ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace SNsiR5VY

First seen: 2026-06-23 09:46:23.680 UTC
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-23 09:46:23.680 UTC +0 ms homepage GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-9e66654ca764b37b9b4024e42d6edace-a2bda386042de361-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-9e66654ca764b37b9b4024e42d6edace-808cb68c9b814eb1-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:24.805 UTC +1125 ms font (HTML) GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=3, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f8847ba6c6945324ec9de4ff2b915fd0-ad34d50cce90d02e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f8847ba6c6945324ec9de4ff2b915fd0-8e4569b85dd67e9e-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:24.807 UTC +1127 ms CSS GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-42501b4980a0b56bdb596f2df455f2c7-dd2f4a3619185ccb-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-42501b4980a0b56bdb596f2df455f2c7-dd496c1ade8ec9e8-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:24.807 UTC +1127 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "cache-control": "max-age=0",
  "content-length": "388",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-fb190e5f37a9a95a02e1d3347bda570e-f62a79848873d1ae-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-fb190e5f37a9a95a02e1d3347bda570e-22511162d5582a69-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"\",\"effectiveDirective\":\"style-src-elem\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":1}}"
}
2026-06-23 09:46:24.808 UTC +1128 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f07115074bc9273f3e220691b28191a5-09936cae47fc985b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f07115074bc9273f3e220691b28191a5-e053f03c94c3c668-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:24.808 UTC +1128 ms ES module GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d8c215b9aad84e72dc3042c5e4760be8-f27b02d9d7517c34-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d8c215b9aad84e72dc3042c5e4760be8-fd2c11f013ae3b24-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:24.808 UTC +1128 ms JS GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e7786ef52838c268d7bf499790b48497-2838aaac1e2698e1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e7786ef52838c268d7bf499790b48497-a281792a28d2a536-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:25.961 UTC +2281 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-61f092c7bed5354015e27eebe2fc4530-b4254ce6cd846651-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-61f092c7bed5354015e27eebe2fc4530-bf3d39f3c04bc981-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.405 UTC +2725 ms web app manifest GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-fb3f17dfb3cfb4f8be3dbafe29995493-e36ba6462aa2eea0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-fb3f17dfb3cfb4f8be3dbafe29995493-683c14af700f8194-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.661 UTC +2981 ms preload (image) GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a4285c9369b3fd526a21c8b0bebcb668-2c7ea19a3ff4ee8f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a4285c9369b3fd526a21c8b0bebcb668-708c5cfd78b3432c-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.716 UTC +3036 ms CSS @font-face GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=3, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-1db0bdbbb8e5cf587c5620da8bb92d0d-83958a2ecae35b1a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-1db0bdbbb8e5cf587c5620da8bb92d0d-03c302d30c2a82b3-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.725 UTC +3045 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "cache-control": "max-age=0",
  "content-length": "390",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-17fc75f2d5ff01951715afaf1d664170-808dee6ea9417434-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-17fc75f2d5ff01951715afaf1d664170-8d2506d1730827a3-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":213,\"columnNumber\":1}}"
}
2026-06-23 09:46:26.725 UTC +3045 ms ES module executed GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-7bd41f154549e41057b1ce912742651b-7703ede70cbfa32a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7bd41f154549e41057b1ce912742651b-37515b7218314ac2-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.725 UTC +3045 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "cache-control": "max-age=0",
  "content-length": "1792",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-cabcb0b77dab1309582fcd2d67006d6a-c447340eff8af3a9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-cabcb0b77dab1309582fcd2d67006d6a-b4b4beef896c9807-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":9,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":213,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":721,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com:443/r/SNsiR5VY/main.js\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":45,\"columnNumber\":23}}],\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1\"}"
