ua-tracer
by Paul Kinlan
trace x2l9sLfR
what does a user agent actually fetch, follow & run?
Trace x2l9sLfR
First seen: 2026-07-13 16:56:03.498 UTC
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✗ fetched web manifest
✓ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✓ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✓ sent a CSP/Reporting report (any path)
✓ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✓ EXECUTED classic JS
✓ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-07-13 16:56:03.498 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (20){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=0, i",
"referer": "https://paul.kinlan.me/",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "cross-site",
"sec-fetch-user": "?1",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-ab704944bb7c77109095691dfaeb9223-7b92fbfcd9f17c74-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-ab704944bb7c77109095691dfaeb9223-3df1bb11b076d981-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-13 17:12:15.334 UTC | +971836 ms | ES module | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (16){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "script",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-e8f549a0322132a1611f82159e0af236-f3b546b961b0df09-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:15.338 UTC | +971840 ms | Reporting API report (POST) | POST | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (21){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"content-length": "2442",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-17e7ba405ba85b8d320e959611512728-ba4ec88468961cf2-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-report-body": "[\n {\n \"age\": 5,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://paul.kinlan.me/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/x2l9sLfR/9yJpE4to/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 9,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://paul.kinlan.me/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/x2l9sLfR/9yJpE4to/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://paul.kinlan.me/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/x2l9sLfR/9yJpE4to/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n },\n {\n \"age\": 4,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://paul.kinlan.me/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/x2l9sLfR/9yJpE4to/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 0,\n \"columnNumber\": 1\n}\n\n }\n]"
}
|
||||
| 2026-07-13 17:12:15.338 UTC | +971840 ms | image | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-661cbfe92afb458ad7f0b21246ba7993-16cce1ccd31dfff1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:15.338 UTC | +971840 ms | iframe document | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (18){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-58a1c612e6abdaf3797499b5c9e57c23-19bcf3405cdb1a5a-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:15.340 UTC | +971842 ms | preload (image) | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-69d27bb05d921812aad48ae8d3675284-f1984d37ffc9b486-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:15.340 UTC | +971842 ms | JS | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (16){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "script",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-c049d88b09561fd617d95027dbb55b38-adaf9da6d69e41aa-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:15.341 UTC | +971843 ms | font (HTML) | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-7bfae97cff61c6947e1a3f76cc68cb95-317109037677ed47-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:15.341 UTC | +971843 ms | CSS | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-4a5bc2fbbfac29e013d7a8512d24054d-316256a768570210-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:15.880 UTC | +972382 ms | CSS @import (nested stylesheet) | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=2",
"referer": "https://uatracer.com/r/x2l9sLfR/9yJpE4to/style.css",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-510791c5dcad93635be73d1d3bb68b14-18d4d1d62d5651f4-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:16.756 UTC | +973258 ms | CSS background-image | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=4, i",
"referer": "https://uatracer.com/r/x2l9sLfR/9yJpE4to/style.css",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-b72b78f48bb8331c7ab001ce56b1467f-54f34b99af9fb91d-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:16.817 UTC | +973319 ms | CSS @font-face | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (16){
"accept": "application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"referer": "https://uatracer.com/r/x2l9sLfR/9yJpE4to/style.css",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-e77846bcbc3a1a1558ac17d78dc93593-ce00f421419af360-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:17.644 UTC | +974146 ms | JS executed beacon | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-7c0047e5518480047ac83258dac995c6-e1fb69b6fca294fd-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:17.647 UTC | +974149 ms | ES module executed | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-1f77b604e8c34078a7eb0ad78a12b083-b61475062b353b5a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:17.981 UTC | +974483 ms | apple-touch-icon | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=6",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-d5221eedc23a9cd35a78d6b03a55e1d2-7198a8177b157856-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:17.994 UTC | +974496 ms | favicon | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=6",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-9e720e133345962bdbc80aa73c00beda-086f8137a821a595-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:18.097 UTC | +974599 ms | image inside iframe | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (17){
"accept": "image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"priority": "u=5, i",
"referer": "https://uatracer.com/r/x2l9sLfR/9yJpE4to/iframe",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-0c234e57bbd4c33e095f94658b76a144-9cc154dd46885a64-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-13 17:12:18.138 UTC | +974640 ms | Reporting API report (POST) | POST | Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0 |
request headers (21){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.9",
"content-length": "1253",
"content-type": "application/reports+json",
"cookie": "ua-tracer-trace=x2l9sLfR",
"dnt": "1",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"priority": "u=4",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"sec-gpc": "1",
"te": "trailers",
"traceparent": "00-42ac77f43d8cc089c0ad4809d75fb40e-abaf2843fde135b3-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-report-body": "[\n {\n \"age\": 439,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://paul.kinlan.me/\",\n \"effectiveDirective\": \"style-src-attr\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/x2l9sLfR/9yJpE4to/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"https://uatracer.com/r/x2l9sLfR/9yJpE4to/main.js\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 45,\n \"columnNumber\": 11\n}\n\n },\n {\n \"age\": 230,\n \"type\": \"csp-violation\",\n \"url\": \"https://uatracer.com/\",\n \"user_agent\": \"Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:152.0) Gecko/20100101 Firefox/152.0\",\n \"body\": {\n \"documentURL\": \"https://uatracer.com/\",\n \"blockedURL\": \"inline\",\n \"referrer\": \"https://paul.kinlan.me/\",\n \"effectiveDirective\": \"style-src-elem\",\n \"originalPolicy\": \"style-src 'self'; report-uri https://uatracer.com/r/x2l9sLfR/9yJpE4to/csp-report; report-to ua-tracer\",\n \"sourceFile\": \"<anonymous code>\",\n \"sample\": null,\n \"disposition\": \"report\",\n \"statusCode\": 200,\n \"lineNumber\": 896,\n \"columnNumber\": 27\n}\n\n }\n]"
}
|
||||
| 2026-07-13 21:07:18.445 UTC | +15074947 ms | CSP violation report (POST) | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip",
"accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
"cache-control": "no-cache",
"connection": "keep-alive, close",
"host": "uatracer.com",
"pragma": "no-cache",
"traceparent": "00-b5877cd3c59c3c2d06b428e7aabd4532-be7eb0ad4625f59c-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-16 13:18:45.588 UTC | +246162090 ms | iframe document | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-4922742a8978c3f1ff1e4e9bd4d42347-16089b5e37fabcb5-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-4922742a8978c3f1ff1e4e9bd4d42347-1ba1569cdbd6fbd9-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-17 01:22:19.838 UTC | +289576340 ms | CSP violation report (POST) | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-186cc04ada2f24c331e8863be3a0dcd2-b8580b2f7d98c30d-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-186cc04ada2f24c331e8863be3a0dcd2-1c8a83ac909cf45c-01",
"x-deno-userspace-tracestate": ""
}
|
||||
Client-side resource waterfall
JS executed (beacon hit) but no resource-timing payload was posted (UA may block sendBeacon/fetch or strip the body).