ua-tracer by Paul Kinlan

trace wxoXbE5S

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace wxoXbE5S

First seen: 2026-10-08 13:55:19.995 UTC
User-Agent: https://bonfire.cafe - Bonfire federation
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✗ fetched JS ✗ fetched image ✗ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-08 13:55:19.995 UTC +0 ms homepage GET https://bonfire.cafe - Bonfire federation
request headers (11) 
{
  "accept": "application/activity+json",
  "content-length": "0",
  "date": "Thu, 08 Oct 2026 13:55:19 GMT",
  "host": "uatracer.com",
  "signature": "keyId=\"https://bonfire.cafe/pub/actors/Federation_Bot#main-key\",algorithm=\"rsa-sha256\",headers=\"(request-target) date host\",signature=\"u6KPKTUQJmStagfv6yOSWzXCwul34/0wLJ3kCWb26NJzYEnEQzGB+PRnW2ygVdwGu1bT5EVVO83x1/mFddlcwH6oK9u/Y/W7WKQf1Q+B8e/ugC49gSqmd+yMHTWNtoG1Evzdjq5fwxsBuq+00zlj7SYlbfEeMq4UD02IYpn6W5Bbs9oaVQFRciHyYM2kmF9ayHCTzzKl6di3dN2JWnVAAClCK3dopmjiK/Fe42o76p0QQ2j0ffpcNNDMSBBvY76sErI150mGctFsIZdWDI47LC1MHYFwC3QfNy/H11aGReM9H00ECdWqfMAvDszUvVYOKuv7fFOZm0+x5qKBA+pTFw==\"",
  "traceparent": "00-d327e98f173020b7903199e683bf9ab0-278f2a6cd2d681c6-01",
  "tracestate": "",
  "user-agent": "https://bonfire.cafe - Bonfire federation",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d327e98f173020b7903199e683bf9ab0-011ba6e9279d070f-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-08 13:55:22.837 UTC +2842 ms favicon HEAD Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0
request headers (7) 
{
  "host": "uatracer.com",
  "traceparent": "00-5d77e8bbff389c779a6f5f99d8f54d32-0a338b4657eab880-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:47.0) Gecko/20100101 Firefox/47.0",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-5d77e8bbff389c779a6f5f99d8f54d32-3e6782badbaf61e7-01",
  "x-deno-userspace-tracestate": ""
}