ua-tracer
by Paul Kinlan
trace indBX1Rc
what does a user agent actually fetch, follow & run?
Trace indBX1Rc
First seen: 2026-10-08 02:09:58.110 UTC
User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✗ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-10-08 02:09:58.110 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-67b2049606c722e83a0796bb4af2ab39-e7b0bbb193beec06-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.603 UTC | +10493 ms | font (HTML) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-3a08f8c13361b0f44155fe9e0120484f-69db28d57e4a7b4f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.610 UTC | +10500 ms | favicon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-fb7569aa21f312c5dd599a796df9e963-43e27180d70bc374-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.627 UTC | +10517 ms | web app manifest | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-b4bfff76740ead7f8c08b49aa26ce915-be0c0b69acab2372-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.631 UTC | +10521 ms | apple-touch-icon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-c89c039cc3d2daca7b1ac7d3825da615-1b89d652da632bbb-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.631 UTC | +10521 ms | CSS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-fb7f1444a991920051081d2c5ef77b0e-58b7993311d621ab-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.650 UTC | +10540 ms | preload (image) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-809bbb8001445e72d45ba3ef70e6889a-94850749ab9e07b1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.664 UTC | +10554 ms | prefetch | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-71733d62a7359d194ab7cf78d4f33aff-9e8c63df8241210d-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.675 UTC | +10565 ms | image | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-481144022b8977c48cbf0906783e8295-e9456fd78beeb649-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.711 UTC | +10601 ms | JS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-45447893e925bf576b913770cc712e12-a5880d1a0d62fc43-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-08 02:10:08.714 UTC | +10604 ms | ES module | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-3b38c3971f9a912d8d14d38dd1e3c86e-b1f2a766baa2359e-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||