ua-tracer by Paul Kinlan

trace j2bTG5sL

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace j2bTG5sL

First seen: 2026-11-07 01:18:51.993 UTC
User-Agent: android
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✓ fetched JS ✓ fetched image ✗ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-11-07 01:18:51.993 UTC +0 ms homepage GET android
request headers (20) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh-CN",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "referer": "http://m.baidu.com/s?wd=plusxp5",
  "sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-76b8ef02fb80667899e541e04ddb3da1-a724a74101979568-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "android",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-11-07 01:18:56.516 UTC +4523 ms JS GET android
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh-CN,zh",
  "cache-control": "no-cache",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "http://m.baidu.com/s?wd=plusxp5",
  "sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a8bfb4c465f277c2a796390382ccd367-178f9a0f49355dc1-01",
  "tracestate": "",
  "user-agent": "android",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-11-07 01:18:56.520 UTC +4527 ms ES module GET android
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh-CN,zh",
  "cache-control": "no-cache",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "http://m.baidu.com/s?wd=plusxp5",
  "sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a75965edffb3ca4b2f70c25d3901deff-86e2ab514f85a1ce-01",
  "tracestate": "",
  "user-agent": "android",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-11-07 01:18:56.606 UTC +4613 ms prefetch GET android
request headers (20) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh-CN,zh",
  "cache-control": "no-cache",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "purpose": "prefetch",
  "referer": "http://m.baidu.com/s?wd=plusxp5",
  "sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f9a8e6bd2d3050355899c9c9406315a2-0e6c6d9adfc7e9bb-01",
  "tracestate": "",
  "user-agent": "android",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-11-07 01:18:56.611 UTC +4618 ms iframe document GET android
request headers (20) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh-CN",
  "cache-control": "no-cache",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d5bff4b17e0e92c0660528ba9f9d7269-87732c6af82a116e-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "android",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-11-07 01:18:59.328 UTC +7335 ms client timing POST POST android
request headers (22) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh-CN,zh",
  "cache-control": "no-cache",
  "content-length": "1696",
  "content-type": "application/json",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "referer": "http://m.baidu.com/s?wd=plusxp5",
  "sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-102e0039244f8a70e851f2e120bbc106-5a904efca2ca3e19-01",
  "tracestate": "",
  "user-agent": "android",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-11-07 01:19:12.404 UTC +20411 ms iframe document GET Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.40 Mobile Safari/537.36
request headers (9) 
{
  "accept-charset": "utf-8",
  "accept-encoding": "gzip",
  "connection": "close",
  "host": "uatracer.com",
  "referer": "https://m.baidu.com/",
  "traceparent": "00-bdbc522f2f056a61b306d0bb1c502d5b-d0cce7b8c364b9d9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 8.0; Pixel 2 Build/OPD3.170816.012) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.5005.40 Mobile Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
2026-11-07 01:19:32.526 UTC +40533 ms iframe document GET android
request headers (20) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh-CN",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "referer": "http://m.baidu.com/s?wd=arrivemdk",
  "sec-ch-ua": "\"Chromium\";v=\"134\", \"Not:A-Brand\";v=\"24\", \"HeadlessChrome\";v=\"134\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Windows\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-9216a4fd21a40246bd2cacddb3a5b1af-889e4adc69719ab5-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "android",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-11-09 04:44:55.028 UTC +185163035 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-1a25d0ce84257a7fd1a8562f1196e08c-efa18cc4f7f64db9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-1a25d0ce84257a7fd1a8562f1196e08c-0bcf9dd6a163840f-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-09 04:44:57.408 UTC +185165415 ms image inside iframe GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-e5d1d111ba94b5bd1f70456eea5f43a4-78f3348574494fbb-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e5d1d111ba94b5bd1f70456eea5f43a4-f1ac48651fd81468-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-09 09:13:10.749 UTC +201258756 ms ES module executed GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-a39abf4b509a5a963bb27f9bb9747645-1da13e6c6007a28d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a39abf4b509a5a963bb27f9bb9747645-f5468eb273d9e153-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-09 09:13:22.561 UTC +201270568 ms image GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-36dbfab4d9e0be4930b0e6c9d77ff9da-71281f4466d417dd-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-36dbfab4d9e0be4930b0e6c9d77ff9da-c2c69862947000be-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-09 10:08:59.341 UTC +204607348 ms JS executed beacon GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-8d30195e7ac012875c014cbdd023b66d-5a6f7c28a5ca78df-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8d30195e7ac012875c014cbdd023b66d-1b77f8216b83f973-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-09 11:01:04.904 UTC +207732911 ms preload (image) GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-096eeea20fb4a982380dfc41ca8fbc0f-f054ea7e49a2789a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-096eeea20fb4a982380dfc41ca8fbc0f-1ed0b2f7b8ad8c18-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-09 17:48:17.543 UTC +232165550 ms prefetch GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-61e8cb986c9d008cc253817894dc4561-bd2553dcca9d18fc-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-61e8cb986c9d008cc253817894dc4561-1b9eada4e059a1fc-01",
  "x-deno-userspace-tracestate": ""
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 8853ms 91ms
font.woff2 link 8853ms 93ms
preload.png link 8853ms 104ms
photo.png img 8854ms 107ms
main.js script 8854ms 1037ms
module.js script 8854ms 1488ms
prefetch.png link 8855ms 1886ms
iframe iframe 8859ms 2282ms
js-ran.gif?t=1794014337346 img 9894ms 394ms
module-ran.gif?t=1794014337808 img 10355ms 188ms