ua-tracer by Paul Kinlan

trace U8oELc4b

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace U8oELc4b

First seen: 2026-07-06 12:49:23.615 UTC
User-Agent: HanaleiBot runid=beta-stage-integration-test
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✓ fetched JS ✗ fetched image ✗ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-06 12:49:23.615 UTC +0 ms homepage GET HanaleiBot runid=beta-stage-integration-test
request headers (18) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-993eaec835f60f55f5eb70213437d3cd-47aa57cc6a21565a-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "HanaleiBot runid=beta-stage-integration-test",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-06 12:49:24.814 UTC +1199 ms prefetch GET HanaleiBot runid=beta-stage-integration-test
request headers (19) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=U8oELc4b",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-45601189720df28ac4381f74f1c03191-1ca37dfdecddc9fe-01",
  "tracestate": "",
  "user-agent": "HanaleiBot runid=beta-stage-integration-test",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-06 12:49:24.849 UTC +1234 ms iframe document GET HanaleiBot runid=beta-stage-integration-test
request headers (19) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=U8oELc4b",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e8cfeb394238539a17af40666aa8c4b0-22430c2abe47cbd7-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "HanaleiBot runid=beta-stage-integration-test",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-06 12:49:24.853 UTC +1238 ms ES module GET HanaleiBot runid=beta-stage-integration-test
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=U8oELc4b",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-121efa06352537dc1d390775df18f0a2-7b5d61acad5b1dd6-01",
  "tracestate": "",
  "user-agent": "HanaleiBot runid=beta-stage-integration-test",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-06 12:49:24.856 UTC +1241 ms JS GET HanaleiBot runid=beta-stage-integration-test
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "cookie": "ua-tracer-trace=U8oELc4b",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-7fd902987f7a2dc147c39531fa86e8b5-2e296373789324b3-01",
  "tracestate": "",
  "user-agent": "HanaleiBot runid=beta-stage-integration-test",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-06 12:49:25.865 UTC +2250 ms CSP violation report (POST) POST HanaleiBot runid=beta-stage-integration-test
request headers (22) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "content-length": "326",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=U8oELc4b",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-701ce6c0e28063179aa7ede3277bc75c-93e3914aebd4eab2-01",
  "tracestate": "",
  "user-agent": "HanaleiBot runid=beta-stage-integration-test",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/U8oELc4b/QyoshAJk/main.js\",\"ua\":\"HanaleiBot runid=beta-stage-integration-test\"}"
}
2026-07-06 12:49:25.868 UTC +2253 ms Reporting API report (POST) POST HanaleiBot runid=beta-stage-integration-test
request headers (22) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "cache-control": "no-cache",
  "content-length": "2119",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=U8oELc4b",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"148\", \"HeadlessChrome\";v=\"148\", \"Not/A)Brand\";v=\"99\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-2f7009f1f39588d5fcd1440d5093e457-76e5a2ed681bbf1e-01",
  "tracestate": "",
  "user-agent": "HanaleiBot runid=beta-stage-integration-test",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/U8oELc4b/QyoshAJk/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":243,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/U8oELc4b/QyoshAJk/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":247,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/U8oELc4b/QyoshAJk/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":755,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/U8oELc4b/QyoshAJk/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/r/U8oELc4b/QyoshAJk/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/U8oELc4b/QyoshAJk/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"HanaleiBot runid=beta-stage-integration-test\"}"
}