Browser Fingerprint Behavior Auditor

What does Browser Fingerprint Behavior Auditor do?

Example: Browser Fingerprint Behavior Auditor · https://fingerprint.com/demo/

Try it: Press Start on the prefilled input below — defaults are ready for a first run.

Field	What you get
httpStatus	403
path	cookie_wall
confidence	high
agent	{jsRan: true, webdriverRead: true, botCookieNames: _pxhd, _pxvid, _px...
vendors	perimeterx
host	example.com
url	https://example.com/item/123
librariesDetected	item-a, item-b
fingerprintScore	4.6
do	item-a, item-b
dont	item-a, item-b
nextSteps	item-a, item-b
verdict	Example verdict
categories	Example categories
elapsedMs	95
finalUrl	https://example.com/item/123
title	Example jacket
ok	true
eventCount	128
uniqueApis	Example unique Apis
topApis	item-a, item-b
topScripts	item-a, item-b
canvasSamples	item-a, item-b
canvasFillTexts	item-a, item-b
reportMarkdown	Example report Markdown
auditedAt	2026-09-24T12:00:00.000Z

Cost: Apify’s Free plan includes monthly platform credit. Open this Actor’s Pricing tab for current pay-per-event rates (no guesswork in the README).

Press Start. The example is already filled in.

Paste a URL that 403s or feels fingerprinted. The Actor opens it in Chromium, hooks fingerprinting Web APIs before page scripts run, watches bot collectors / cookies, and returns a dual output:

1. Human report — KV REPORT.md (Verdict · Do · Don't · Evidence · Catalog candidates)
2. Agent / MCP plan — dataset field agent (and flat path / do / dont / nextSteps). Switch on path; do not parse the prose.

Paths: ignore_for_scraping · blocked_before_js · interactive_challenge · cookie_wall · browser_then_find_api · try_tls_client

Observation only. This is a recon / reverse-engineering aid — not a bypass tool. Unofficial; not affiliated with FingerprintJS, PerimeterX, Akamai, DataDome, Cloudflare, or any anti-bot vendor.

How to fill the form (first run)

Field	What to enter
Page URLs to audit	Leave the FingerprintJS demo for a sample, or paste HTTPS URLs that 403 / feel fingerprinted
Wait after page load	Default 5000 ms — increase if scripts load slowly
Max API hook events	Default 2500 — lower only if the run feels too heavy
Save full event log	Off for normal use; on when you need raw hook output in KV
Max URL results	1 for smoke; raise when auditing multiple pages
Proxy	Leave default (off) unless you need Apify datacenter egress

How to run

1. Open this Actor in Apify Console.
2. Click Start on the prefilled FingerprintJS demo (or paste your own URLs).
3. Read the dataset row (path, agent, do / dont) and open KV REPORT.md for the human write-up.
4. Export JSON/CSV via the Apify API.

{
  "urls": ["https://fingerprint.com/demo/"],
  "waitMs": 5000,
  "maxEvents": 2500,
  "includeEvents": false,
  "maxItems": 1
}

Sample output (agent fields)

{
  "path": "cookie_wall",
  "confidence": "high",
  "vendors": ["perimeterx"],
  "httpStatus": 403,
  "agent": {
    "jsRan": true,
    "webdriverRead": true,
    "botCookieNames": ["_pxhd", "_pxvid", "_px2"],
    "sensor": {
      "method": "POST",
      "url": "https://example.com/…/xhr/assets/js/bundle",
      "fieldNames": ["payload", "appId", "pxhd"]
    },
    "do": ["Record bot vendor, cookie names, and sensor field names"],
    "dont": ["Clone canvas/WebGL to beat the wall"],
    "nextSteps": ["browser_session_then_sniff_catalog_xhr"]
  }
}

How much does it cost?

Pay per event (PPE): Actor start + each result row (one URL audit). See the Pricing tab. Browser runs use ~2 GB memory — price covers platform usage.

Related Actors

Actor	When to use
GEO & AI Agent Readiness Audit	Site readiness scores + keep/change/missing report
Chrome Extension Permission Diff Monitor	CRX permission baselines and diffs
SSL Certificate Expiry Monitor	TLS expiry / issuer checks

Export to Power BI, Tableau, Looker Studio & Qlik

Use the dataset items API URL from the run. Authenticate with your Apify API token.

FAQ

Is this a bot bypass?

No. It reports what the page probed and which bot vendor/cookies/sensors appeared. It does not solve challenges or forge cookies.

Can AI agents use the output?

Yes. Switch on agent.path and follow do / dont / stopConditions. Full markdown stays in REPORT.md for humans.

Dashboards: connect Power BI, Tableau, Looker Studio, or Qlik to the dataset API. AI agents: paste this Actor’s Store page URL into an Apify-capable agent (MCP / Claude / Cursor with Apify).