Skip to main content

Website evidence · pilot dataset

Does wayfair.com fingerprint you?

Fingerprinting indicators observed.

The latest measured scans include canvas drawing and readback by the same script. Some activity was recorded on a challenge page. This is a fingerprinting indicator, not proof of tracking intent or transmission.

Open evidence JSON ↗

All 5 source records are included in the JSON. Scan timestamps and versions are shown as recorded. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: ObservedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Challenge page
Scan time
2026-10-22T17:02:27.812433Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleAccess to this page has been denied

CanvasDraws text and reads canvas output.9 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 67948
canvas.getContext1 calls
  • https://www.wayfair.com/[redacted-challenge]
canvas.getContext1 calls
  • https://www.wayfair.com/[redacted-challenge]
canvas.getContext1 calls
  • https://www.wayfair.com/[redacted-challenge]
canvas.getContext1 calls
  • https://www.wayfair.com/[redacted-challenge]
canvas.getContext1 calls
  • https://www.wayfair.com/[redacted-challenge]
canvas.getContext6 calls

Frame: https://www.wayfair.com/

  • Inline caller recorded
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139280
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 143763
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 187368
  • https://www.wayfair.com/[redacted-challenge]
canvas.toDataURL3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140017
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140624
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 143448
canvas2d.fillText220 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139959
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140499
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140566
WebGLQueries the graphics environment.6 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.readPixels1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 188205
webglrenderingcontext.getExtension2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141133
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141605
webglrenderingcontext.getParameter25 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141753
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 143847
webglrenderingcontext.getShaderPrecisionFormat12 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142523
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 143476
webglrenderingcontext.readPixels11 calls

Frame: https://www.wayfair.com/

  • https://www.wayfair.com/[redacted-challenge]
AudioRenders or reads audio samples.4 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createDynamicsCompressor1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 138221
audio.createOscillator1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 138115
audiobuffer.getChannelData500 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 138526
offlineaudio.startRendering1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 138416
FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.20 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169388
navigator.doNotTrack2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169298
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169319
navigator.hardwareConcurrency3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 170803
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174627
  • https://www.wayfair.com/[redacted-challenge]
navigator.language1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169188
navigator.languages5 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169248
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169411
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169425
  • https://www.wayfair.com/[redacted-challenge]
navigator.maxTouchPoints5 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 157501
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 157525
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171955
navigator.mimeTypes13 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 145208
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169652
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169665
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172786
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172799
navigator.platform2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169219
  • https://client.px-cloud.net/[redacted-challenge]line 4 · col 229760
navigator.plugins39 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 119843
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 153403
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 153417
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 153441
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 153461
navigator.userAgent1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174273
navigator.userAgent39 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 73527
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 73583
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 79055
  • https://client.px-cloud.net/[redacted-challenge]line 3 · col 9996
  • https://www.wayfair.com/[redacted-challenge]
navigator.webdriver1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174273
navigator.webdriver3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 145698
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 153122
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 184956
screen.availHeight1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 164813
screen.availWidth1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 164776
screen.colorDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 165062
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174597
screen.height2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 164740
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174804
screen.pixelDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 165008
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174713
screen.width2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 164701
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174770
window.devicePixelRatio2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174672
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 188594
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://client.px-cloud.net/[redacted-challenge]
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://assets.wfcdn.com/webpack/sf-ui-perimeterx-block/bundles/px.jsPerimeterX · 0 API patterns
  • https://client.px-cloud.net/[redacted-challenge]PerimeterX · 7 API patterns
  • https://www.wayfair.com/[redacted-challenge]PerimeterX · 0 API patterns
Network and worker observations 21 requests
Captured scripts
3
Instrumented frames
7
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • assets.wfcdn.com
  • client.px-cloud.net
  • collector-px3vk96i6i.px-client.net
  • collector-px3vk96i6i.px-cloud.net
  • crcldu.com
  • dvp.px-cloud.net
  • fonts.googleapis.com
  • fonts.gstatic.com
  • fst-ec.px-cloud.net
  • ift.px-cloud.net
Other recorded API calls 2
  • document.cookie.read38 calls
  • document.cookie.write7 calls
Source record and integrity
Original source
results/headful/wayfair-com-20261022T170227.json
Original file SHA-256
b7bd1a8c3497b0bec4566970595e9b64c8e26e3c1612fae5cb81d69b189be915

