ua-tracer
by Paul Kinlan
trace FPzdLhvn
what does a user agent actually fetch, follow & run?
Trace FPzdLhvn
First seen: 2026-07-14 23:39:22.189 UTC
User-Agent: PrivacyBrowser/1.0
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✗ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✗ fetched apple-touch-icon
✗ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✓ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-07-14 23:39:22.189 UTC | +0 ms | homepage | GET | PrivacyBrowser/1.0 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=0, i",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-fetch-user": "?1",
"traceparent": "00-4cea3779d3006065be27abd7f164e1bd-c47ad4b28ba9665a-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:24.186 UTC | +1997 ms | CSS | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=0",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-71ca0071fbaf8b9ced8606c5ba41e9e4-0fea45965b41ecd7-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:24.190 UTC | +2001 ms | preload (image) | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-5db25f38179abf8cb63460467faf5897-dc114650d3718ae3-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:24.474 UTC | +2285 ms | prefetch | GET | PrivacyBrowser/1.0 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=4, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"sec-purpose": "prefetch",
"traceparent": "00-8410449e79a9b1fcd252c4732a274242-b087b1babab86d7e-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:24.482 UTC | +2293 ms | font (HTML) | GET | PrivacyBrowser/1.0 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"pragma": "no-cache",
"priority": "u=1",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-393ed574738e4e29a0e67a1fef8c2c98-860ae18eac6d9ac8-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:24.705 UTC | +2516 ms | image | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-a510ba082f6e07f56376139b494a5dec-ab669618c4b085c1-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:25.013 UTC | +2824 ms | iframe document | GET | PrivacyBrowser/1.0 |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=0, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"traceparent": "00-ee1fbf32fc58d42bef6ff8463eea78d2-b7dcceeab06ca742-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:25.017 UTC | +2828 ms | CSS @import (nested stylesheet) | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=0",
"referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/style.css",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-b09afdb06d506becaa72205742970ef8-302bd8f387aa4107-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:26.109 UTC | +3920 ms | CSS background-image | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "i",
"referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/style.css",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-25dcef41ff3a249aa706abfc29f792c0-b4326273f9b418fe-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:26.113 UTC | +3924 ms | CSS @font-face | GET | PrivacyBrowser/1.0 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"origin": "https://uatracer.com",
"pragma": "no-cache",
"priority": "u=0",
"referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/style.css",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-b7c6652a4a30dae387fe58b97ccc043e-95ee66bbdbc2d15d-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:26.286 UTC | +4097 ms | image inside iframe | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "i",
"referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/iframe",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-8eae6778c208c45e36f55da131172b79-92b1adc8960fa70c-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:27.754 UTC | +5565 ms | favicon | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=1, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-e1236832a356be8910b6b9252d237c9b-de148b8ad59f1281-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:39:33.354 UTC | +11165 ms | favicon | GET | PrivacyBrowser/1.0 |
request headers (16){
"accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=1, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-8bdec0fd5404ae0e2b34706cd4b10124-d168fe126aa86983-01",
"tracestate": "",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-14 23:40:36.377 UTC | +74188 ms | iframe document | GET | PrivacyBrowser/1.0 |
request headers (18){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
"cache-control": "no-cache",
"host": "uatracer.com",
"pragma": "no-cache",
"priority": "u=0, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"sec-fetch-user": "?1",
"traceparent": "00-d988218fc887fd3e48ad12acf91d9e8c-01db2ffa116da395-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "PrivacyBrowser/1.0",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-requested-with": "com.stoutner.privacybrowser.standard"
}
|
||||
| 2026-07-15 04:18:31.015 UTC | +16748826 ms | iframe document | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip",
"accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
"cache-control": "no-cache",
"connection": "keep-alive, close",
"host": "uatracer.com",
"pragma": "no-cache",
"traceparent": "00-7ab1a5d0abf45794e4cf12ea189843f2-301982878257b473-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||