ua-tracer by Paul Kinlan

trace TpfQVrVs

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace TpfQVrVs

First seen: 2026-07-14 18:29:52.351 UTC
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✗ fetched JS ✓ fetched image ✗ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✓ fetched apple-touch-icon ✗ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-14 18:29:52.351 UTC +0 ms homepage GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "te": "trailers",
  "traceparent": "00-2659aa12247e4543b4489caab294a1b8-ebcddce267f8b556-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:54.356 UTC +2005 ms CSS GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-c8da86590570275c42afa8715631aca1-d701ee3e6146ac95-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:54.360 UTC +2009 ms preload (image) GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-14276d61e5b8601ddda95e94f7111d15-a0712ae2fb7ddac6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:54.368 UTC +2017 ms image GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-01f7d18a0fc02f2b53fea19ee1401635-a277dec7a1576e08-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:54.419 UTC +2068 ms iframe document GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-0ecf0bd6009811c32bb065e218a55363-9b8831ddffb21643-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:54.998 UTC +2647 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/r/TpfQVrVs/VGqIqn2b/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-7e3f6a23c62328baa599740f7165fea6-b950238e55100532-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:55.682 UTC +3331 ms CSS background-image GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/r/TpfQVrVs/VGqIqn2b/style.css",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-df791a6513f9cf5c5f56141ea273f2c6-2bb0ea374efaf570-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:55.860 UTC +3509 ms apple-touch-icon GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-01832a1045850df801827027f207755c-31d6c79504388efe-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:55.884 UTC +3533 ms favicon GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-2dbfe20fcf057d048fef6a400ba9708c-ac3469fd935dbb16-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 18:29:56.318 UTC +3967 ms image inside iframe GET Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0
request headers (14) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de,en;q=0.7,en-US;q=0.3",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/r/TpfQVrVs/VGqIqn2b/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "te": "trailers",
  "traceparent": "00-d15d69ff8707e7626b15a73ba2f1b41b-d99bbbb1712e6f9b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:140.0) Gecko/20100101 Firefox/140.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-14 21:34:27.515 UTC +11075164 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip",
  "accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
  "cache-control": "no-cache",
  "connection": "keep-alive, close",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "traceparent": "00-5ab0354140d9b0e4b9f4ceb2ca5324d4-cd5f9754569aa6e3-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-5ab0354140d9b0e4b9f4ceb2ca5324d4-288e55a41f3580d7-01",
  "x-deno-userspace-tracestate": ""
}