Run ID: headful-b7bd1a8c3497. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Visitor setup

Draw + readback

3 of 5 signal families observed

Canvas: ObservedWebGL: Not observedAudio: ObservedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Challenge page
Scan time
2026-10-21T22:36:58.250009Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleAccess to this page has been denied

CanvasDraws text and reads canvas output.3 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext6 calls

Frame: https://www.wayfair.com/

  • Inline caller recorded
  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140864
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 145294
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 191992
canvas.toDataURL3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141618
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142235
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144979
canvas2d.fillText220 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141560
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142092
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142167
WebGLQueries the graphics environment.3 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.readPixels1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 192810
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 145005
webglrenderingcontext.readPixels4 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
AudioRenders or reads audio samples.4 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createDynamicsCompressor1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139818
audio.createOscillator1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139712
audiobuffer.getChannelData500 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140121
offlineaudio.startRendering1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140011
FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.18 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171397
navigator.doNotTrack2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171296
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171317
navigator.hardwareConcurrency3 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172647
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178620
navigator.language1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171193
navigator.languages3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171238
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171430
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171444
navigator.maxTouchPoints5 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 158194
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 158218
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 175000
navigator.mimeTypes13 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 146673
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 146699
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 146715
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 146753
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177710
navigator.platform2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 171216
  • https://client.px-cloud.net/[redacted-challenge]line 4 · col 231478
navigator.plugins39 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 121408
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154242
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154256
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154279
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 154301
navigator.userAgent39 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 72742
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 72798
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 80310
  • https://client.px-cloud.net/[redacted-challenge]line 3 · col 9996
navigator.webdriver3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 147155
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 153993
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 189004
screen.availHeight1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166390
screen.availWidth1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166359
screen.colorDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166557
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178586
screen.height2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166329
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178833
screen.pixelDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166517
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178724
screen.width2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 166303
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178790
window.devicePixelRatio2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178671
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 193180
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://client.px-cloud.net/[redacted-challenge]
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://assets.wfcdn.com/webpack/sf-ui-perimeterx-block/bundles/px.jsPerimeterX · 0 API patterns
  • https://captcha.px-cloud.net/[redacted-challenge]PerimeterX · 0 API patterns
  • https://client.px-cloud.net/[redacted-challenge]PerimeterX · 8 API patterns
Network and worker observations 23 requests
Captured scripts
5
Instrumented frames
1
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • assets.wfcdn.com
  • captcha.px-cloud.net
  • client.px-cloud.net
  • collector-px3vk96i6i.px-client.net
  • collector-px3vk96i6i.px-cloud.net
  • crcldu.com
  • fonts.googleapis.com
  • fonts.gstatic.com
  • ift.px-cloud.net
Other recorded API calls 2
  • document.cookie.read24 calls
  • document.cookie.write5 calls
Source record and integrity
Original source
results/headful/wayfair-com-20261021T223658.json
Original file SHA-256
da306c76d1792ea678e452b44a031632b6bc00704580ac1be8f946a3dc2289ac

Run ID: headful-da306c76d179. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T17:02:26.665107Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/wayfair-com-20261022T170226.json
Original file SHA-256
f695eaaf9686f38e3e12cfc0c01e102714d6d560eeede53eec24daae1571c4ae

Run ID: headful-f695eaaf9686. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: ObservedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Challenge page
Scan time
2026-10-22T19:21:16.548190Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleAccess to this page has been denied

CanvasDraws text and reads canvas output.5 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 61952
canvas.getContext1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 61952
canvas.getContext6 calls

