ua-tracer by Paul Kinlan

trace 0RkZrapa

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace 0RkZrapa

First seen: 2026-07-13 11:18:06.897 UTC
User-Agent: Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-13 11:18:06.897 UTC +0 ms homepage GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://webweekly.email/",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "te": "trailers",
  "traceparent": "00-bb3d283e0f7dfe92a1c182210256c924-673e91cf4053909c-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.724 UTC +1827 ms font (HTML) GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-6e1485bc4b778a349e2c1a0105571bac-c6d2c86583d2649e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.725 UTC +1828 ms CSS GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-8a21dd863c72b29a8cd717e43ee83054-a7e309f1c036f77a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.734 UTC +1837 ms preload (image) GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "image/avif,image/jxl,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-abbc8de3ebc8306d921c78fa9e1e8b74-f51942ad64383ff9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.764 UTC +1867 ms JS GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-d0a6bb1f6c010a54bccdcb53be3987d4-b726cce3e0fd8aee-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.793 UTC +1896 ms ES module GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-70b74a449658f7d7f6d85f164dbb9f18-34c5cd7621b6fa39-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.795 UTC +1898 ms image GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "image/avif,image/jxl,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-d88a7579e61fa1241e1e7fc103f330da-95127982b4f5d2cc-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.796 UTC +1899 ms iframe document GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (16) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-b71f9f3bb1e708b49f95f56599c2a191-554552488a030b26-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:08.830 UTC +1933 ms Reporting API report (POST) POST Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "content-length": "3572",
  "content-type": "application/reports+json",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-1e9cb9a0be30d6d13b9e71ae6fbee4fd-4f841f1649b7fb86-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "[\n {\n  \"age\": 38,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"<anonymous code>\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 51,\n \"columnNumber\": 18\n}\n\n },\n {\n  \"age\": 36,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 9,\n \"columnNumber\": 1\n}\n\n },\n {\n  \"age\": 30,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"<anonymous code>\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 56,\n \"columnNumber\": 39\n}\n\n },\n {\n  \"age\": 30,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n  \"age\": 30,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n  \"age\": 29,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n }\n]"
}
2026-07-13 11:18:09.533 UTC +2636 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/r/0RkZrapa/J3WiwYi8/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-14a42898345e39e98c3d29a9154b2a12-b5b08827dc4fc326-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:11.154 UTC +4257 ms CSS background-image GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "image/avif,image/jxl,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/r/0RkZrapa/J3WiwYi8/style.css",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-ecd755339601737eabbb1436b0549108-4240bdeb13d873b1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:11.180 UTC +4283 ms CSS @font-face GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (14) 
{
  "accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/r/0RkZrapa/J3WiwYi8/style.css",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-1fe61621ad06381875c5f8fdee03bfe4-f99c842c955352a9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:11.233 UTC +4336 ms JS executed beacon GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "image/avif,image/jxl,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-94bf676f1187db1f92612253508254b7-1902ca530506b749-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:11.235 UTC +4338 ms Reporting API report (POST) POST Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "content-length": "627",
  "content-type": "application/reports+json",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-936b189e99619273cde4a5199a2c000d-9bc7b0f03d7687bd-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "[\n {\n  \"age\": 15,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/r/0RkZrapa/J3WiwYi8/main.js\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 45,\n \"columnNumber\": 11\n}\n\n }\n]"
}
2026-07-13 11:18:11.237 UTC +4340 ms Reporting API report (POST) POST Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "content-length": "3235",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-c17f8056df0eb6a470c677a9401ab4f5-3b55e503d77589d0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://webweekly.email/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\"sourceFile\":\"<anonymous code>\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":51,\"columnNumber\":18}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://webweekly.email/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":9,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://webweekly.email/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\"sourceFile\":\"<anonymous code>\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":56,\"columnNumber\":39}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://webweekly.email/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":0,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://webweekly.email/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":0,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://webweekly.email/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":0,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://webweekly.email/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/0RkZrapa/J3WiwYi8/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/r/0RkZrapa/J3WiwYi8/main.js\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":45,\"columnNumber\":11}}],\"ua\":\"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\"}"
