ua-tracer
by Paul Kinlan
trace WqLuQTID
what does a user agent actually fetch, follow & run?
Trace WqLuQTID
First seen: 2026-10-14 02:41:03.648 UTC
User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✗ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-10-14 02:41:03.648 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-847808e887f6a3c849afe7243e7a2db6-300dcf921294c60f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.078 UTC | +9430 ms | CSS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-2281eb02b31eb5e72ba1e4c6d0386a25-18653a5d35766b0a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.079 UTC | +9431 ms | font (HTML) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-040070acd79d19474b6f88c5f2c46dee-fc615bca4c8eb42e-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.081 UTC | +9433 ms | favicon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-cc1775b3b3da4cae0a51d1a9c9533039-8e370be667c0e0b0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.115 UTC | +9467 ms | web app manifest | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-5a778bfa8165659c20d6365ccf8a06dc-e783e55dffa19616-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.158 UTC | +9510 ms | apple-touch-icon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-0e8ec69d9ab64b2e2e961819843e646b-0ad8ae82fdfbc4a8-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.161 UTC | +9513 ms | preload (image) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-00133a69b7b38b03922dbad838a0d3c0-bb9ff71f188dea66-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.183 UTC | +9535 ms | prefetch | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-8505ca9b3d82f823b3c215f86ba361b0-255c05a3034bcde1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.217 UTC | +9569 ms | image | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-4f6f4f593774357d8dfef6eeaba3b68d-7ccf47b99db81fe8-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.233 UTC | +9585 ms | ES module | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-a30aa0dc0f96d19fb3fd4b8bce15aab3-d371370f30adcc10-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-14 02:41:13.237 UTC | +9589 ms | JS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-f0805730761a5bd15b1be8385c09bf0d-8db3abeb1cc75735-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||