Frame: https://www.wayfair.com/

  • Inline caller recorded
  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142984
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 147462
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 191897
canvas.toDataURL3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 143724
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144331
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 147164
canvas2d.fillText220 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 143666
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144198
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144273
WebGLQueries the graphics environment.6 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.readPixels1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 192735
webglrenderingcontext.getExtension2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144839
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 145302
webglrenderingcontext.getParameter25 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 145487
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 147554
webglrenderingcontext.getShaderPrecisionFormat12 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 146220
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 147198
webglrenderingcontext.readPixels11 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
AudioRenders or reads audio samples.4 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createDynamicsCompressor1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141927
audio.createOscillator1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141821
audiobuffer.getChannelData500 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142226
offlineaudio.startRendering1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142116
FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.20 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172461
navigator.doNotTrack2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172366
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172386
navigator.hardwareConcurrency3 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 173870
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 179082
navigator.language1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172264
navigator.languages5 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172310
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172492
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172506
  • https://www.wayfair.com/[redacted-challenge]
navigator.maxTouchPoints5 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 160204
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 160228
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 175230
navigator.mimeTypes9 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 148885
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172713
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172726
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177435
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 177449
navigator.platform3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172287
  • https://client.px-cloud.net/[redacted-challenge]line 4 · col 229793
navigator.plugins19 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 124167
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 124509
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 124556
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 156366
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 156379
navigator.userAgent1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178670
navigator.userAgent41 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 70230
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 70286
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 80504
  • https://www.wayfair.com/[redacted-challenge]
navigator.webdriver1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 178670
navigator.webdriver3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 149378
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 156019
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 189523
screen.availHeight1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 168304
screen.availWidth1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 168273
screen.colorDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 168477
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 179052
screen.height2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 168246
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 179275
screen.pixelDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 168438
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 179183
screen.width2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 168219
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 179241
window.devicePixelRatio2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 179135
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 193071
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://client.px-cloud.net/[redacted-challenge]
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://assets.wfcdn.com/webpack/sf-ui-perimeterx-block/bundles/px.jsPerimeterX · 0 API patterns
  • https://captcha.px-cloud.net/[redacted-challenge]PerimeterX · 0 API patterns
  • https://client.px-cloud.net/[redacted-challenge]PerimeterX · 7 API patterns
  • https://www.wayfair.com/[redacted-challenge]PerimeterX · 0 API patterns
Network and worker observations 24 requests
Captured scripts
5
Instrumented frames
3
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • assets.wfcdn.com
  • captcha.px-cloud.net
  • client.px-cloud.net
  • collector-a.perimeterx.net
  • collector-px3vk96i6i.px-cloud.net
  • crcldu.com
  • dvp.px-cloud.net
  • fonts.googleapis.com
  • fonts.gstatic.com
  • fst-ec.px-cloud.net
  • ift.px-cloud.net
Other recorded API calls 2
  • document.cookie.read34 calls
  • document.cookie.write7 calls
Source record and integrity
Original source
results/headless/wayfair-com-20261022T192116.json
Original file SHA-256
afb7bd3f064c63b94411df196ae0b671e68310fc682105fc99b184a90608e8a8

Run ID: research-afb7bd3f064c. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (1)

Research setup

Draw + readback

4 of 5 signal families observed

Canvas: ObservedWebGL: ObservedAudio: ObservedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Challenge page
Scan time
2026-10-21T20:58:42.923061Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleAccess to this page has been denied

CanvasDraws text and reads canvas output.10 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 63563
canvas.getContext1 calls
  • https://captcha.px-cloud.net/[redacted-challenge]
canvas.getContext1 calls
  • https://captcha.px-cloud.net/[redacted-challenge]
canvas.getContext1 calls
  • https://captcha.px-cloud.net/[redacted-challenge]
canvas.getContext1 calls
  • https://captcha.px-cloud.net/[redacted-challenge]
canvas.getContext1 calls
  • https://captcha.px-cloud.net/[redacted-challenge]
canvas.getContext3 calls

Frame: https://crcldu.com/bd/sync.html

  • Inline caller recorded
  • https://crcldu.com/bd/auditor.js
canvas.getContext6 calls

