ua-tracer by Paul Kinlan

trace HyU5UVIZ

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace HyU5UVIZ

First seen: 2026-07-30 23:12:09.934 UTC
User-Agent: amazon-Quick-on-behalf-of-56f1238b
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-30 23:12:09.934 UTC +0 ms homepage GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-6df7c42820db71c771ba355637159740-80b83fe1f8ef9d5a-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.405 UTC +1471 ms JS GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8257c8e17ead1192ba4ae0d86c591358-f390dfd26e27322c-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.408 UTC +1474 ms image GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-11ab1f5b8c1043b9bc228f1b054f8b31-bf96649613b3b047-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.408 UTC +1474 ms iframe document GET amazon-Quick-on-behalf-of-56f1238b
request headers (19)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8ba818e640e2d3911f1a978d98f122d7-47d18ee7012d0b94-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.409 UTC +1475 ms prefetch GET amazon-Quick-on-behalf-of-56f1238b
request headers (19)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-4049b7b546628f9fe901c9cc2fc0ff09-06bc0c61002cbc92-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.409 UTC +1475 ms ES module GET amazon-Quick-on-behalf-of-56f1238b
request headers (19)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-41240366c9308d8eebace331fd84ef9d-4e33db564fa0be93-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.409 UTC +1475 ms preload (image) GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-7afcf9b106d74d4c91a2387731243f16-1ca9faf0e0b1c2e2-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.409 UTC +1475 ms CSS GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ba9fe0ef458b6f44e173723d7ce95062-1d33ed281f5d1e5d-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:11.410 UTC +1476 ms font (HTML) GET amazon-Quick-on-behalf-of-56f1238b
request headers (19)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-64fca2a55da4701387afc566bff44cf5-cd5e86ae68e8f08f-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:12.724 UTC +2790 ms image inside iframe GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/r/HyU5UVIZ/dCeI8vdd/iframe",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-54df1311e87ed88daf71b964bd2d5147-8aabf61f310fc09c-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:13.522 UTC +3588 ms CSS @import (nested stylesheet) GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/HyU5UVIZ/dCeI8vdd/style.css",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-fa314e0fb7d2b3adf57032aff2628808-f091c826361de8c6-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:13.934 UTC +4000 ms JS executed beacon GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b61041bfe9feb900f2dd4ad653672ec5-8ba0cdeff5a77986-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:13.950 UTC +4016 ms CSS background-image GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/r/HyU5UVIZ/dCeI8vdd/style.css",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-7229ac28e84308ba21b66c876d5ef647-2a1a8010301ace90-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:13.960 UTC +4026 ms CSS @font-face GET amazon-Quick-on-behalf-of-56f1238b
request headers (19)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/HyU5UVIZ/dCeI8vdd/style.css",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-421d0c793245a452eb02c4ce2ab2e58e-c385fa5808f48d27-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:13.966 UTC +4032 ms ES module executed GET amazon-Quick-on-behalf-of-56f1238b
request headers (18)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-47e056d102d1f8f8d8106c2915d79c4d-caf817c35fba7801-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:15.634 UTC +5700 ms client timing POST POST amazon-Quick-on-behalf-of-56f1238b
request headers (21)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "content-length": "2222",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-32324b35fe6d0020f58647e2e162724c-e2ddb7f3df57537f-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-30 23:12:29.684 UTC +19750 ms image GET amazon-Quick-on-behalf-of-56f1238b
request headers (8)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate",
  "cookie": "ua-tracer-trace=HyU5UVIZ",
  "host": "uatracer.com",
  "traceparent": "00-5f7042fc2ba3fbf3053dfe81f7c3ebcc-fa59dbcf07066b8a-01",
  "tracestate": "",
  "user-agent": "amazon-Quick-on-behalf-of-56f1238b",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 1446ms 2156ms
font.woff2 link 1446ms 1611ms
preload.png link 1446ms 2096ms
prefetch.png link 1453ms 463ms
iframe iframe 1463ms 1339ms
photo.png img 1463ms 863ms
main.js script 1463ms 1086ms
module.js script 1464ms 659ms
import.css css 3603ms 412ms
js-ran.gif?t=1785453133913 img 4016ms 407ms
css-bg.png css 4017ms 628ms
css-font.woff2 css 4018ms 840ms
module-ran.gif?t=1785453133931 img 4034ms 1066ms