Skip to main content

Website evidence · pilot dataset

Does wordpress.org fingerprint you?

Browser signals observed; fingerprinting is unconfirmed.

Browser API activity met a monitored signal threshold in the latest measured scans. The activity alone does not establish a tracking purpose.

Open evidence JSON ↗

All 7 source records are included in the JSON. 2 older runs have no recorded timestamp; missing provenance stays unknown. The tabs show the latest usable homepage measurement for each setup. Later failed attempts remain in the history. Scan scope and methodology ↗

Inside the scan

← All websites

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T17:15:00.543724Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleBlog Tool, Publishing Platform, and CMS – WordPress.org

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://wordpress.org/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
navigator.userAgent66 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
  • https://www.googletagmanager.com/gtm.js
screen.height2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
screen.width2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsstats.g.doubleclick.net
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 49 requests
Captured scripts
8
Instrumented frames
1
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • analytics.google.com
  • i0.wp.com
  • pixel.wp.com
  • stats.g.doubleclick.net
  • stats.wp.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read27 calls
  • document.cookie.write5 calls
Source record and integrity
Original source
results/headful/wordpress-org-20261022T171500.json
Original file SHA-256
d7108d665afda179f5c23e05facdacfb86fad44705062efd149d98b9f8cee15a

Run ID: headful-d7108d665afd. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (3)

Visitor setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headful/wordpress-org.json
Original file SHA-256
7bfa9ee4e722201544c9615fbd4ce689f6a8f28d33eb486837b2e28ad80ff3a5

Run ID: headful-7bfa9ee4e722. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
2026-10-19T01:20:47.137399Z
Browser / scanner
156.0.8078.4 / 0.3

Captured titleBlog Tool, Publishing Platform, and CMS – WordPress.org

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://wordpress.org/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
navigator.userAgent66 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
  • https://www.googletagmanager.com/gtm.js
screen.height2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
screen.width2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsstats.g.doubleclick.net
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 50 requests
Captured scripts
9
Instrumented frames
1
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • analytics.google.com
  • i0.wp.com
  • pixel.wp.com
  • s.w.org
  • stats.g.doubleclick.net
  • stats.wp.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read27 calls
  • document.cookie.write5 calls
Source record and integrity
Original source
results/headful/wordpress-org-20261019T012047.json
Original file SHA-256
a261cc542a02710d04b5067f776b19a5e977d5ff0289ed1e401d9654c513e59c

Run ID: headful-a261cc542a02. The JSON contains sanitized observations, not the original private scan payload.

Visitor setup

Scanner error

Scanner error

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Scanner error
Page context
Page not measured
Scan time
2026-10-22T17:14:59.813706Z
Browser / scanner
156.0.8078.4 / 0.4
Scanner error — no usable scan result

The scanner crashed while collecting this page. No usable API results were saved for this setup. A fresh scan is needed; this is not a site-blocking verdict.

Source record and integrity
Original source
results/headful/wordpress-org-20261022T171459.json
Original file SHA-256
413320340008a5a70171132c33ec8ca42189eb1f798bb1656bb8734b15b32775

Run ID: headful-413320340008. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured · Partial load
Page context
Page document
Scan time
2026-10-22T19:31:19.271197Z
Browser / scanner
156.0.8078.4 / 0.4

Captured titleBlog Tool, Publishing Platform, and CMS – WordPress.org

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls

Frame: https://wordpress.org/

  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
navigator.userAgent64 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
  • https://www.googletagmanager.com/gtm.js
screen.height2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
screen.width2 calls

Frame: https://wordpress.org/

  • https://www.googletagmanager.com/gtag/js
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsstats.g.doubleclick.net
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 49 requests
Captured scripts
9
Instrumented frames
1
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • analytics.google.com
  • i0.wp.com
  • pixel.wp.com
  • stats.g.doubleclick.net
  • stats.wp.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read27 calls
  • document.cookie.write5 calls
Source record and integrity
Original source
results/headless/wordpress-org-20261022T193119.json
Original file SHA-256
b72fca131191ec4ba604e286735de3e1529876f50487b5332d7b85caf7ba9b1f

Run ID: research-b72fca131191. The JSON contains sanitized observations, not the original private scan payload.

