ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace aa2hOZyN

First seen: 2026-07-03 04:32:44.519 UTC
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✓ fetched JS ✗ fetched image ✗ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-03 04:32:44.519 UTC +0 ms homepage GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0
request headers (12) 
{
  "accept": "*/*",
  "accept-encoding": "br, gzip, deflate",
  "accept-language": "*",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "sec-fetch-mode": "cors",
  "traceparent": "00-5e7080efdf092782be89ca07501350a6-9b7045f9fd85f30d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 Edg/121.0.0.0",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-5e7080efdf092782be89ca07501350a6-f56d4f4fc4d5d269-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 04:32:46.055 UTC +1536 ms JS GET Mozilla/5.0 (compatible; PulseGate-Indexer/1.0; +https://www.pulsegate.ai)
request headers (12) 
{
  "accept": "*/*",
  "accept-encoding": "br, gzip, deflate",
  "accept-language": "*",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "sec-fetch-mode": "cors",
  "traceparent": "00-c1a13c473be2a1aa6477c55774ac65a1-fd36c2eccdd13877-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; PulseGate-Indexer/1.0; +https://www.pulsegate.ai)",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c1a13c473be2a1aa6477c55774ac65a1-4c8b6da1dd01b7fb-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 04:32:46.099 UTC +1580 ms ES module GET Mozilla/5.0 (compatible; PulseGate-Indexer/1.0; +https://www.pulsegate.ai)
request headers (12) 
{
  "accept": "*/*",
  "accept-encoding": "br, gzip, deflate",
  "accept-language": "*",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "sec-fetch-mode": "cors",
  "traceparent": "00-b04126251341508bf7a4488a49ddefce-685220d5d6e9775f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; PulseGate-Indexer/1.0; +https://www.pulsegate.ai)",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b04126251341508bf7a4488a49ddefce-a927c3f31a851096-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-03 05:58:49.710 UTC +5165191 ms favicon GET vercel-image-optimization/1.0
request headers (13) 
{
  "accept": "*/*",
  "accept-encoding": "br, gzip, deflate",
  "accept-language": "*",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "sec-fetch-mode": "cors",
  "traceparent": "00-43034b1d7865aa914548219ae018f1ba-974fd29c3047b2a4-01",
  "tracestate": "",
  "user-agent": "vercel-image-optimization/1.0",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-43034b1d7865aa914548219ae018f1ba-c27e177c0ee65bcb-01",
  "x-deno-userspace-tracestate": "",
  "x-vercel-id": "fra1::jcmcl-1783058329533-73ea8aea9d7f"
}
2026-07-03 05:58:49.924 UTC +5165405 ms favicon GET vercel-image-optimization/1.0
request headers (11) 
{
  "accept": "*/*",
  "accept-encoding": "br, gzip, deflate",
  "accept-language": "*",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "sec-fetch-mode": "cors",
  "traceparent": "00-75831f5489db4630620824337f1a6414-e04215e93228d9bf-01",
  "tracestate": "",
  "user-agent": "vercel-image-optimization/1.0",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-vercel-id": "fra1::7qhk9-1783058329517-789e4fb85efb"
}
2026-07-03 06:51:11.262 UTC +8306743 ms favicon GET vercel-image-optimization/1.0
request headers (13) 
{
  "accept": "*/*",
  "accept-encoding": "br, gzip, deflate",
  "accept-language": "*",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "sec-fetch-mode": "cors",
  "traceparent": "00-462b769ac479297503e7259a8e14a0c3-7f72f06d01583156-01",
  "tracestate": "",
  "user-agent": "vercel-image-optimization/1.0",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-462b769ac479297503e7259a8e14a0c3-7607969b5b9ccad3-01",
  "x-deno-userspace-tracestate": "",
  "x-vercel-id": "fra1::rgpz2-1783061471075-45cefe5ce9b9"
}