Frame: https://www.wayfair.com/

  • Inline caller recorded
  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 138426
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142886
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 189802
canvas.toDataURL3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139172
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139784
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140840
canvas2d.fillText220 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139114
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139651
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 139726
WebGLQueries the graphics environment.9 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

webgl2renderingcontext.readPixels1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 190625
webglrenderingcontext.getExtension1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
webglrenderingcontext.getExtension2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141165
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141644
webglrenderingcontext.getParameter1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
webglrenderingcontext.getParameter25 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 141821
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142970
webglrenderingcontext.getShaderPrecisionFormat12 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 142581
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
webglrenderingcontext.getSupportedExtensions1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 140868
webglrenderingcontext.readPixels11 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
AudioRenders or reads audio samples.4 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

audio.createDynamicsCompressor1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 137378
audio.createOscillator1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 137272
audiobuffer.getChannelData500 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 137674
offlineaudio.startRendering1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 137578
FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.31 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.deviceMemory1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169536
navigator.doNotTrack2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169441
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169462
navigator.hardwareConcurrency3 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 170829
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176536
navigator.language1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
navigator.language1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169323
navigator.languages3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169377
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169570
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169583
navigator.maxTouchPoints1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
navigator.maxTouchPoints5 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 157325
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 157349
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 172530
navigator.mimeTypes9 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144382
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144408
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144424
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174841
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 174855
navigator.platform2 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
navigator.platform2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 169346
  • https://client.px-cloud.net/[redacted-challenge]line 4 · col 231516
navigator.plugins19 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 116568
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 116910
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 116959
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 152847
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 152859
navigator.userAgent1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176198
navigator.userAgent4 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
navigator.userAgent37 calls

Frame: https://www.wayfair.com/

  • https://captcha.px-cloud.net/[redacted-challenge]
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 69411
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 69466
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 75824
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 160874
navigator.webdriver1 calls
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176198
navigator.webdriver3 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 144871
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 152496
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 186798
screen.availHeight1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
screen.availHeight1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 163771
screen.availWidth1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
screen.availWidth1 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 163724
screen.colorDepth1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
screen.colorDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 164045
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176506
screen.height2 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
screen.height2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 163694
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176729
screen.pixelDepth1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
screen.pixelDepth2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 163990
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176637
screen.width1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
screen.width2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 163664
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176694
window.devicePixelRatio1 calls

Frame: https://crcldu.com/bd/sync.html

  • https://crcldu.com/bd/auditor.js
window.devicePixelRatio2 calls

Frame: https://www.wayfair.com/

  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 176589
  • https://client.px-cloud.net/[redacted-challenge]line 2 · col 191023
Scripts with both text drawing and canvas readback 1

These source URLs appear in both call groups. Aggregated logs do not preserve the full execution sequence or establish the purpose of the collection.

  • https://client.px-cloud.net/[redacted-challenge]
Providers, script signatures, and DNS 0 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

Static script signatures

  • https://assets.wfcdn.com/webpack/sf-ui-perimeterx-block/bundles/px.jsPerimeterX · 0 API patterns
  • https://captcha.px-cloud.net/[redacted-challenge]PerimeterX · 0 API patterns
  • https://client.px-cloud.net/[redacted-challenge]PerimeterX · 9 API patterns
Network and worker observations 23 requests
Captured scripts
5
Instrumented frames
8
Google Ads observed
No
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • assets.wfcdn.com
  • captcha.px-cloud.net
  • client.px-cloud.net
  • collector-px3vk96i6i.px-client.net
  • collector-px3vk96i6i.px-cloud.net
  • crcldu.com
  • dvp.px-cloud.net
  • fonts.googleapis.com
  • fonts.gstatic.com
  • fst-ec.px-cloud.net
  • ift.px-cloud.net
  • ri.px-cloud.net
Other recorded API calls 2
  • document.cookie.read29 calls
  • document.cookie.write7 calls
Source record and integrity
Original source
results/headless/wayfair-com-20261021T205842.json
Original file SHA-256
7e8e70f221f923af86c60f939dcaf39b82325a5539a156739037a750aa3408e8

Run ID: research-7e8e70f221f9. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →