ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace kxgnAGx6

First seen: 2026-06-23 15:02:59.721 UTC
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-23 15:02:59.721 UTC +0 ms homepage GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://t.co/",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-32993c375e4abd07b4a99b3951319fb1-de5765c10fe0b68e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-32993c375e4abd07b4a99b3951319fb1-6ba6b67d07e3f7e4-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-23 15:03:00.296 UTC +575 ms CSS GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d2e4a9e5105f8b16097014ee41567250-9b29d9cd100df663-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:00.296 UTC +575 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "401",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-23148eb7c408f49f4bce7bf7067b5ac2-f9b0e503b1fc0f73-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://t.co/\",\"effectiveDirective\":\"style-src-elem\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":1}}"
}
2026-06-23 15:03:00.298 UTC +577 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-23b41072253f07f6367edbd4df9b87af-4dced898f44bfff1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:00.298 UTC +577 ms JS GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5b47ce2dd14ec929fbe8e2e1406a2d34-f53cb6a79b74e663-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:00.298 UTC +577 ms ES module GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-310b9188788ff58b5e15543aecd4a22f-bb80e121cd37e093-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:00.299 UTC +578 ms font (HTML) GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (14) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=3, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b9fc9871175997fa4d92a1e38779a31f-04fb745bca939229-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.129 UTC +1408 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-48e68c4c2cbbfdde5afca40bebab784d-ea6097f7c6988c62-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.594 UTC +1873 ms web app manifest GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-efd4df1e5ac0889ba6a0d675b08064c1-981fa76cbac46d02-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.612 UTC +1891 ms CSS @font-face GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=3, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-42f3a0f6b7d729f32c2ace0790735d8f-44b184260782b4a1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.684 UTC +1963 ms JS executed beacon GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-91dd9600d665321820576caf9d080619-45cfb912fcb4f21a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.685 UTC +1964 ms preload (image) GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-465bff793e60bbafa636cf051af25a4b-d75f82b4c7c48398-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.685 UTC +1964 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "403",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ee4e4b3a2b637aece33efbb581780f75-fb85fa40ac69a3e5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://t.co/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":213,\"columnNumber\":1}}"
}
2026-06-23 15:03:01.690 UTC +1969 ms image GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f6f094818fd2ca2d671bf9cbc42a7965-575e01cc17898bd8-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.690 UTC +1969 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "403",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-67092dcf81e95743c794064793d3649d-7742ae4e2efd8f43-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://t.co/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":721,\"columnNumber\":1}}"
}
2026-06-23 15:03:01.691 UTC +1970 ms image inside iframe GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/r/kxgnAGx6/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4d38efc45fd3cd6e70acef4f9d4df2e1-47c51070ceffd264-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.691 UTC +1970 ms CSS background-image GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d53020a127f215f08fb12c050ac7c9e7-ab0ceb9bb975d743-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:01.691 UTC +1970 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "1820",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-3cd0e80738a85ecb0371f8dd8ac4febb-cb2aa9f4d62e3426-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://t.co/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":9,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://t.co/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":213,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://t.co/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":721,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://t.co/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com:443/r/kxgnAGx6/main.js\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":45,\"columnNumber\":23}}],\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1\"}"
}
2026-06-23 15:03:01.691 UTC +1970 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "425",
  "content-type": "application/csp-report",
  "host": "uatracer.com",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-161838733ade2fb3476926384d3def46-f325e439708d9f8d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"disposition\":\"report\",\"referrer\":\"https://t.co/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/kxgnAGx6/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://uatracer.com:443/r/kxgnAGx6/main.js\",\"lineNumber\":45,\"columnNumber\":23}}"
}
2026-06-23 15:03:01.692 UTC +1971 ms CSP violation report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "411",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-53d9566b46237a3670393a5be2ba7097-635e0819875045a2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com:443/r/kxgnAGx6/main.js\",\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1\"}"
}
2026-06-23 15:03:01.692 UTC +1971 ms ES module executed GET Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (13) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-02cd2ea6b7125cec76a4db3a6197f948-52a9a7169a80ac9f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-23 15:03:04.473 UTC +4752 ms client timing POST POST Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "de-DE,de;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "3049",
  "content-type": "application/json",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=7, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-037e1f681a047f89e3456eeaf1ae39c8-02f3ddc728bbfcad-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 26_5_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/23F81 Twitter for iPhone/12.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 761ms 902ms
report other 761ms 1209ms
font.woff2 link 761ms 1679ms
manifest.json other 761ms 1815ms
preload.png link 761ms 2381ms
report other 761ms 3608ms
report other 792ms 1897ms
photo.png img 792ms 2554ms
main.js script 793ms 608ms
module.js script 793ms 996ms
iframe iframe 831ms 711ms
import.css css 1665ms 464ms
js-ran.gif?t=1782226981579 img 2133ms 1699ms
report other 2134ms 2235ms
css-bg.png css 2144ms 1856ms
csp-report other 2147ms 2224ms
css-font.woff2 css 2148ms 713ms
report other 2148ms 2269ms
module-ran.gif?t=1782226981610 img 2164ms 1387ms