ua-tracer
by Paul Kinlan
ua-tracer
what does a user agent actually fetch, follow & run?
Trace oVf4wHs8
First seen: 2026-06-24 13:59:54.164 UTC
User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✗ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✗ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-06-24 13:59:54.164 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-46adf89007d19e8e889a0ca3a9987e48-98c41979005cf56c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 13:59:55.904 UTC | +1740 ms | favicon | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-90ad0cd06c91fb2b744ac536066f98de-349aee60cdc5b049-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 13:59:58.704 UTC | +4540 ms | image | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-87ad6ed4520bb6fdc790f93c726bd417-24e179193d11ff1c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 14:00:01.408 UTC | +7244 ms | CSS | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-7112afdfcec078cdc66313c20888185e-95011f82faa925ab-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 14:00:07.031 UTC | +12867 ms | apple-touch-icon | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-df610eb82cd025e6a22d835b3950b5dc-01cef4e1f9dfaf92-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 14:00:09.503 UTC | +15339 ms | ES module | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (10){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-a4177782224459ec7d16fb48452ee918-f5a2673e3bd5b3d3-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-a4177782224459ec7d16fb48452ee918-53ae497bdbe80ba4-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-06-24 14:00:12.225 UTC | +18061 ms | preload (image) | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (10){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-92c122a099806a886a9451d8f1f22d89-8153c5ec38591dc1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-92c122a099806a886a9451d8f1f22d89-2480da68e6bd4278-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-06-24 14:00:14.702 UTC | +20538 ms | prefetch | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-8b2d545643c8845ac98948aaebaffe35-721651d8732a492f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 14:00:20.227 UTC | +26063 ms | JS | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-48415e84eb393020033f6bcf573914ca-f43c067438902abb-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-24 14:00:26.087 UTC | +31923 ms | web app manifest | GET | Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36 |
request headers (8){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US,en;q=0.9,de-CH;q=0.8,de;q=0.7,ca;q=0.6",
"host": "uatracer.com",
"traceparent": "00-3570068ef095f48ddc264a2fd1980a65-26b75dc843b3a88e-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/130.0.0.0 Mobile Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||