Why a three-layer classifier—signatures, open tracker lists, and heuristics—keeps scan evidence useful as the tracker ecosystem grows.
EngineeringTrackers
Layer 1: brand-quality signatures
Hand-curated needles map hosts and paths to product names. They stay first in the pipeline so reports stay readable for remediation owners.
Layer 2: open tracker radar domains
A versioned offline extract from DuckDuckGo Tracker Radar expands coverage across thousands of domains without calling external APIs at scan time.
Layer 3: unknown third-party review
Novel script hosts that miss both layers surface as medium-severity manual review items. That keeps novel trackers visible without auto-failing every CDN request.
