ua-tracer
by Paul Kinlan
ua-tracer
what does a user agent actually fetch, follow & run?
Trace qvq8C7Ax
First seen: 2026-06-23 19:15:36.682 UTC
User-Agent: portalmmm/2.0 N410i(c20;TB)
What this user agent did
Directly-referenced assets:
✗ fetched CSS
✓ fetched JS
✗ fetched image
✗ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✗ fetched web manifest
✗ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✗ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-06-23 19:15:36.682 UTC | +0 ms | homepage | GET | portalmmm/2.0 N410i(c20;TB) |
request headers (8){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-59f5071f8d02e02be2e505675d1e953a-eb8e7f42e2965a68-01",
"tracestate": "",
"user-agent": "portalmmm/2.0 N410i(c20;TB)",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-23 19:15:47.437 UTC | +10755 ms | ES module | GET | Mozilla/5.0 (Linux; Android 9; ASUS_X00QD) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 |
request headers (10){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-4b0c59faf8c6993f2b06d647df6f7665-18a470dd701a68cb-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 9; ASUS_X00QD) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-4b0c59faf8c6993f2b06d647df6f7665-ea56aa33386e79f3-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-06-23 19:15:47.473 UTC | +10791 ms | JS | GET | Mozilla/5.0 (Linux; Android 7.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 |
request headers (8){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-8d67d3b2278f57fe258bcdffc0662a9c-0b4c3a49f9417b77-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 7.0; Moto G (4)) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-23 19:16:13.212 UTC | +36530 ms | JS | GET | Mozilla/5.0 (iPad; CPU OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148;WeRead/4.1.3 (iPad; iOS 12.3.1; Scale/2.00) |
request headers (8){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-d7dbc05771b20059dc69f4202d08fd7a-63c79398eff65d89-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPad; CPU OS 12_3_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148;WeRead/4.1.3 (iPad; iOS 12.3.1; Scale/2.00)",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-23 19:16:17.182 UTC | +40500 ms | ES module | GET | Mozilla/5.0 (Linux; Android 6.0.1; MI 4W) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36 |
request headers (8){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-c206112ec01e98a519690854305aa167-5dc06e382979fc75-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 6.0.1; MI 4W) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.111 Mobile Safari/537.36",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-23 19:16:31.795 UTC | +55113 ms | JS | GET | Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/527 (KHTML, like Gecko, Safari/419.3) Arora/0.6 (Change: ) |
request headers (10){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-a02d86a8033667505a9fc82905aa32f5-784381bd446d5f05-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US) AppleWebKit/527 (KHTML, like Gecko, Safari/419.3) Arora/0.6 (Change: )",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-a02d86a8033667505a9fc82905aa32f5-7e751e2245688333-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-06-23 19:16:31.864 UTC | +55182 ms | ES module | GET | Baiduspider ( http://www.baidu.com/search/spider.htm) |
request headers (10){
"accept-charset": "utf-8",
"accept-encoding": "gzip",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-b825b5b3b9080e8c7fdfebd8e342660d-039d59bf63ad6b26-01",
"tracestate": "",
"user-agent": "Baiduspider ( http://www.baidu.com/search/spider.htm)",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-b825b5b3b9080e8c7fdfebd8e342660d-680f47172e1d66fe-01",
"x-deno-userspace-tracestate": ""
}
|
||||