ua-tracer by Paul Kinlan

trace 0zyS5brA

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace 0zyS5brA

First seen: 2026-10-12 12:38:15.251 UTC
User-Agent: curl/8.5.0
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✗ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-12 12:38:15.251 UTC +0 ms homepage GET curl/8.5.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-4d61f082ec33da56c294d436e57b69f4-d3b646410c12222f-01",
  "tracestate": "",
  "user-agent": "curl/8.5.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-4d61f082ec33da56c294d436e57b69f4-5cbff27eb248ad89-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:38:21.506 UTC +6255 ms CSS GET curl/8.5.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-95919bf4f189eb5f7b8ee062f51b9a2a-bb3ee06f6cf294dc-01",
  "tracestate": "",
  "user-agent": "curl/8.5.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-95919bf4f189eb5f7b8ee062f51b9a2a-caa65154c26bee15-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:38:21.809 UTC +6558 ms image GET curl/8.5.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-c7d45eca5cf8a2388500b1169e9d7fa3-9ea2a2342cb12cf6-01",
  "tracestate": "",
  "user-agent": "curl/8.5.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c7d45eca5cf8a2388500b1169e9d7fa3-cc248deba8b358b8-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:38:22.079 UTC +6828 ms web app manifest GET curl/8.5.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-b3fc39f1890a01c0ee09e7eb50144160-52ec8ee0e139ee3c-01",
  "tracestate": "",
  "user-agent": "curl/8.5.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b3fc39f1890a01c0ee09e7eb50144160-22e6226d1e7c2e0b-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:38:22.367 UTC +7116 ms iframe document GET curl/8.5.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-ba7c65bd4aca4ff8ebe9511a1263182b-9daa92347995e33b-01",
  "tracestate": "",
  "user-agent": "curl/8.5.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-ba7c65bd4aca4ff8ebe9511a1263182b-84184fcf7cdf6cf3-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:38:22.642 UTC +7391 ms font (HTML) GET curl/8.5.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-3d73540397585b1188dc27d279883ee2-f2e5806f3826eb00-01",
  "tracestate": "",
  "user-agent": "curl/8.5.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-3d73540397585b1188dc27d279883ee2-dbf7aeef8581013c-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:38:22.947 UTC +7696 ms preload (image) GET curl/8.5.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-198e348a6e44d8a611efdfb042b84ba6-4b75ebb05b4a338b-01",
  "tracestate": "",
  "user-agent": "curl/8.5.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-198e348a6e44d8a611efdfb042b84ba6-ecafd2496f18ab5e-01",
  "x-deno-userspace-tracestate": ""
}