ua-tracer
by Paul Kinlan
trace dUfTEFlq
what does a user agent actually fetch, follow & run?
Trace dUfTEFlq
First seen: 2026-09-13 23:43:01.777 UTC
User-Agent: pc
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✗ fetched CSS
✓ fetched JS
✓ fetched image
✗ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✗ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✓ EXECUTED classic JS
✓ EXECUTED ES module
✓ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-09-13 23:43:01.777 UTC | +0 ms | homepage | GET | pc |
request headers (20){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "zh-CN",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=0, i",
"referer": "http://m.baidu.com/s?wd=crack931",
"sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
"sec-ch-ua-mobile": "?1",
"sec-ch-ua-platform": "\"Windows\"",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-fetch-user": "?1",
"traceparent": "00-ef06ebe0ea407a124da585aad381aace-4b9816d80bd7d942-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "pc",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-13 23:43:11.858 UTC | +10081 ms | prefetch | GET | pc |
request headers (20){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "zh-CN,zh",
"cache-control": "no-cache",
"cookie": "[redacted]",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=4, i",
"purpose": "prefetch",
"referer": "http://m.baidu.com/s?wd=crack931",
"sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
"sec-ch-ua-mobile": "?1",
"sec-ch-ua-platform": "\"Windows\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-dd45d254e97a8923958b3091afd939e7-f3f9bf57ecd43cdf-01",
"tracestate": "",
"user-agent": "pc",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-13 23:43:11.986 UTC | +10209 ms | JS | GET | pc |
request headers (19){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "zh-CN,zh",
"cache-control": "no-cache",
"cookie": "[redacted]",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=1",
"referer": "http://m.baidu.com/s?wd=crack931",
"sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
"sec-ch-ua-mobile": "?1",
"sec-ch-ua-platform": "\"Windows\"",
"sec-fetch-dest": "script",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-76dcf41da46ed7a25234ab7e99fe9b9a-5dc2494c03713a3d-01",
"tracestate": "",
"user-agent": "pc",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-13 23:43:12.063 UTC | +10286 ms | iframe document | GET | pc |
request headers (20){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "zh-CN",
"cache-control": "no-cache",
"cookie": "[redacted]",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=0, i",
"referer": "https://uatracer.com/",
"sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
"sec-ch-ua-mobile": "?1",
"sec-ch-ua-platform": "\"Windows\"",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"traceparent": "00-0512bd0c32725d27e167e6d2123c84ca-fd987fc883b785a7-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "pc",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-13 23:43:12.093 UTC | +10316 ms | ES module | GET | pc |
request headers (20){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "zh-CN,zh",
"cache-control": "no-cache",
"cookie": "[redacted]",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"pragma": "no-cache",
"priority": "u=1",
"referer": "http://m.baidu.com/s?wd=crack931",
"sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
"sec-ch-ua-mobile": "?1",
"sec-ch-ua-platform": "\"Windows\"",
"sec-fetch-dest": "script",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-6d4143b07d9b4948689bace7e207a66c-3ef01e987404ad2e-01",
"tracestate": "",
"user-agent": "pc",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-13 23:43:33.818 UTC | +32041 ms | client timing POST | POST | pc |
request headers (22){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "zh-CN,zh",
"cache-control": "no-cache",
"content-length": "1704",
"content-type": "application/json",
"cookie": "[redacted]",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"pragma": "no-cache",
"priority": "u=4, i",
"referer": "http://m.baidu.com/s?wd=crack931",
"sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
"sec-ch-ua-mobile": "?1",
"sec-ch-ua-platform": "\"Windows\"",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-e74776c452b668ea89e70a39a41a2175-3a61693ab4c3f03d-01",
"tracestate": "",
"user-agent": "pc",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-14 09:25:57.977 UTC | +34976200 ms | iframe document | GET | Mozilla/5.0 (Macintosh: Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15 |
request headers (8){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-3c1f789d97de474f898c145e65448bbb-bb587cfed16b1225-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh: Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.2 Safari/605.1.15",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-16 02:15:01.543 UTC | +181919766 ms | ES module executed | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-55b94f69ea76497de2b63f641aa61d04-fea65f1ce8194415-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-55b94f69ea76497de2b63f641aa61d04-1a90d436de169652-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-16 02:47:17.571 UTC | +183855794 ms | image | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-8302e7202d4385f0c6345cc4bed35ace-183cdc0d7dc03f50-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-8302e7202d4385f0c6345cc4bed35ace-6cd806ec056fc49c-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-16 09:55:02.905 UTC | +209521128 ms | iframe document | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-e8fa5cc7ce74c07bb1f6d7aed628aef9-13bd3f9e418f9b98-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-e8fa5cc7ce74c07bb1f6d7aed628aef9-39f3c8d1e0eed16c-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-16 09:55:07.325 UTC | +209525548 ms | image inside iframe | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-1380157b98339a750ba5ddd45f1926a1-0312729702f7c0b8-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-1380157b98339a750ba5ddd45f1926a1-2e677e86c04e20bc-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-16 11:19:21.644 UTC | +214579867 ms | preload (image) | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-16d7d9635eb730825dfc5ea574aeb870-98e7b97ee22ac18b-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-16d7d9635eb730825dfc5ea574aeb870-099c9b9cf26965f2-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-16 18:20:30.110 UTC | +239848333 ms | JS executed beacon | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (7){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-1f93992e0461d9677e2ab4a969b34b92-f552e911864b548c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-16 18:56:53.941 UTC | +242032164 ms | prefetch | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-430ea613158e9742981008e77babdffb-997f3afa1d213a9c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-430ea613158e9742981008e77babdffb-e3138fa071131440-01",
"x-deno-userspace-tracestate": ""
}
|
||||
Client-side resource waterfall
Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real
browser-grade engine, not just a downloader.
| Resource | Initiator | Start | Duration | Timeline |
|---|---|---|---|---|
| link | 6000ms | 6168ms | ||
| link | 6004ms | 6246ms | ||
| link | 6050ms | 6226ms | ||
| link | 6053ms | 7195ms | ||
| iframe | 6167ms | 7923ms | ||
| img | 6167ms | 6292ms | ||
| script | 6175ms | 7571ms | ||
| script | 6176ms | 7271ms | ||
| img | 13758ms | 7147ms | ||
| img | 13759ms | 7195ms |