observations 241 requests

Captured scripts: 32
Instrumented frames: 7
Google Ads observed: Yes
Transmission evidence: Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

5f1f2661-22d4-401c-9c10-4d7647fb6edc.edge.permutive.app
accounts.google.com
analytics.google.com
api.permutive.app
c.amazon-adsystem.com
cdn.brandmetrics.com
cdn.cookielaw.org
cdn.permutive.app
d1inu1l3wof1ku.cloudfront.net
d3celq77losjk8.cloudfront.net
ib.adnxs.com
match.adsrvr.org
news.google.com
orca.zeustechnology.com
play.google.com
prebid.outcomes.net
pub.dv.tech
rumcdn.geoedge.be
s.go-mpulse.net
sb.scorecardresearch.com
securepubads.g.doubleclick.net
sponsorship-lines.zeustechnology.com
static.chartbeat.com
stats.g.doubleclick.net
unpkg.com
vi.ml314.com
www.google.com
www.googletagmanager.com
www.gstatic.com

Other recorded API calls 4

document.cookie.read14 calls
document.cookie.read1940 calls
document.cookie.write1 calls
document.cookie.write104 calls

Source record and integrity

Original source: results/headful/washingtonpost-com-20261022T170116.json
Original file SHA-256: 98ee88a2da57aacda556ec694c0f6f2c3512b7b304967a5c243edbde0e972fa4

Run ID: headful-98ee88a2da57. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: Not recorded
Browser / scanner: Unknown browser / Unversioned

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headful/washingtonpost-com.json
Original file SHA-256: 29bbd17522969893a1b6c718a4fb98106b0f75fc6470047ceb90e0b1aa249a24

Run ID: headful-29bbd1752296. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-19T06:17:33.731898Z
Browser / scanner: 156.0.8078.4 / 0.3

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headful/washingtonpost-com-20261019T061733.json
Original file SHA-256: 7fce19ff6ca148d03f4d6f1c263da9d05caaf0e10f68fa71d288385751cba6b5

Run ID: headful-7fce19ff6ca1. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Measurement: Scanner error
Page context: Page not measured
Scan time: 2026-10-22T17:01:15.302098Z
Browser / scanner: 156.0.8078.4 / 0.4

Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity

Original source: results/headful/washingtonpost-com-20261022T170115.json
Original file SHA-256: 1915b5581c0409082774c89e3a113cad97ace5d94ea37287a13630d5680a46b6

Run ID: headful-1915b5581c04. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-23T01:30:46.497443Z
Browser / scanner: 156.0.8078.4 / 0.4

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261023T013046.json
Original file SHA-256: 9539fee4870ee9b85c231f3c561c123f4c253c3646d825c82b965668ce7180c3

Run ID: research-9539fee4870e. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (9)

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: Not recorded
Browser / scanner: Unknown browser / Unversioned

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com.json
Original file SHA-256: d052cb0db4579400270c755599bc79099093b153ad57631d2d6b060464492e40

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-d052cb0db457. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-19T06:00:30.217483Z
Browser / scanner: 156.0.8078.4 / 0.3

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261019T060030.json
Original file SHA-256: b861fc4c0fb1b8705f5b147d430c82b337e9a0b6abbb6a6205481ffa81f0f05f

Run ID: research-b861fc4c0fb1. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-19T06:03:36.598692Z
Browser / scanner: 156.0.8078.4 / 0.3

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261019T060336.json
Original file SHA-256: b6d844cf12c043aaea12e74f8cfdbcace2ba149e31fcd8500d8916c270b38c9e

Run ID: research-b6d844cf12c0. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-22T19:20:52.474667Z
Browser / scanner: 156.0.8078.4 / 0.4

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261022T192052.json
Original file SHA-256: 2427d6c91c28d2e80a5b963cfe3da73488e79b1aa6fecaf0be2a65423faf09ac

Run ID: research-2427d6c91c28. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-23T00:16:08.669199Z
Browser / scanner: 156.0.8078.4 / 0.4

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261023T001608.json
Original file SHA-256: 6a5b41280ac73bf999efbb609b8791c31561556420cfcc82efa325893ea53bea

Run ID: research-6a5b41280ac7. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-23T00:34:38.871283Z
Browser / scanner: 156.0.8078.4 / 0.4

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261023T003438.json
Original file SHA-256: 3dd8f392d1d409989e7401b0f8c1da263797da73682b64db0257b3d5dfe5afa9

Run ID: research-3dd8f392d1d4. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-23T00:45:53.179166Z
Browser / scanner: 156.0.8078.4 / 0.4

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261023T004553.json
Original file SHA-256: 641c9b6bb0c2b1366b033c18cb2f498b46d1f59ddfeafd1d9dfa3fec8d609117

Run ID: research-641c9b6bb0c2. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Scanner error

Measurement: Scanner error
Page context: Page not measured
Scan time: 2026-10-23T01:16:25.921215Z
Browser / scanner: 156.0.8078.4 / 0.4

Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261023T011625.json
Original file SHA-256: 20441e04bf5bcb38aea9009a9ba0fb9284814fd8e7e03d362ac4aa589ede79fc

Run ID: research-20441e04bf5b. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Measurement: Navigation failed
Page context: Page not measured
Scan time: 2026-10-23T01:16:26.036739Z
Browser / scanner: 156.0.8078.4 / 0.4

Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity

Original source: results/headless/washingtonpost-com-20261023T011626.json
Original file SHA-256: 6c41ea9f49f7bc7463747d4f83bbd146415b364c2e122c97228f2fb13e870e2b

Run ID: research-6c41ea9f49f7. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →

Browser fingerprinting guides

Demos

Self-led privacy

Use cases

Software

Audits

Training

Does washingtonpost.com fingerprint you?

Inside the scan

Draw + readback

Third-party hosts

Navigation failed

Navigation failed

Scanner error

Navigation failed

Navigation failed

Navigation failed

Navigation failed

Navigation failed

Navigation failed

Navigation failed

Navigation failed

Scanner error

Navigation failed