Other scan attempts (2)

Research setup

Signals observed

1 of 5 signal families observed

Canvas: Not observedWebGL: Not observedAudio: Not observedFonts: Not observedDevice: Observed
Measurement
Measured
Page context
Page document
Scan time
Not recorded
Browser / scanner
Unknown browser / Unversioned

Captured titleBlog Tool, Publishing Platform, and CMS – WordPress.org

CanvasDraws text and reads canvas output.1 API entries

Observed requires a text-drawing API and a canvas readback API. Guide ↗

canvas.getContext1 calls
  • Inline caller recorded
WebGLQueries the graphics environment.0 API entries

Observed requires at least three distinct WebGL probing APIs. Guide ↗

No matching API call was captured.

AudioRenders or reads audio samples.0 API entries

Observed requires offline rendering, buffer reads, or analyser reads. Guide ↗

No matching API call was captured.

FontsMeasures text repeatedly.0 API entries

Observed requires at least ten text-measurement calls. Guide ↗

No matching API call was captured.

DeviceReads browser and display properties.4 API entries

Observed requires at least three distinct browser, screen, or window properties. Guide ↗

navigator.language2 calls
  • https://www.googletagmanager.com/gtag/js
navigator.userAgent64 calls
  • https://www.googletagmanager.com/gtag/js
  • https://www.googletagmanager.com/gtm.js
screen.height2 calls
  • https://www.googletagmanager.com/gtag/js
screen.width2 calls
  • https://www.googletagmanager.com/gtag/js
Providers, script signatures, and DNS 2 provider labels

Provider labels and static signatures are scanner observations. A library-name match does not establish that its code executed.

  • Google Adsstats.g.doubleclick.net
  • Google Tag Managerwww.googletagmanager.com
Network and worker observations 49 requests
Captured scripts
9
Instrumented frames
Not recorded
Google Ads observed
Yes
Transmission evidence
Not validated

Legacy transmission hints are excluded. A request after an API call does not establish that the extracted value was sent.

Third-party hosts

  • analytics.google.com
  • i0.wp.com
  • pixel.wp.com
  • stats.g.doubleclick.net
  • stats.wp.com
  • www.googletagmanager.com
Other recorded API calls 2
  • document.cookie.read27 calls
  • document.cookie.write5 calls
Source record and integrity
Original source
results/headless/wordpress-org.json
Original file SHA-256
88e2375f12f52f9ebf5ad495e0160fde6e8d49edae7af787a4ae19b2445c9a99

The research mode is inferred from the archive folder because this legacy record has no mode field.

Run ID: research-88e2375f12f5. The JSON contains sanitized observations, not the original private scan payload.

Research setup

Navigation failed

Navigation failed

Canvas: UnmeasuredWebGL: UnmeasuredAudio: UnmeasuredFonts: UnmeasuredDevice: Unmeasured
Measurement
Navigation failed
Page context
Page not measured
Scan time
2026-10-19T06:01:31.756144Z
Browser / scanner
156.0.8078.4 / 0.3
Navigation failed — no usable scan result

Navigation or page loading failed in this browser setup. The record does not establish why it failed.

Source record and integrity
Original source
results/headless/wordpress-org-20261019T060131.json
Original file SHA-256
28d0aae9009a48e3a5fbd6aff6bc4976279e3deb34d283a16ffc0a86c4c113c2

Run ID: research-28d0aae9009a. The JSON contains sanitized observations, not the original private scan payload.

Queries, request bodies, cookies, extracted values, raw errors, and session payloads are excluded before publication. The source digest identifies the original private record.

Read the sanitized JSON →