ua-tracer
by Paul Kinlan
trace 6JXDh0r2
what does a user agent actually fetch, follow & run?
Trace 6JXDh0r2
First seen: 2026-07-13 22:06:32.952 UTC
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✗ fetched web manifest
✓ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✓ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✓ sent a CSP/Reporting report (any path)
✓ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✓ EXECUTED classic JS
✓ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-07-13 22:06:32.952 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (20){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=0, i",
"referer": "https://webweekly.email/",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "cross-site",
"sec-fetch-user": "?1",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-8a07c148090dccfbde8dc488c391f4fd-e1fb4cb5a86ae087-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-8a07c148090dccfbde8dc488c391f4fd-98729a676dbaca6f-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.543 UTC | +1591 ms | CSS | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-825b1a9e79677cb1205c776c5dc15027-7e4fe5b6109a0051-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-825b1a9e79677cb1205c776c5dc15027-8f09a37a463f8ea3-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.545 UTC | +1593 ms | font (HTML) | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-7d77b3fe35a8fd825a80af06ee35d5a8-df8b6cf9b7165e24-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-7d77b3fe35a8fd825a80af06ee35d5a8-c7e255fe59f71e79-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.585 UTC | +1633 ms | preload (image) | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-3e0e838efaab6e1f25bdc58d278cfb63-897f2c0aec16d395-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-3e0e838efaab6e1f25bdc58d278cfb63-d1cb7a344a69ffbd-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.686 UTC | +1734 ms | Reporting API report (POST) | POST | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (23){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"content-length": "1835",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-5ca150db6977de1cd6ebabdbce39749c-e7052034f347a24a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-5ca150db6977de1cd6ebabdbce39749c-58c250f490264e08-01",
"x-deno-userspace-tracestate": "",
"x-report-body": "[\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/6JXDh0r2/0v5ifyS9/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 9,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/6JXDh0r2/0v5ifyS9/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/6JXDh0r2/0v5ifyS9/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n }\n]"
}
|
||||
| 2026-07-13 22:06:34.749 UTC | +1797 ms | ES module | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "script",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-79d89a0ad8ceb45b7ab83e3adc3e7997-bcc47163882311f9-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-79d89a0ad8ceb45b7ab83e3adc3e7997-06e6fb5a539cc286-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.753 UTC | +1801 ms | image | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-e350531ec46473144036511ec5e734fd-c86feac01ff19f7b-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-e350531ec46473144036511ec5e734fd-750363079bc17d6a-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.763 UTC | +1811 ms | JS | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "script",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-36dbc0c1e85eec0bdb1efcf15ad6fca7-8a18d9e5aa409fbc-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-36dbc0c1e85eec0bdb1efcf15ad6fca7-87a08741ac285633-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.775 UTC | +1823 ms | iframe document | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (20){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-513d1197807404d5f8e1d4d12da4caea-c4e2ba0368e941b6-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-513d1197807404d5f8e1d4d12da4caea-302b47fa1ca51528-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:34.780 UTC | +1828 ms | Reporting API report (POST) | POST | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (23){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"content-length": "613",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-063c5870bc8c24f9ffc8671a07591d4d-b33fd4d86a31af0c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-063c5870bc8c24f9ffc8671a07591d4d-0ddda45644a6d6fc-01",
"x-deno-userspace-tracestate": "",
"x-report-body": "[\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/6JXDh0r2/0v5ifyS9/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n }\n]"
}
|
||||
| 2026-07-13 22:06:35.158 UTC | +2206 ms | CSS @import (nested stylesheet) | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/r/6JXDh0r2/0v5ifyS9/style.css",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-709b75eddb0cac18b89325502abe53dd-09b20a8125560a4c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-709b75eddb0cac18b89325502abe53dd-6eb4e89c876bfdab-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:35.951 UTC | +2999 ms | ES module | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-5c5cf1dd931bba178e0288c6979d78ce-c7749dd9230f91a5-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-5c5cf1dd931bba178e0288c6979d78ce-1edb741320e8e046-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:35.983 UTC | +3031 ms | CSS background-image | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4, i",
