What fires before the visitor consents?

Point it at a store. It loads the page with a factory-fresh browser profile — a visitor who cannot have consented to anything — and lists every known tracker that fires in the first seconds, with the network evidence retained per finding.