ua-tracer
by Paul Kinlan
ua-tracer
what does a user agent actually fetch, follow & run?
Trace 2ROxBWWO
First seen: 2026-06-24 12:58:46.807 UTC
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✗ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✓ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✓ sent a CSP/Reporting report (any path)
✓ delivered via report-uri/Report-To header (no JS)
✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✓ EXECUTED classic JS
✓ EXECUTED ES module
✓ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-06-24 12:58:46.807 UTC | +0 ms | homepage | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=0, i",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-fetch-user": "?1",
"traceparent": "00-c92541633bf39859d675d34c62544cd8-b660ffdcc97228c9-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:47.928 UTC | +1121 ms | CSS | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=0",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-2ad7018b5fb0d2fdb0105adc02b5a6a3-fcb04ab2075195d7-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:47.929 UTC | +1122 ms | font (HTML) | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=1",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-4e18fba5e401e6b47401492b17189af6-a9e3a20e5718545e-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:47.930 UTC | +1123 ms | preload (image) | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-72d1c3c2450ad5d6f2447017e177e9ea-a00517a78d12d779-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:47.931 UTC | +1124 ms | prefetch | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=4, i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-purpose": "prefetch",
"traceparent": "00-a7a6ba249c7a2f0360629641303b46cc-6e5d05f6e51ec927-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:47.933 UTC | +1126 ms | Reporting API report (POST) | POST | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (12){
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"content-length": "506",
"content-type": "application/reports+json",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4, i",
"traceparent": "00-0a39df66a87a27762c3b5e88daede3d9-0c4a1fe299c59640-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "[{\"age\":0,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-elem\",\"lineNumber\":9,\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36\"}]"
}
|
||||
| 2026-06-24 12:58:48.115 UTC | +1308 ms | image | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-16f4c8faf51d196339927792bd6c724e-abb9495eab4754a7-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:48.116 UTC | +1309 ms | iframe document | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (18){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=0, i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"sec-fetch-user": "?1",
"traceparent": "00-c41475d53295f8e9778517a870975d05-950ab2036213d47c-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:48.118 UTC | +1311 ms | JS | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=1",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "script",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-23764bfa7cf1c822960c07530c329b40-d1c557ae104298c5-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:48.118 UTC | +1311 ms | ES module | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=1",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "script",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-c750f335104c000b1c191c69a680b060-d7fe66497250d224-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:48.316 UTC | +1509 ms | web app manifest | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "manifest",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-7d154666552dccfac7d395edf647594d-9f79213e6ebf40ca-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:49.411 UTC | +2604 ms | image inside iframe | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "i",
"referer": "https://uatracer.com/r/2ROxBWWO/iframe",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-45f7ec4860721d193d03b17a8dee4d3b-aa17769986fa9276-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:50.010 UTC | +3203 ms | CSS @import (nested stylesheet) | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=0",
"referer": "https://uatracer.com/r/2ROxBWWO/style.css",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-c32c7c0becb5a0c0140aea0b1edeed4c-4a26702c5a600d3a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:50.630 UTC | +3823 ms | CSS background-image | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "i",
"referer": "https://uatracer.com/r/2ROxBWWO/style.css",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-31952da214eefdb8062034ce964afaf2-3a52137459a2346e-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:50.642 UTC | +3835 ms | CSS @font-face | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=0",
"referer": "https://uatracer.com/r/2ROxBWWO/style.css",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-4be1334f4f080b70d3f27745f1ba2f7f-161b87e9f675ccfe-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:50.643 UTC | +3836 ms | JS executed beacon | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-0af70d368b647e85a3c2c9949374b33e-62375fd4ff0ccec8-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:50.644 UTC | +3837 ms | CSP violation report (POST) | POST | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (20){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"content-length": "382",
"content-type": "application/json",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4, i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-e900c61b24e273d1c5f8fdfea576a903-6d32cac530f25d2a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/2ROxBWWO/main.js\",\"ua\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36\"}"
}
|
||||
| 2026-06-24 12:58:50.646 UTC | +3839 ms | Reporting API report (POST) | POST | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (20){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"content-length": "1739",
"content-type": "application/json",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4, i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-e572e4a2a4255e6655daa7485836073c-38d00a6c8c55c5e1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":213,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":721,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/r/2ROxBWWO/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36\"}"
}
|
||||
| 2026-06-24 12:58:50.646 UTC | +3839 ms | ES module executed | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-6aec00b419ef5bd3733fa9d5520a99fb-2a6526415b3739cb-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:52.528 UTC | +5721 ms | favicon | GET | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"host": "uatracer.com",
"priority": "u=1, i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-9c107ef33f94c274f29f923ee70bb250-727d44394db7c212-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:53.126 UTC | +6319 ms | client timing POST | POST | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (19){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"content-length": "2654",
"content-type": "application/json",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4, i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"146\", \"Not-A.Brand\";v=\"24\", \"Google Chrome\";v=\"146\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-4d20fa9ae0835add1962e9ceee0ba76f-8f18488e4ddeaecb-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 12:58:55.653 UTC | +8846 ms | Reporting API report (POST) | POST | Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36 |
request headers (12){
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"content-length": "1566",
"content-type": "application/reports+json",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4, i",
"traceparent": "00-b131385adfa43a3e6e6eeb771f31f829-6bfe2931c163ff73-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "[{\"age\":7539,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":721,\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36\"},{\"age\":5011,\"body\":{\"blockedURL\":\"inline\",\"columnNumber\":11,\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":45,\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/r/2ROxBWWO/main.js\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36\"},{\"age\":7721,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":213,\"originalPolicy\":\"style-src 'self'; report-uri /r/2ROxBWWO/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) HeadlessChrome/146.0.0.0 Safari/537.36\"}]"
}
|
||||
Client-side resource waterfall
Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real
browser-grade engine, not just a downloader.
| Resource | Initiator | Start | Duration | Timeline |
|---|---|---|---|---|
| link | 1557ms | 2082ms | ||
| link | 1557ms | 623ms | ||
| link | 1557ms | 940ms | ||
| link | 1561ms | 1046ms | ||
| link | 1563ms | 1191ms | ||
| iframe | 1745ms | 1290ms | ||
| img | 1745ms | 608ms | ||
| script | 1745ms | 1169ms | ||
| script | 1746ms | 1594ms | ||
| css | 3639ms | 616ms | ||
| css | 4257ms | 616ms | ||
| css | 4257ms | 840ms | ||
| img | 4272ms | 1881ms | ||
| beacon | 4273ms | 1344ms | ||
| beacon | 4274ms | 1107ms | ||
| img | 4275ms | 1608ms |