ua-tracer
by Paul Kinlan
trace i0p6IAqs
what does a user agent actually fetch, follow & run?
Trace i0p6IAqs
First seen: 2026-08-09 15:20:18.536 UTC
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✗ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✗ fetched web manifest
✓ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✓ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✓ sent a CSP/Reporting report (any path)
✓ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-08-09 15:20:18.536 UTC | +0 ms | homepage | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=0, i",
"referer": "https://webweekly.email/",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "cross-site",
"sec-fetch-user": "?1",
"te": "trailers",
"traceparent": "00-63612f93f75f97fb14e83931bfa1927f-8da673d13d46eb45-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:21.506 UTC | +2970 ms | font (HTML) | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-29929e1eef7c09d763eec781ef39afc4-6b79adab732c041f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:21.508 UTC | +2972 ms | CSS | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-9b5ae1827b08b1e2472073d55ff76980-6aab4284ea51d6ed-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:21.556 UTC | +3020 ms | preload (image) | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-cd8eb9e358cb68be858f18e57c042e90-7e376906a99e3dbb-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:21.591 UTC | +3055 ms | image | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-1a0753c65de39db6fe2ae5e14ac56d3e-93fdf562c7e64273-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:21.599 UTC | +3063 ms | Reporting API report (POST) | POST | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (20){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"content-length": "596",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-538937f4f1558f594f6b3cf0a7fa53fb-dad9987c7d44458c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "[\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/i0p6IAqs/4n50RfqQ/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"<anonymous code>\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 51,\n \"columnNumber\": 18\n}\n\n }\n]"
}
|
||||
| 2026-08-09 15:20:21.623 UTC | +3087 ms | iframe document | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-deaaac34cbb591f89aea1c2860a5b491-d819def7d4e7dca1-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:21.641 UTC | +3105 ms | Reporting API report (POST) | POST | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (20){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"content-length": "2986",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-ba597a8c36cea22eb904ff6ac09f34cd-eacf2750f5433091-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "[\n {\n \"age\": 31,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/i0p6IAqs/4n50RfqQ/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 9,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 30,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/i0p6IAqs/4n50RfqQ/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"<anonymous code>\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 56,\n \"columnNumber\": 39\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/i0p6IAqs/4n50RfqQ/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/i0p6IAqs/4n50RfqQ/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://webweekly.email/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/i0p6IAqs/4n50RfqQ/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n }\n]"
}
|
||||
| 2026-08-09 15:20:22.323 UTC | +3787 ms | image inside iframe | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/r/i0p6IAqs/4n50RfqQ/iframe",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-c30a4241ea03c175b56d47eff49f6d16-90a381279a3565c0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:24.356 UTC | +5820 ms | CSS @import (nested stylesheet) | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/r/i0p6IAqs/4n50RfqQ/style.css",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-9bce56cb0c76e2aa8e79b4e6a41ec227-63c11aa1a1036f01-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:25.077 UTC | +6541 ms | apple-touch-icon | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=6",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-6418b2cd651707e54b40f07aa2af0c98-4d520a60c19f70f0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:25.084 UTC | +6548 ms | favicon | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=6",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-184983ad542e5fff448db2bd85c0418e-0f47724165d77325-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:25.092 UTC | +6556 ms | CSS background-image | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (16){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4, i",
"referer": "https://uatracer.com/r/i0p6IAqs/4n50RfqQ/style.css",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-52ce1b9659abb293ac7e7992e339bcd7-8052973ba12a5c8a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-08-09 15:20:25.107 UTC | +6571 ms | CSS @font-face | GET | Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0 |
request headers (15){
"accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "sv-SE",
"cookie": "ua-tracer-trace=i0p6IAqs",
"dnt": "1",
"host": "uatracer.com",
"referer": "https://uatracer.com/r/i0p6IAqs/4n50RfqQ/style.css",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"te": "trailers",
"traceparent": "00-aaca0465fa6bb1c04be633edf3ccbbee-c724111652529eb7-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (X11; Linux x86_64; rv:153.0) Gecko/20100101 Firefox/153.0",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||