ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace idCgX2Zu

First seen: 2026-06-23 17:42:54.377 UTC
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-23 17:42:54.377 UTC +0 ms homepage GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-49dc32e33c85044e78b37196aab0ecd8-960e3baeac23f602-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:54.865 UTC +488 ms CSS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f0f74f928f7eafaaef6ae34aebf226ff-0ce19c626b2b9d86-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:54.867 UTC +490 ms font (HTML) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-cd7a39d59260c4ec5be7edeae16fbcdb-0e2efc40424ccf1e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:54.868 UTC +491 ms ES module GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-dd2331335e8745d22def7a2cfdd92a0a-ae6749fc905719b6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:54.869 UTC +492 ms JS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5bafd4f309b21ab3cd5eda5ab3257602-e9342c04beacefa3-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:54.869 UTC +492 ms preload (image) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-c3e5faf0f2127346f85264b6657b66e0-25beaec42b5fee28-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:54.872 UTC +495 ms image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b3fdb4bbd066191723e08a9e9b35d6db-eac77f1bbd222569-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:54.888 UTC +511 ms prefetch GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-22b7803e4135e7d50b96477b4f40efcd-b161c93989055671-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:55.448 UTC +1071 ms web app manifest GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-2fdc0b4beab11a5413888b4db2484bba-27cdec217b0a43d9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-2fdc0b4beab11a5413888b4db2484bba-1295a4f1ce8557c4-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 17:42:56.787 UTC +2410 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/idCgX2Zu/style.css",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-67582801f639f2b9ca28df4b8048935a-f7a4b073936c7870-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:57.325 UTC +2948 ms CSS @font-face GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/idCgX2Zu/style.css",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-3c3fa68cdb2fa9be869c23809e0c3c54-b3d5abed76bb4ead-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:57.328 UTC +2951 ms JS executed beacon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-bb977d2566f8c1c8d1a3b0fa1fae009d-cfedaa74eac36343-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:57.335 UTC +2958 ms CSS background-image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/r/idCgX2Zu/style.css",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a4cd91bc2b9c988b2e9e44b18aab0c27-77f95d2e0e9484e9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:57.366 UTC +2989 ms Reporting API report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "content-length": "1741",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-148c1d87efd6c00aed04ee76e363be0d-9665aa1b0bf92c82-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":213,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":721,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/r/idCgX2Zu/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36\"}"
}
2026-06-23 17:42:57.368 UTC +2991 ms CSP violation report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "content-length": "384",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-9690ae0aa3fa5c92d7b807342ebdfad2-265c71ed735bb27f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/idCgX2Zu/main.js\",\"ua\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36\"}"
}
2026-06-23 17:42:57.388 UTC +3011 ms ES module executed GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b209b986073e04dd2f01fd4be2dd1931-d3d3840e90748fdc-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:59.035 UTC +4658 ms apple-touch-icon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-fd7ed8e6853fa1bb27d6f5a3b6870ea2-94bdf0eb11a7cfe2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:59.036 UTC +4659 ms favicon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (16) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-df4f6856055c6d926f702295fa5808e1-87c9ac67250b0352-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:42:59.658 UTC +5281 ms client timing POST POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "content-length": "2809",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not;A=Brand\";v=\"8\", \"Chromium\";v=\"150\", \"Google Chrome\";v=\"150\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d99e8d74387fb6e793b6807292325f9a-6a67eb878e52b959-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 17:43:46.335 UTC +51958 ms Reporting API report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36
request headers (12) 
{
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7,ja;q=0.6",
  "content-length": "2086",
  "content-type": "application/reports+json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "traceparent": "00-9e32b156f91664fce75e3e6a6d51f828-3a9ff9986603e3ec-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "[{\"age\":48989,\"body\":{\"blockedURL\":\"inline\",\"columnNumber\":11,\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":45,\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/r/idCgX2Zu/main.js\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36\"},{\"age\":51414,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":721,\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36\"},{\"age\":51415,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":213,\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36\"},{\"age\":51415,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-elem\",\"lineNumber\":9,\"originalPolicy\":\"style-src 'self'; report-uri /r/idCgX2Zu/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Mobile Safari/537.36\"}]"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 549ms 1913ms
font.woff2 link 549ms 540ms
preload.png link 549ms 725ms
photo.png img 549ms 1768ms
main.js script 549ms 1042ms
module.js script 549ms 1500ms
prefetch.png link 554ms 1219ms
iframe iframe 556ms 557ms
manifest.json link 1122ms 528ms
import.css css 2464ms 530ms
js-ran.gif?t=1782236577570 img 3004ms 951ms
css-bg.png css 3008ms 682ms
css-font.woff2 css 3009ms 520ms
csp-report beacon 3031ms 1195ms
report beacon 3034ms 1458ms
module-ran.gif?t=1782236577611 img 3040ms 1653ms
apple-touch-icon.png other 4713ms 531ms