ua-tracer by Paul Kinlan

trace w3KIQW3V

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace w3KIQW3V

First seen: 2026-10-30 10:30:10.065 UTC
User-Agent: Misskey/2025.4.7 (https://calckey.world/)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✗ fetched JS ✗ fetched image ✗ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-30 10:30:10.065 UTC +0 ms homepage GET Misskey/2025.4.7 (https://calckey.world/)
request headers (12) 
{
  "accept": "application/activity+json, application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"",
  "accept-encoding": "gzip, deflate, br",
  "connection": "keep-alive",
  "date": "Fri, 30 Oct 2026 10:30:10 GMT",
  "host": "uatracer.com",
  "signature": "keyId=\"https://calckey.world/users/9emludaxjv#main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) date host accept\",signature=\"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\"",
  "traceparent": "00-3b6e2709795fd58b836e84ba7c3bbaa5-8e3d05461be7bcac-01",
  "tracestate": "",
  "user-agent": "Misskey/2025.4.7 (https://calckey.world/)",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-3b6e2709795fd58b836e84ba7c3bbaa5-7cc03afb7670fb50-01",
  "x-deno-userspace-tracestate": ""
}