ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace vfDe1shD

First seen: 2026-07-02 23:35:47.943 UTC
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-02 23:35:47.943 UTC +0 ms homepage GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (21)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://paul.kinlan.me/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-fetch-user": "?1",
  "traceparent": "00-ba183d4fb0f4e90db4f37aa31aca97f6-57919d608f3061c7-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-ba183d4fb0f4e90db4f37aa31aca97f6-8f53c6eecf0805eb-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.683 UTC +1740 ms CSS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-42a016d3b9007e0f30ef12f8ec4cb865-b100a4485bc87393-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-42a016d3b9007e0f30ef12f8ec4cb865-8040779df26cbfb6-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.686 UTC +1743 ms font (HTML) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (21)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8b2ef12dfe1ee9c90889d6dc74d7a5a3-e684e1eeb0fa6c1a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8b2ef12dfe1ee9c90889d6dc74d7a5a3-33b3919a94179b91-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.696 UTC +1753 ms preload (image) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4fe8acacaa284ba119d253630f783ad5-7a99527be88e6bf9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-4fe8acacaa284ba119d253630f783ad5-2f4206cfda77bdee-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.726 UTC +1783 ms prefetch GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (21)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-74656fd56c2e8d343ac9622722a9048b-88abf25f460ec4cf-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-74656fd56c2e8d343ac9622722a9048b-8888e4e594201d86-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.796 UTC +1853 ms image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f3ed816c734cee4a293263c2bef2c999-f1c0f58f2743baf8-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f3ed816c734cee4a293263c2bef2c999-c07467a97b1b7587-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.799 UTC +1856 ms JS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-9658987dcf5454e0d5f4ab029ba93927-5cf8f9f798d4a5af-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-9658987dcf5454e0d5f4ab029ba93927-7c0c44242de0cf83-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.802 UTC +1859 ms iframe document GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (21)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a99b2eee29779db23e503b0a5fec36cb-20487ae3c8a04fda-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a99b2eee29779db23e503b0a5fec36cb-ac8b3ff4ff791b14-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:49.802 UTC +1859 ms ES module GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (21)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8c1af02de48f7bbfd3db11bb63484b75-844a442a655ca10a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8c1af02de48f7bbfd3db11bb63484b75-c809c9ed680c4110-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:50.508 UTC +2565 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/vfDe1shD/ZrdqGazf/style.css",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d35f19141df4411652cb3ba780dc2df2-101159efc6f40310-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d35f19141df4411652cb3ba780dc2df2-96a5ef4da4c8fdb4-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:51.758 UTC +3815 ms CSS @font-face GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (21)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/vfDe1shD/ZrdqGazf/style.css",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-92e2ec29f86113acf4ae4eef4eedb566-860620a7255bfb5f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-92e2ec29f86113acf4ae4eef4eedb566-890a5e75067e01dc-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:51.761 UTC +3818 ms CSS background-image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/r/vfDe1shD/ZrdqGazf/style.css",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a8fa57f6dc8bc37174a4a55f05887dee-51ccf06c045ec35c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a8fa57f6dc8bc37174a4a55f05887dee-d5b450930fba4745-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:53.412 UTC +5469 ms JS executed beacon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8b00bb5c23cf647a1d9bb61325b369b1-3c26b657ba88579b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8b00bb5c23cf647a1d9bb61325b369b1-da5524d4b765d933-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:53.417 UTC +5474 ms CSP violation report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (24)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "content-length": "393",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f6ee9b1d92f30d9f7ba6cc87736a0961-c167237b02a10217-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f6ee9b1d92f30d9f7ba6cc87736a0961-0c141ed346419cc7-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://uatracer.com/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://uatracer.com/r/vfDe1shD/ZrdqGazf/main.js\",\"ua\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36\"}"
}
