ua-tracer by Paul Kinlan

trace 9t5Qll5A

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace 9t5Qll5A

First seen: 2026-07-06 14:45:44.088 UTC
User-Agent: Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✗ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-06 14:45:44.088 UTC +0 ms homepage GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "deflate, gzip, br, zstd",
  "host": "uatracer.com",
  "signature": "sig=:IjkZQ+k/f1e2GvsseNoOso00Nq353vNQ3DvAyMwEC02OHbV5y7wHtaiQE7Qig0Cg7d0iQdcqifb+6lfC7xuXCA==:",
  "signature-agent": "\"https://ahrefs.com\"",
  "signature-input": "sig=(\"@authority\" \"signature-agent\");created=1783349143;keyid=\"e3vpiy0B6M1Wdxnizw3dqRSgpqS6SXM2qiQ6HtUwZ5g\";alg=\"ed25519\";expires=1783349203;nonce=\"rGv3x13Pz2BgL8mqSXzqo6uvYOUYzQu5S81TMYjIsAAj8OZgXRrB-SsDbnO-n-Rt6-GRRZE6o2rK7Z7UcqttBw\";tag=\"web-bot-auth\"",
  "traceparent": "00-9b179fbbf9b735073a0b1ebbdd19b35c-3a97fa21671b569f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-06 14:45:46.919 UTC +2831 ms CSS GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-000629c72863ace8355accd12ff4d89e-621909f68b322ec3-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-000629c72863ace8355accd12ff4d89e-443a51a64e872625-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-06 14:45:46.922 UTC +2834 ms iframe document GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-3e1c63a7204ce393ed75a9d6f2d824b3-a8f1f97c9671bd01-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-3e1c63a7204ce393ed75a9d6f2d824b3-8b77a9bad2cde330-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-06 14:45:46.923 UTC +2835 ms JS GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-7dd7f9c009fa51c1a6d88ee10de55ff2-b56fdf623e35d296-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7dd7f9c009fa51c1a6d88ee10de55ff2-ab3b0b7740ef17a4-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-06 14:45:46.924 UTC +2836 ms ES module GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4d64bc1e25256f28f5c755f38cdf6660-0fe97ff3c22d0fe7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-4d64bc1e25256f28f5c755f38cdf6660-5decfe018e7e903f-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-06 14:45:46.926 UTC +2838 ms font (HTML) GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-68bf35423b8a74234df28eb8fc1ade02-8db02fd678927a59-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-68bf35423b8a74234df28eb8fc1ade02-a4678c97b91e454c-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-06 14:45:47.629 UTC +3541 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/9t5Qll5A/5ivmOY1m/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-1d7691ace62b3031d6903ef4b1b563f0-39c9a67df2cd7fb6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-1d7691ace62b3031d6903ef4b1b563f0-41860f6782381496-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-06 14:45:49.359 UTC +5271 ms CSS @font-face GET Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/9t5Qll5A/5ivmOY1m/style.css",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-31ae1158f59533571e8d8b7515139f33-0582b3aa11f83192-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-31ae1158f59533571e8d8b7515139f33-2a44d7c41b66aed7-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-06 14:45:50.714 UTC +6626 ms client timing POST POST Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "content-length": "2203",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=9t5Qll5A",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a7e30554b41f1721dcb9bee2c11153d6-b8e2dc5b8185e5ad-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; AhrefsBot/7.0; +http://ahrefs.com/robot/)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a7e30554b41f1721dcb9bee2c11153d6-29d387173e82e652-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-07 02:45:55.842 UTC +43211754 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
request headers (12) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip",
  "accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
  "cache-control": "no-cache",
  "connection": "keep-alive, close",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "traceparent": "00-a4cccb206a466b9abfe76d5ba0aaecf7-fe03f5af6975bd07-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
2026-07-12 21:53:26.138 UTC +544062050 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
request headers (12) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip",
  "accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
  "cache-control": "no-cache",
  "connection": "keep-alive, close",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "traceparent": "00-511134a6168dd28fec1669f1bf82019e-d1e3e0aefbe73e0d-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
preload.png link 4ms 3ms
style.css link 4ms 1261ms
font.woff2 link 4ms 2633ms
photo.png img 4ms 3ms
main.js script 4ms 1580ms
module.js script 4ms 1929ms
prefetch.png link 6ms 2ms
iframe iframe 7ms 2280ms
import.css css 1266ms 1705ms
js-ran.gif?t=1783349149289 img 2972ms 0ms
css-bg.png css 2973ms 12ms
css-font.woff2 css 2973ms 777ms
module-ran.gif?t=1783349149301 img 2985ms 1ms