"referer": "https://uatracer.com/r/6JXDh0r2/0v5ifyS9/style.css",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-472a3ad0c5f45980828d9b717d0af195-c79e0f06162e0f90-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-472a3ad0c5f45980828d9b717d0af195-874aa3ed35d1bc48-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:35.988 UTC | +3036 ms | JS executed beacon | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-25361abb5d5c4b7fbd9fff83d85c37b9-02b1e2a2b0e3a73a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-25361abb5d5c4b7fbd9fff83d85c37b9-f943d71b8a6485b0-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:35.996 UTC | +3044 ms | Reporting API report (POST) | POST | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (23){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"content-length": "642",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-136237af5ec5cdd4170ad449bff25a02-3a2a731323fc41c0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-136237af5ec5cdd4170ad449bff25a02-263f0014e0949503-01",
"x-deno-userspace-tracestate": "",
"x-report-body": "[\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/6JXDh0r2/0v5ifyS9/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/r/6JXDh0r2/0v5ifyS9/main.js\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 45,\n \"columnNumber\": 11\n}\n\n }\n]"
}
|
||||
| 2026-07-13 22:06:36.007 UTC | +3055 ms | Reporting API report (POST) | POST | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (23){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"content-length": "611",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-9c235d8d5bf203a8428f42b3781d4322-aee7591a16a8da44-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-9c235d8d5bf203a8428f42b3781d4322-eb014ce4a76d2a6f-01",
"x-deno-userspace-tracestate": "",
"x-report-body": "[\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/6JXDh0r2/0v5ifyS9/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"<anonymous code>\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 896,\n \"columnNumber\": 27\n}\n\n }\n]"
}
|
||||
| 2026-07-13 22:06:36.018 UTC | +3066 ms | ES module executed | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-49848f8451ee06073a85817a5d3682e2-8da9e38b8c36261c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-49848f8451ee06073a85817a5d3682e2-c0a7b3d0e341468b-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:36.165 UTC | +3213 ms | JS | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-be84e5c6f0ec24c340ca5f25602a4f64-d9d04698e7ea4bbe-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-be84e5c6f0ec24c340ca5f25602a4f64-f4f4a8655f28ab4a-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:36.177 UTC | +3225 ms | image inside iframe | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/r/6JXDh0r2/0v5ifyS9/iframe",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-1d518c105956be06245d2195d783e504-ea67f02edb2f1b2c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-1d518c105956be06245d2195d783e504-69aea32395d689b0-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:36.300 UTC | +3348 ms | CSS @font-face | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (18){
"accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"referer": "https://uatracer.com/r/6JXDh0r2/0v5ifyS9/style.css",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-72308aa7184e1e42480e10ab51712d71-259085ce358d23f1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-72308aa7184e1e42480e10ab51712d71-3f74b7e0bb1a410b-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:37.102 UTC | +4150 ms | apple-touch-icon | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=6",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-150d8c994735235db11654167b3a45a8-856b3454005b1168-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-150d8c994735235db11654167b3a45a8-4d44d204187b2cb6-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:37.106 UTC | +4154 ms | favicon | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (19){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=6",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-76da15a6b79c66f75b62b65c7a2e37d7-720fa779e3593216-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-76da15a6b79c66f75b62b65c7a2e37d7-c461c4e39d2d192f-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 22:06:37.758 UTC | +4806 ms | Reporting API report (POST) | POST | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (23){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-GB;q=0.9,en;q=0.8",
"content-length": "608",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=6JXDh0r2",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-e2f0c160eeb8312426c0efa8ee4d37a0-e63439c8d37e5246-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-e2f0c160eeb8312426c0efa8ee4d37a0-98193d4252addf8d-01",
"x-deno-userspace-tracestate": "",
"x-report-body": "[\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/6JXDh0r2/0v5ifyS9/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"moz-extension\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 124,\n \"columnNumber\": 32\n}\n\n }\n]"
}
|
||||
Client-side resource waterfall
JS executed (beacon hit) but no resource-timing payload was posted (UA may block sendBeacon/fetch or strip the body).