ua-tracer by Paul Kinlan

trace CAwOGjoI

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace CAwOGjoI

First seen: 2026-10-12 12:42:49.513 UTC
User-Agent: ua-tracer-live-verify/1.0
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✓ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✓ fetched og:image ✓ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-12 12:42:49.513 UTC +0 ms homepage GET ua-tracer-live-verify/1.0
request headers (6) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-e7c3386f0c8929c4077575c9a312bdbd-7b3ddbdb5959c739-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-12 12:43:00.639 UTC +11126 ms CSS GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-cf879ccfd897a24ab11d308c75daefc6-c6975a001c59f221-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-cf879ccfd897a24ab11d308c75daefc6-c473553d37f7c33a-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:00.938 UTC +11425 ms web app manifest GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-510bf490e0a2ddf9c6d3f82aa93079bc-24dd5ec44d735864-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-510bf490e0a2ddf9c6d3f82aa93079bc-b6a15d53f68cb481-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:01.242 UTC +11729 ms iframe document GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-e3ee8a0b5e6a734c9d80fd235ddd9662-e8b338cab6144219-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e3ee8a0b5e6a734c9d80fd235ddd9662-ad9a0745eae4e7d7-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:11.239 UTC +21726 ms CSS GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-f804276e1d97baa3667b2f84382a492c-230be726d8c0334c-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f804276e1d97baa3667b2f84382a492c-76b77cbf9dbc667e-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:11.486 UTC +21973 ms JS GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-a8271f4dc6f85cd24063f9dbc3b0622c-4edfcd0dc26057b0-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a8271f4dc6f85cd24063f9dbc3b0622c-b8d09ae6b092b808-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:11.737 UTC +22224 ms ES module GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-f3ffeb7854dd4f1c96eee5fcc0bcf1c9-61d35fadc5c04669-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f3ffeb7854dd4f1c96eee5fcc0bcf1c9-70cbe3bb63cf240a-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:11.998 UTC +22485 ms image GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-4155e2dba72629bcb4f94c844f2a3c9d-ae86fd0817fbb0cc-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-4155e2dba72629bcb4f94c844f2a3c9d-ea9784c5a39d40e1-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:12.226 UTC +22713 ms font (HTML) GET ua-tracer-live-verify/1.0
request headers (6) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-3f54ac9fa175433ca01155527633d527-8b2df5636814ef9f-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-12 12:43:12.486 UTC +22973 ms CSS background-image GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-5e9374c45bfd9ed979a4731030807ac6-faf1c70833f91afe-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-5e9374c45bfd9ed979a4731030807ac6-dec9de4cf0c87b0d-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:12.766 UTC +23253 ms CSS @font-face GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-48b763cd90c2c28353a27ba22ab903e2-46b8cffaa46df698-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-48b763cd90c2c28353a27ba22ab903e2-f0e2bf6fb69ba613-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:13.038 UTC +23525 ms CSS @import (nested stylesheet) GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-e91c98dafc9ef0464f9a7490cda3b040-99dca293e42a7bf6-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e91c98dafc9ef0464f9a7490cda3b040-70feb1cefc2f767d-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:13.278 UTC +23765 ms web app manifest GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-34d592bb9d32ebf8fe7c91f20ad3058c-caccc0bc821a52eb-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-34d592bb9d32ebf8fe7c91f20ad3058c-ee6c1d4b9de12775-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:13.536 UTC +24023 ms manifest icon GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-dbb972f952d1ad3b5d14bda8071061f7-89a2fbeba00be559-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-dbb972f952d1ad3b5d14bda8071061f7-7444df18e2a45c93-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:13.838 UTC +24325 ms favicon GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-cd03fa8d12bb148c3b6bb0bce9d62f05-316e64d623a379a9-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-cd03fa8d12bb148c3b6bb0bce9d62f05-d030fdd8f8db9841-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:14.134 UTC +24621 ms apple-touch-icon GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-7c7da4f2c58bc471d3b821573d27035d-c22fbc602fd2147b-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7c7da4f2c58bc471d3b821573d27035d-270e5390cca7e7fe-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:14.435 UTC +24922 ms preload (image) GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-b13c8a74d0b7b4c7f4d606713c755142-ce8ad931db2de3be-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b13c8a74d0b7b4c7f4d606713c755142-014d1f45192e0263-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:14.770 UTC +25257 ms prefetch GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-a1ef965470454f4607ee483a9af4cfdc-fbcfaf1b8f141bf4-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a1ef965470454f4607ee483a9af4cfdc-07db06ca5d8bc94c-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:15.034 UTC +25521 ms Open Graph image GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-d68912b6450c27b043ec53662fa94de7-002e9b78ce749033-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d68912b6450c27b043ec53662fa94de7-f9f8000fbf718586-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:15.338 UTC +25825 ms Twitter card image GET ua-tracer-live-verify/1.0
request headers (6) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-8ed734fc6a988cafa31a9719da85a803-307c27fb1c21c3d8-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-12 12:43:15.637 UTC +26124 ms iframe document GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-a9f7e263ec72daff38110286f2b2e738-63a75c4f49a7c9a3-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a9f7e263ec72daff38110286f2b2e738-2bb928fe79974883-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:15.946 UTC +26433 ms image inside iframe GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-eeda448b202b80f3277f77b46ab05c10-14ed009de3b10b5d-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-eeda448b202b80f3277f77b46ab05c10-fdc46938fecaf2b0-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:16.238 UTC +26725 ms JS executed beacon GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-854a23e2cd064b8afdf74af103f4f98a-92a4e3a6bd8b643a-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-854a23e2cd064b8afdf74af103f4f98a-7f551b50664e1817-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:16.658 UTC +27145 ms ES module executed GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-d09d7591ed51b5dcf86b2d9926cbf088-17f00332efd862a2-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d09d7591ed51b5dcf86b2d9926cbf088-21020801a8f66e7f-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:23.438 UTC +33925 ms JS GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-7cb77daf2cc7e0c86432b6e248d9d8c9-844a1bb36f0ccc30-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7cb77daf2cc7e0c86432b6e248d9d8c9-28de4c16e5444a0e-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:26.878 UTC +37365 ms client timing POST POST ua-tracer-live-verify/1.0
request headers (10) 
{
  "accept": "*/*",
  "content-length": "134",
  "content-type": "application/json",
  "host": "uatracer.com",
  "traceparent": "00-7855b98b3348c0b009dcc05036fde108-46eaf40e93e2b85d-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7855b98b3348c0b009dcc05036fde108-64c9a925f844f6a6-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:27.147 UTC +37634 ms CSP violation report (POST) POST ua-tracer-live-verify/1.0
request headers (11) 
{
  "accept": "*/*",
  "content-length": "88",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "traceparent": "00-245a45655185f722309c02cade027e30-e9d8cfc4f23dc0ad-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-245a45655185f722309c02cade027e30-1259f59157b3f696-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"csp-report\":{\"document-uri\":\"https://uatracer.com/\",\"violated-directive\":\"style-src\"}}"
}
2026-10-12 12:43:27.410 UTC +37897 ms Reporting API report (POST) POST ua-tracer-live-verify/1.0
request headers (11) 
{
  "accept": "*/*",
  "content-length": "73",
  "content-type": "application/reports+json",
  "host": "uatracer.com",
  "traceparent": "00-a868f4d2c77138a415aa374d9ad2ce8b-2ee48c50976fcb74-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a868f4d2c77138a415aa374d9ad2ce8b-4939dc324ff9a09e-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "[{\"type\":\"csp-violation\",\"body\":{\"documentURL\":\"https://uatracer.com/\"}}]"
}
2026-10-12 12:43:33.563 UTC +44050 ms JS GET ua-tracer-live-verify/1.0
request headers (8) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-f14f1915c00e3c0120867a986f051c59-c28c813e4453c051-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f14f1915c00e3c0120867a986f051c59-173d617b68a1c746-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-12 12:43:37.288 UTC +47775 ms client timing POST POST ua-tracer-live-verify/1.0
request headers (10) 
{
  "accept": "*/*",
  "content-length": "363",
  "content-type": "application/json",
  "host": "uatracer.com",
  "traceparent": "00-a3282f5dacd9138fbce15850e9e526aa-32b2f48994d36c58-01",
  "tracestate": "",
  "user-agent": "ua-tracer-live-verify/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a3282f5dacd9138fbce15850e9e526aa-e93d01f51d4ef30a-01",
  "x-deno-userspace-tracestate": ""
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 11ms 20ms
main.js script 30ms 5ms