}
2026-07-13 11:18:11.239 UTC +4342 ms CSP violation report (POST) POST Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "content-length": "350",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-f7e7993062969adae06c3c3307ffcf8c-ca91b7800c0443b5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/0RkZrapa/J3WiwYi8/main.js\",\"ua\":\"Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0\"}"
}
2026-07-13 11:18:11.239 UTC +4342 ms ES module executed GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "image/avif,image/jxl,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-b53b6ac8f100161bdf8f4e52a15f6f00-48ce521be538cd1c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:11.282 UTC +4385 ms web app manifest GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "host": "uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-a6bd24eeaffc0dca271e7bf49d339f62-ed6e9e3b5b963538-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:11.299 UTC +4402 ms apple-touch-icon GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=4",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "none",
  "te": "trailers",
  "traceparent": "00-bda9470e157797592a0b50f79aa28378-509abcf63cd3711d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-bda9470e157797592a0b50f79aa28378-46331510e9c5f071-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-13 11:18:11.969 UTC +5072 ms image inside iframe GET Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (15) 
{
  "accept": "image/avif,image/jxl,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/r/0RkZrapa/J3WiwYi8/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-83de07570a5da878201c2e4f2d5a3ff4-73ee8f7afb6d90a2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-13 11:18:15.501 UTC +8604 ms client timing POST POST Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB",
  "content-length": "2540",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=0RkZrapa",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-940ca55f0271fdc3694f5aa6be9af55d-1c14739bd7eeaa74-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 16; Mobile; rv:154.0) Gecko/154.0 Firefox/154.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-16 02:33:10.167 UTC +227703270 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (7) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-a87881d9890038be50332f8675d0fa2d-2d652ee5f79e7c1f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
2026-07-16 04:13:19.864 UTC +233712967 ms Reporting API report (POST) GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-624696134fef7672b7f5564af6f682c1-1b68218cb09f8ae0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-624696134fef7672b7f5564af6f682c1-4b6fd855100c46ab-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-16 07:54:39.062 UTC +246992165 ms preload (image) GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-731bb2ac5be04ae2c45e82173064604e-8e62df70dd7ecb08-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-731bb2ac5be04ae2c45e82173064604e-832010e6fbeecef9-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-16 12:21:42.300 UTC +263015403 ms CSP violation report (POST) GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (7) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-e161b13ede1a44ccbe782300793a9192-78869d6dbeadc5f4-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
2026-07-16 12:21:57.992 UTC +263031095 ms CSS background-image GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-a88254229efbafc5dc2f25915742c889-1c6b8b6a520bdc17-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a88254229efbafc5dc2f25915742c889-44541a00fc62736d-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-16 19:28:43.134 UTC +288636237 ms JS executed beacon GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-e65fe39604041220f2120225f171929e-2c19fc47d0530846-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e65fe39604041220f2120225f171929e-64779bff079caa5e-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-17 00:36:31.080 UTC +307104183 ms ES module executed GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-b516d478b8986cda66d360fb56783328-de876ef3d8de1ba9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b516d478b8986cda66d360fb56783328-fba0456e0514064b-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-17 01:22:16.012 UTC +309849115 ms image GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (7) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-71b92b23ef1096c0d6f85762b41d5051-316a6301a60ba413-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 2176ms 767ms
font.woff2 other 2176ms 1485ms
preload.png link 2176ms 2104ms
module.js script 2215ms 1028ms
main.js script 2215ms 1713ms
photo.png img 2215ms 2733ms
iframe iframe 2217ms 3179ms
import.css css 2949ms 1646ms
css-bg.png css 4611ms 1385ms
css-font.woff2 other 4640ms 987ms
js-ran.gif?t=1783941491042 img 4673ms 2389ms
module-ran.gif?t=1783941491044 img 4674ms 2773ms
csp-report other 4677ms 1644ms
report other 4677ms 3140ms
manifest.json fetch 4693ms 3164ms