ua-tracer by Paul Kinlan

trace mcQkfLOi

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace mcQkfLOi

First seen: 2026-07-02 20:54:12.792 UTC
User-Agent: Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-02 20:54:12.792 UTC +0 ms homepage GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (17) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://bsky.app/",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-919c8ac8958689000531c5dac2e525af-682cfc35abf9b603-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.369 UTC +1577 ms CSS GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-c448b52a53cbc4a0cd97da9e4f0dfb3e-02ea2d339bca34ed-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.374 UTC +1582 ms font (HTML) GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-a666d232ddeaf97bd7bf73ee6d7816f4-07fc032295755690-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.375 UTC +1583 ms JS GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-3477f6d179295572d8376097ae22549f-11b7acf8837b0566-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.392 UTC +1600 ms ES module GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-cf2fdb97ea5b0fa2629cfbd64b6b3bd7-803c808ccb89c331-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.394 UTC +1602 ms preload (image) GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-b7e02dc4db7036524f0f08029a2ca8e1-5545220e0dee3a7f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.398 UTC +1606 ms image GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-d8660e013d55d487401774ef1ac736c1-294518f551085269-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.462 UTC +1670 ms iframe document GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (17) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-ecf4b4d8c8d5bdfb25c901db1374ffd4-5abbe847c838dc6a-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:14.735 UTC +1943 ms Reporting API report (POST) POST Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "content-length": "2943",
  "content-type": "application/reports+json",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-4ee1179788b5772e3079d3b468a147b6-c8ffd2bb089f72fb-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "[\n {\n  \"age\": 59,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://bsky.app/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 9,\n \"columnNumber\": 1\n}\n\n },\n {\n  \"age\": 53,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://bsky.app/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n  \"age\": 53,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://bsky.app/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n  \"age\": 52,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://bsky.app/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n  \"age\": 47,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://bsky.app/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"moz-extension\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 7263,\n \"columnNumber\": 40\n}\n\n }\n]"
}
2026-07-02 20:54:17.016 UTC +4224 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/r/mcQkfLOi/hMFyqnPS/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-43ccf7839ffda11e1c2a44ec4fc0f094-3c0023193e91cc8d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:17.796 UTC +5004 ms CSS background-image GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/r/mcQkfLOi/hMFyqnPS/style.css",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-75adabc4ebbf2b72a385aabb9692cc7f-405c3ea45955bc01-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:17.804 UTC +5012 ms CSS @font-face GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (15) 
{
  "accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/r/mcQkfLOi/hMFyqnPS/style.css",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-a8251c508568e15817c86fc269de78e5-245ab1ee4febdc21-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:17.810 UTC +5018 ms CSS GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-bd30612f5fbeea084c464b9047ac88b3-b09e9beda74b3efa-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-bd30612f5fbeea084c464b9047ac88b3-c6b5b0354c03c0f5-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 20:54:17.813 UTC +5021 ms JS executed beacon GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-a74966101da8a1078186d11e1e286119-a6ddc6c315ffb1b5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:17.813 UTC +5021 ms ES module executed GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=5, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-633452eddbd2a052acaf61d4ef5a4d1c-417062988937c0a5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:17.858 UTC +5066 ms apple-touch-icon GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=4",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "none",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-fe444e8cd581f9355531c365fae93a62-e0a9b8a4bf716fe2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-fe444e8cd581f9355531c365fae93a62-26c92948662c1bc2-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 20:54:17.939 UTC +5147 ms CSP violation report (POST) POST Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "content-length": "350",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-d5404b997ac41e168260df08a4453c95-94488551b82ab4e3-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/mcQkfLOi/hMFyqnPS/main.js\",\"ua\":\"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\"}"
}
2026-07-02 20:54:17.942 UTC +5150 ms Reporting API report (POST) POST Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "content-length": "2753",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-f6a4a73c9ea3b054db2831d86869e5c9-8168df7a2424e21f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":9,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":0,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":0,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":0,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\"sourceFile\":\"moz-extension\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":7263,\"columnNumber\":40}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://uatracer.com/r/mcQkfLOi/hMFyqnPS/main.js\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":45,\"columnNumber\":11}}],\"ua\":\"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\"}"
}
2026-07-02 20:54:17.943 UTC +5151 ms Reporting API report (POST) POST Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "content-length": "620",
  "content-type": "application/reports+json",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-abbb277e21ebb46b30c404a7a0b26242-0b9537de95587c7d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "[\n {\n  \"age\": 31,\n  \"type\": \"csp-violation\",\n  \"url\": \"https://uatracer.com/\",\n  \"user_agent\": \"Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0\",\n  \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://bsky.app/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/mcQkfLOi/hMFyqnPS/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/r/mcQkfLOi/hMFyqnPS/main.js\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 45,\n \"columnNumber\": 11\n}\n\n }\n]"
}
2026-07-02 20:54:17.955 UTC +5163 ms web app manifest GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "host": "uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-fa10254c27f1ab449074c284a1b22d88-be382374e3977a5b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:18.008 UTC +5216 ms image inside iframe GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (16) 
{
  "accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/r/mcQkfLOi/hMFyqnPS/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-7b7ecc228f751f08977c4648a48258a1-a37cf10c77ca219c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-02 20:54:20.075 UTC +7283 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "priority": "u=4",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-afca66dd7b4ca348b8ca550f1fe302e4-e26b990fd0b950df-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-afca66dd7b4ca348b8ca550f1fe302e4-1c38afb47b68e404-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 20:54:20.330 UTC +7538 ms client timing POST POST Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "pl-PL",
  "content-length": "2215",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=mcQkfLOi",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=6",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "te": "trailers",
  "traceparent": "00-34ea8bbef4c6aed43ef541fac6fb4cc8-adc6bed03c1760f5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Android 13; Mobile; rv:152.0) Gecko/152.0 Firefox/152.0",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-07-03 04:03:48.954 UTC +25776162 ms font (HTML) GET Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
request headers (12) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip",
  "accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
  "cache-control": "no-cache",
  "connection": "keep-alive, close",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "traceparent": "00-3026239618c81aaa06e44ac47f67054e-505ec1e492bdb356-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
2026-07-03 04:14:03.284 UTC +26390492 ms CSP violation report (POST) GET Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip",
  "accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
  "cache-control": "no-cache",
  "connection": "keep-alive, close",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "traceparent": "00-b5796f958eee453e9e4989cabf8fe45f-09bf631f67a22041-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b5796f958eee453e9e4989cabf8fe45f-6144086962d2e515-01",
  "x-deno-userspace-tracestate": ""
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
font.woff2 other 1789ms 734ms
style.css link 1789ms 2604ms
preload.png link 1790ms 1846ms
photo.png img 1793ms 1435ms
main.js script 1793ms 2965ms
module.js script 1795ms 1050ms
iframe iframe 1916ms 3308ms
import.css css 4436ms 717ms
css-bg.png css 5197ms 740ms
css-font.woff2 other 5250ms 1033ms
js-ran.gif?t=1783025656745 img 5255ms 1369ms
module-ran.gif?t=1783025656756 img 5267ms 1686ms
manifest.json fetch 5340ms 92ms