ua-tracer
by Paul Kinlan
trace n0UeJ27H
what does a user agent actually fetch, follow & run?
Trace n0UeJ27H
First seen: 2026-10-01 23:08:12.144 UTC
User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✗ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-10-01 23:08:12.144 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-4c565053ed598e8b4a196e2caea7021a-2292250400d976e6-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.695 UTC | +3551 ms | font (HTML) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-f50af1c3edc07cbb67374118ed1ab6f3-8c89f9be53d4728c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.696 UTC | +3552 ms | favicon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-ed45e786216fc7ca45563bed384a8e1f-396b7008b0b1c894-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.697 UTC | +3553 ms | prefetch | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-18c8d75249b7142f425003297397e0bf-78336bf22ee44530-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.698 UTC | +3554 ms | CSS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-c991ff52124c7de4d3a439a0e837deca-e7d310a3639fb4e4-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.698 UTC | +3554 ms | ES module | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-bb645dc8d3e292573d2092ce6e6daa00-d7ef154f61bfa362-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.718 UTC | +3574 ms | web app manifest | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-5191e60bf5b359c6f2407ad6250d58be-e9b210e7d2a8c6c9-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.718 UTC | +3574 ms | preload (image) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-5e3f4c150f589b1c20670186fc8ee10e-26a29c4c1a6488e8-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.718 UTC | +3574 ms | image | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-3cf675efff74a037ed1122506e008d59-23246e2a29a64e64-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.718 UTC | +3574 ms | JS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-b75412a9cfa625d12b7c453a3b4efdc5-b61c23e32a522086-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-10-01 23:08:15.718 UTC | +3574 ms | apple-touch-icon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-c3343e0416d56e077c09ef93de5466ea-757f3f3f4fe068e7-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||