ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace dNH4kzm8

First seen: 2026-06-25 13:30:41.231 UTC
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✗ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-25 13:30:41.231 UTC +0 ms homepage GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (20)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/jxl,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-3be17844d9b74b1f43a90a4ec04c25b0-dcfa32325d11dfef-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-3be17844d9b74b1f43a90a4ec04c25b0-9d4bb47d60e8f942-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:41.912 UTC +681 ms font (HTML) GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (20)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-c5281fa9fc7d660fda8fd597ecf36cab-f91ddf0296eaff11-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c5281fa9fc7d660fda8fd597ecf36cab-6065df4128912e90-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:41.912 UTC +681 ms CSS GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e746bd57ce82e4289f5894e3f186018c-190b3578e2479206-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e746bd57ce82e4289f5894e3f186018c-dec2cbc9e3fe3a15-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:41.920 UTC +689 ms preload (image) GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "image/jxl,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5919ef15172e7b6835e49ea782313396-e74ead52f5c03f85-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-5919ef15172e7b6835e49ea782313396-98d0d8bde8345d38-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:41.920 UTC +689 ms prefetch GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (20)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/jxl,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-703480f44305c27c1914581e9244a552-cf1eaaae67a56f5b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-703480f44305c27c1914581e9244a552-dc25f92273c00762-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:42.012 UTC +781 ms ES module GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (20)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a054c722ce980e8957ae0eec67a31c2e-935ec0c80a8a37d3-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a054c722ce980e8957ae0eec67a31c2e-d39012409168921d-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:42.012 UTC +781 ms JS GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ab29e4a91f09b8373c334a6c2d93d3d5-fe8d04f0b04c2262-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-ab29e4a91f09b8373c334a6c2d93d3d5-0e10f2117d65c845-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:42.013 UTC +782 ms image GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "image/jxl,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-2d7a6ffc3ec26ab734de092770653580-337170e9b7f64b99-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-2d7a6ffc3ec26ab734de092770653580-1fd515ce35417daf-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:42.776 UTC +1545 ms web app manifest GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-174d8c6e03af99085a5124fbb3444f38-e18da5091263a3f7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-174d8c6e03af99085a5124fbb3444f38-fb5bf36c7d05a647-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:43.703 UTC +2472 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/dNH4kzm8/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-c49a8839f185da47cb68aad62e523850-202def0adc610304-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c49a8839f185da47cb68aad62e523850-7a6f38d4d2ecd5ba-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:44.268 UTC +3037 ms JS executed beacon GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "image/jxl,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b49d9f3eb665cc7e3a1c899bd86e91fa-f3f63b966a3513b0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b49d9f3eb665cc7e3a1c899bd86e91fa-56619221a830eab6-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:44.276 UTC +3045 ms CSS @font-face GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (20)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/dNH4kzm8/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-73d109c4fde851c02a62a2a6fb990895-655e27e237f4179b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-73d109c4fde851c02a62a2a6fb990895-a1ab3fb090583360-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:44.280 UTC +3049 ms CSS background-image GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "image/jxl,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/r/dNH4kzm8/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-95b14e2a30a4f820797f73b143bcfb77-3f75ca58c49cac2a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-95b14e2a30a4f820797f73b143bcfb77-f584a7d2ee699b2b-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:44.283 UTC +3052 ms Reporting API report (POST) POST Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (23)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "content-length": "1741",
  "content-type": "application/json",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4f03a2509e188b458d613386daf89e8f-2920a3d8f7afbb97-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-4f03a2509e188b458d613386daf89e8f-648d6cbf7e783ec9-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":213,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":721,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/r/dNH4kzm8/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}"
}
2026-06-25 13:30:44.284 UTC +3053 ms CSP violation report (POST) POST Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (23)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "content-length": "384",
  "content-type": "application/json",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4f5b63ae8e078af25ca33cb691701578-ec8b089e3ba16d24-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-4f5b63ae8e078af25ca33cb691701578-dcc7020c607effb9-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/dNH4kzm8/main.js\",\"ua\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}"
}
2026-06-25 13:30:44.334 UTC +3103 ms ES module executed GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "image/jxl,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-fdaa40b407964ac2fb2e2657548407db-4ef78c6373fc6243-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-fdaa40b407964ac2fb2e2657548407db-4ebcc8f78cf09ec8-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:46.424 UTC +5193 ms favicon GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "image/jxl,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-042dde33c3baf75d88be3d19c3750ad5-bccfbf47c488315c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-042dde33c3baf75d88be3d19c3750ad5-680614b1af4e03e4-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:30:47.030 UTC +5799 ms client timing POST POST Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (22)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "content-length": "2804",
  "content-type": "application/json",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-aab8056c134ecdd73ee7bb0efa0c5888-9ed76f321e9aef54-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-aab8056c134ecdd73ee7bb0efa0c5888-82c26c09060d5930-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-25 13:31:13.545 UTC +32314 ms Reporting API report (POST) POST Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (14)
{
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9,hi;q=0.8",
  "content-length": "2086",
  "content-type": "application/reports+json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "traceparent": "00-1ad4bb8088a804397f559fa4acfa56d7-a6a791d50dd1f1f4-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-1ad4bb8088a804397f559fa4acfa56d7-df4ec31257fb06b4-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "[{\"age\":31630,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-elem\",\"lineNumber\":9,\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"},{\"age\":31629,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":213,\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"},{\"age\":31538,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":721,\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"},{\"age\":29278,\"body\":{\"blockedURL\":\"inline\",\"columnNumber\":11,\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":45,\"originalPolicy\":\"style-src 'self'; report-uri /r/dNH4kzm8/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/r/dNH4kzm8/main.js\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}]"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 1570ms 1793ms
font.woff2 link 1570ms 1143ms
preload.png link 1570ms 584ms
prefetch.png link 1575ms 952ms
manifest.json link 1576ms 1419ms
iframe iframe 1667ms 701ms
photo.png img 1668ms 1463ms
main.js script 1668ms 1971ms
module.js script 1668ms 1231ms
import.css css 3364ms 561ms
js-ran.gif?t=1782394243618 img 3927ms 1578ms
css-bg.png css 3929ms 2012ms
css-font.woff2 css 3929ms 719ms
csp-report beacon 3939ms 1081ms
report beacon 3939ms 1327ms
module-ran.gif?t=1782394243637 img 3944ms 2136ms
favicon.ico other 6084ms 566ms