ua-tracer
by Paul Kinlan
trace 4xCoKpw6
what does a user agent actually fetch, follow & run?
Trace 4xCoKpw6
First seen: 2026-07-06 12:54:42.435 UTC
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✗ fetched CSS
✓ fetched JS
✗ fetched image
✓ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✗ fetched web manifest
✗ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✓ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✓ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-07-06 12:54:42.435 UTC | +0 ms | homepage | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br",
"host": "uatracer.com",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-fetch-user": "?1",
"traceparent": "00-4b5089759d1bb078a0112c1031e7c403-71712533f8fcadaf-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-4b5089759d1bb078a0112c1031e7c403-894269b936c5645d-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-06 12:54:43.701 UTC | +1266 ms | ES module | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br",
"cookie": "ua-tracer-trace=4xCoKpw6",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "script",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-b82ff8c2ec1eb1ff2f31e709c54d1482-568a0f692caa8976-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-b82ff8c2ec1eb1ff2f31e709c54d1482-deec49870058d8a7-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-06 12:54:43.724 UTC | +1289 ms | iframe document | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (18){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br",
"cookie": "ua-tracer-trace=4xCoKpw6",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"traceparent": "00-648c4937e014eddb24befd2011f7b0c6-8d67c222a9e0cbe9-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-648c4937e014eddb24befd2011f7b0c6-8e03475b063a5e03-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-06 12:54:43.727 UTC | +1292 ms | JS | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br",
"cookie": "ua-tracer-trace=4xCoKpw6",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "script",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-a01ca11f0f11ae0f1a24e3fc5ddc6d4e-c58f818de9df28e0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-a01ca11f0f11ae0f1a24e3fc5ddc6d4e-73ebda0ddedb9453-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-06 12:54:44.027 UTC | +1592 ms | prefetch | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (18){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br",
"cookie": "ua-tracer-trace=4xCoKpw6",
"host": "uatracer.com",
"purpose": "prefetch",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-aba1cd3565e311b3c3514b220b9eab55-127adc67823a987d-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-aba1cd3565e311b3c3514b220b9eab55-ea709b3b914c6487-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-06 12:54:44.439 UTC | +2004 ms | CSP violation report (POST) | POST | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (21){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br",
"content-length": "390",
"content-type": "application/json",
"cookie": "ua-tracer-trace=4xCoKpw6",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-2fd40b6039bc7abe00af7bdce80f217b-26ea2844d5a1712d-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-2fd40b6039bc7abe00af7bdce80f217b-a927f0c94b003104-01",
"x-deno-userspace-tracestate": "",
"x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/4xCoKpw6/M4zltO28/main.js\",\"ua\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15\"}"
}
|
||||
| 2026-07-06 12:54:44.445 UTC | +2010 ms | Reporting API report (POST) | POST | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (21){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br",
"content-length": "2183",
"content-type": "application/json",
"cookie": "ua-tracer-trace=4xCoKpw6",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-2a5af082f19f1077fbf2c1f799b88406-9d8b8bd7b4dae553-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-2a5af082f19f1077fbf2c1f799b88406-9e7d26555c9d5e70-01",
"x-deno-userspace-tracestate": "",
"x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/4xCoKpw6/M4zltO28/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":243,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/4xCoKpw6/M4zltO28/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":247,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/4xCoKpw6/M4zltO28/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":755,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/4xCoKpw6/M4zltO28/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/r/4xCoKpw6/M4zltO28/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/4xCoKpw6/M4zltO28/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15\"}"
}
|
||||
| 2026-07-06 12:54:45.751 UTC | +3316 ms | client timing POST | POST | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15 |
request headers (20){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br",
"content-length": "1800",
"content-type": "application/json",
"cookie": "ua-tracer-trace=4xCoKpw6",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"HeadlessChrome\";v=\"123\", \"Not:A-Brand\";v=\"8\", \"Chromium\";v=\"123\"",
"sec-ch-ua-mobile": "?0",
"sec-ch-ua-platform": "\"Linux\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-80fe859f953eb026799b9579978e434d-b29f14dc35ab4c98-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ABEvalBot/0.1) Version/11.1.2 Safari/605.1.15",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-80fe859f953eb026799b9579978e434d-aa361bb9cfbebe07-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-06 17:08:19.226 UTC | +15216791 ms | iframe document | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip",
"accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
"cache-control": "no-cache",
"connection": "keep-alive, close",
"host": "uatracer.com",
"pragma": "no-cache",
"traceparent": "00-b9ff584108d0a2edbf6c9764c2d6eb93-22ac8f6fddd2d52f-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-06 17:17:18.468 UTC | +15756033 ms | font (HTML) | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip",
"accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
"cache-control": "no-cache",
"connection": "keep-alive, close",
"host": "uatracer.com",
"pragma": "no-cache",
"traceparent": "00-9ab88b7bdb6fa1e54480a558f3ef9a3e-58ebe9cb0c21eb0b-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
Client-side resource waterfall
Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real
browser-grade engine, not just a downloader.
| Resource | Initiator | Start | Duration | Timeline |
|---|---|---|---|---|
| link | 1289ms | 215ms | ||
| link | 1289ms | 216ms | ||
| link | 1289ms | 432ms | ||
| img | 1290ms | 435ms | ||
| script | 1290ms | 891ms | ||
| script | 1290ms | 1441ms | ||
| link | 1307ms | 2007ms | ||
| iframe | 1326ms | 636ms | ||
| img | 2186ms | 187ms | ||
| img | 2734ms | 177ms |