}
2026-06-23 09:46:26.727 UTC +3047 ms image GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f0d85a34a4ca168c47d732bac8c13234-107f4456b0833cbf-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f0d85a34a4ca168c47d732bac8c13234-84348071c0d1b16b-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.727 UTC +3047 ms JS executed beacon GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-805f7c1e1bf3c367ae76120986643932-7b98373e12d0c072-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-805f7c1e1bf3c367ae76120986643932-d038b67c9ea97fd8-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.727 UTC +3047 ms image inside iframe GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/r/SNsiR5VY/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a5778f70a40d3abc5a32b4b8d96e69d6-47df82f81fd05915-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a5778f70a40d3abc5a32b4b8d96e69d6-fe72d1c67e8d398f-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.728 UTC +3048 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "cache-control": "max-age=0",
  "content-length": "390",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-c2b9602bb816a4a83b37cad4ecddd9c5-89d5dc6e7803fe3f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c2b9602bb816a4a83b37cad4ecddd9c5-0171dca95ec11fb6-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":721,\"columnNumber\":1}}"
}
2026-06-23 09:46:26.728 UTC +3048 ms CSS background-image GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-24088eab679545a61a6d748c468e8893-fe5b2aed0995e447-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-24088eab679545a61a6d748c468e8893-8cbbae213e5432b9-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.728 UTC +3048 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "cache-control": "max-age=0",
  "content-length": "412",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d8d30624b66fc069dc02bbea65f7955a-c4af5e222d3f0546-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d8d30624b66fc069dc02bbea65f7955a-255bae55cf5d1cf5-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/SNsiR5VY/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com:443/r/SNsiR5VY/main.js\",\"lineNumber\":45,\"columnNumber\":23}}"
}
2026-06-23 09:46:26.728 UTC +3048 ms CSP violation report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "cache-control": "max-age=0",
  "content-length": "435",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-847ff3fb0fd30f72b6d225ea906a4b80-dc1c262808fbdf7b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-847ff3fb0fd30f72b6d225ea906a4b80-6a3713ebd2fb688b-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com:443/r/SNsiR5VY/main.js\",\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1\"}"
}
2026-06-23 09:46:26.896 UTC +3216 ms favicon GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (13) 
{
  "accept-encoding": "gzip, deflate",
  "accept-language": "en-US,en;q=0.9,he;q=0.8",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "none",
  "traceparent": "00-1d32521b3b42e9fc9d590240ccd1fb19-e1877530148bb34a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-1d32521b3b42e9fc9d590240ccd1fb19-780e01ea52aeb762-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:26.898 UTC +3218 ms apple-touch-icon GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (13) 
{
  "accept-encoding": "gzip, deflate",
  "accept-language": "en-US,en;q=0.9,he;q=0.8",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "none",
  "traceparent": "00-a4540aa04c562c6f3af1aa70b6666775-7f2642fa9f623953-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a4540aa04c562c6f3af1aa70b6666775-1d12eee74bc4d6a1-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 09:46:29.506 UTC +5826 ms client timing POST POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8",
  "cache-control": "max-age=0",
  "content-length": "3087",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8899bb6cf8400ff07d8f23a898396d66-9f81eaa4d6a043ce-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) EdgiOS/149.0.4022.68 Version/26.0 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8899bb6cf8400ff07d8f23a898396d66-dc0515aec64b3407-01",
  "x-deno-userspace-tracestate": ""
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
report other 1501ms 1552ms
style.css link 1502ms 1328ms
font.woff2 link 1502ms 1798ms
manifest.json other 1503ms 2296ms
preload.png link 1503ms 2595ms
report other 1504ms 4279ms
photo.png img 1575ms 3394ms
report other 1576ms 4281ms
main.js script 1577ms 821ms
module.js script 1577ms 1039ms
iframe iframe 1578ms 616ms
import.css css 2831ms 721ms
js-ran.gif?t=1782207986563 img 3560ms 1913ms
report other 3563ms 2211ms
css-bg.png css 3573ms 1649ms
csp-report other 3581ms 2142ms
report other 3585ms 2237ms
module-ran.gif?t=1782207986591 img 3588ms 2200ms
css-font.woff2 css 3599ms 1151ms