2026-07-02 23:35:53.419 UTC +5476 ms Reporting API report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (24)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "content-length": "2301",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ccdbe362f342a283935c985027e99978-c710ecbc863358ab-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-ccdbe362f342a283935c985027e99978-700872bac4f68b8c-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":9,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":235,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":239,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/\",\"lineNumber\":747,\"columnNumber\":0,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"body\":{\"sourceFile\":\"https://uatracer.com/r/vfDe1shD/ZrdqGazf/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://uatracer.com/\",\"referrer\":\"https://paul.kinlan.me/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36\"}"
}
2026-07-02 23:35:53.430 UTC +5487 ms image inside iframe GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/r/vfDe1shD/ZrdqGazf/iframe",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a59713e8edfdb8fa104f32916be7d177-4b7e9c17364bd25d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a59713e8edfdb8fa104f32916be7d177-31a17b4941a96e7a-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:53.580 UTC +5637 ms ES module executed GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-55eb22482c944df2a4009427d67942c0-29256b4d3277fb86-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-55eb22482c944df2a4009427d67942c0-ee89b105343d490a-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:55.831 UTC +7888 ms web app manifest GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (19)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=2",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-109717e5fc360aca8d144a089f01f579-2a30ce76dc6d9fdd-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-109717e5fc360aca8d144a089f01f579-f1c6dc010a7e2a85-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:55.939 UTC +7996 ms favicon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b2a53e71acfb9f7e94938a537ecbc6e0-f1e4d46625e6c5a0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b2a53e71acfb9f7e94938a537ecbc6e0-8f69ca578dd7ec35-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:55.942 UTC +7999 ms apple-touch-icon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (20)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-95c8490386cc06c303ef9b4f0d6fa92b-9bfd1554645604f2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-95c8490386cc06c303ef9b4f0d6fa92b-8ba4e7b05827307e-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:35:56.516 UTC +8573 ms client timing POST POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (23)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "content-length": "2627",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "dnt": "1",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-ch-ua": "\"Not=A?Brand\";v=\"99\", \"Google Chrome\";v=\"151\", \"Chromium\";v=\"151\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4b3caccc797aec0c5c4d3139dbee4858-31ed04b05e89a633-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-4b3caccc797aec0c5c4d3139dbee4858-12e6eb4fd5d4ce84-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-02 23:37:06.190 UTC +78247 ms Reporting API report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36
request headers (13)
{
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.9",
  "content-length": "2768",
  "content-type": "application/reports+json",
  "cookie": "ua-tracer-trace=vfDe1shD",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=4, i",
  "traceparent": "00-d457873378d00f924344e0dd6bff5c89-b1cf1321f1680590-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "[{\"age\":76218,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":747,\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"referrer\":\"https://paul.kinlan.me/\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36\"},{\"age\":72608,\"body\":{\"blockedURL\":\"inline\",\"columnNumber\":11,\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":45,\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"referrer\":\"https://paul.kinlan.me/\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/r/vfDe1shD/ZrdqGazf/main.js\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36\"},{\"age\":76308,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-elem\",\"lineNumber\":9,\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"referrer\":\"https://paul.kinlan.me/\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36\"},{\"age\":76308,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":239,\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"referrer\":\"https://paul.kinlan.me/\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36\"},{\"age\":76308,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://uatracer.com/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":235,\"originalPolicy\":\"style-src 'self'; report-uri /r/vfDe1shD/ZrdqGazf/csp-report; report-to ua-tracer\",\"referrer\":\"https://paul.kinlan.me/\",\"sample\":\"\",\"sourceFile\":\"https://uatracer.com/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://uatracer.com/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Mobile Safari/537.36\"}]"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 2041ms 820ms
font.woff2 link 2041ms 1337ms
preload.png link 2042ms 1742ms
prefetch.png link 2047ms 2557ms
iframe iframe 2144ms 3632ms
photo.png img 2145ms 3280ms
main.js script 2149ms 3587ms
module.js script 2150ms 3789ms
import.css css 2866ms 1232ms
css-bg.png css 4114ms 2018ms
css-font.woff2 css 4114ms 897ms
js-ran.gif?t=1783035354357 img 5754ms 1314ms
csp-report beacon 5765ms 810ms
report beacon 5767ms 1704ms
module-ran.gif?t=1783035354558 img 5945ms 2312ms