ua-tracer by Paul Kinlan

trace 0OWw8Ppd

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace 0OWw8Ppd

First seen: 2026-07-03 14:48:39.753 UTC
User-Agent: Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✗ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-03 14:48:39.753 UTC +0 ms homepage GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "deflate, gzip, br, zstd",
  "host": "uatracer.com",
  "signature": "sig=:r6f3GuzZaGFidvtJ5FyoaHJjZeX8PoRP4hyN2ogyP9SVfd2vt2v4GBvZmxpqkn95t1ONrz7Yr2S8uPSgPMZSCA==:",
  "signature-agent": "\"https://ahrefs.com\"",
  "signature-input": "sig=(\"@authority\" \"signature-agent\");created=1783090119;keyid=\"e3vpiy0B6M1Wdxnizw3dqRSgpqS6SXM2qiQ6HtUwZ5g\";alg=\"ed25519\";expires=1783090179;nonce=\"BJNrjgUMAxR13byTBM2Gr_8OwqJ7c-SS2QsDbN7kPG1i28dhPT_D4ZqICqs5FsnoukHHUHRLjQ3xh00uIaIf9Q\";tag=\"web-bot-auth\"",
  "traceparent": "00-f9a3dd2984820b193451bbdaa6108d0e-901a7ac5917fb9c5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-03 14:48:41.869 UTC +2116 ms iframe document GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-c251cff177f15ef08646fde73f6c6146-c9c59901f34e71b0-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c251cff177f15ef08646fde73f6c6146-8d69d7eb6814b52c-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 14:48:41.909 UTC +2156 ms CSS GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-da722d0db5d1e8cf984d90c3604b929d-e2c04cebca94226b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-da722d0db5d1e8cf984d90c3604b929d-24114390b903071d-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 14:48:41.925 UTC +2172 ms ES module GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-c0867829e711b03a17df95770d37bc32-6494d4b6f954cdcc-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c0867829e711b03a17df95770d37bc32-5b98c0fd3d7c9847-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 14:48:41.927 UTC +2174 ms JS GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-eb934579a1f88e24547f9e7d6b1b52a2-df7a558c2ba389df-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-eb934579a1f88e24547f9e7d6b1b52a2-b456466913cbc320-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 14:48:41.928 UTC +2175 ms font (HTML) GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-03e25b39b44e3eae13b040ef1406706b-48b6db73bde3e0aa-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-03e25b39b44e3eae13b040ef1406706b-df37bf36b1f7887c-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 14:48:42.996 UTC +3243 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/0OWw8Ppd/jvdLevd4/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e7d7859183c2a826563d406788867597-d1f1899a9ed06f9b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e7d7859183c2a826563d406788867597-31132bd574d987be-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 14:48:44.028 UTC +4275 ms CSS @font-face GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/0OWw8Ppd/jvdLevd4/style.css",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a405396aad4dfada15777db373ad4b2b-9935f1b48755e06f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a405396aad4dfada15777db373ad4b2b-4b202f412d9bd4fc-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 14:48:45.374 UTC +5621 ms client timing POST POST Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "content-length": "2211",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=0OWw8Ppd",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b934f826f0c42794aae9946bbe2c46bd-1a28eea402d73331-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b934f826f0c42794aae9946bbe2c46bd-ba5d09f7d30416ac-01",
  "x-deno-userspace-tracestate": ""
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 4ms 1696ms
preload.png link 5ms 3ms
font.woff2 link 5ms 3062ms
photo.png img 5ms 3ms
module.js script 5ms 2037ms
main.js script 5ms 2374ms
prefetch.png link 6ms 2ms
iframe iframe 8ms 1350ms
import.css css 1701ms 1031ms
js-ran.gif?t=1783090123960 img 2733ms 1ms
css-bg.png css 2734ms 14ms
css-font.woff2 css 2734ms 762ms
module-ran.gif?t=1783090123975 img 2748ms 1ms