ua-tracer by Paul Kinlan

trace FPzdLhvn

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace FPzdLhvn

First seen: 2026-07-14 23:39:22.189 UTC
User-Agent: PrivacyBrowser/1.0
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✗ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-14 23:39:22.189 UTC +0 ms homepage GET PrivacyBrowser/1.0
request headers (17)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-4cea3779d3006065be27abd7f164e1bd-c47ad4b28ba9665a-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:24.186 UTC +1997 ms CSS GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-71ca0071fbaf8b9ced8606c5ba41e9e4-0fea45965b41ecd7-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:24.190 UTC +2001 ms preload (image) GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5db25f38179abf8cb63460467faf5897-dc114650d3718ae3-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:24.474 UTC +2285 ms prefetch GET PrivacyBrowser/1.0
request headers (17)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=4, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-8410449e79a9b1fcd252c4732a274242-b087b1babab86d7e-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:24.482 UTC +2293 ms font (HTML) GET PrivacyBrowser/1.0
request headers (17)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-393ed574738e4e29a0e67a1fef8c2c98-860ae18eac6d9ac8-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:24.705 UTC +2516 ms image GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a510ba082f6e07f56376139b494a5dec-ab669618c4b085c1-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:25.013 UTC +2824 ms iframe document GET PrivacyBrowser/1.0
request headers (17)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ee1fbf32fc58d42bef6ff8463eea78d2-b7dcceeab06ca742-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:25.017 UTC +2828 ms CSS @import (nested stylesheet) GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b09afdb06d506becaa72205742970ef8-302bd8f387aa4107-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:26.109 UTC +3920 ms CSS background-image GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/style.css",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-25dcef41ff3a249aa706abfc29f792c0-b4326273f9b418fe-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:26.113 UTC +3924 ms CSS @font-face GET PrivacyBrowser/1.0
request headers (17)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/style.css",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b7c6652a4a30dae387fe58b97ccc043e-95ee66bbdbc2d15d-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:26.286 UTC +4097 ms image inside iframe GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "i",
  "referer": "https://uatracer.com/r/FPzdLhvn/qPu59aK3/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8eae6778c208c45e36f55da131172b79-92b1adc8960fa70c-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:27.754 UTC +5565 ms favicon GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e1236832a356be8910b6b9252d237c9b-de148b8ad59f1281-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:39:33.354 UTC +11165 ms favicon GET PrivacyBrowser/1.0
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=1, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8bdec0fd5404ae0e2b34706cd4b10124-d168fe126aa86983-01",
  "tracestate": "",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-14 23:40:36.377 UTC +74188 ms iframe document GET PrivacyBrowser/1.0
request headers (18)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-AU,en-US;q=0.9,en;q=0.8",
  "cache-control": "no-cache",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "sec-fetch-user": "?1",
  "traceparent": "00-d988218fc887fd3e48ad12acf91d9e8c-01db2ffa116da395-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "PrivacyBrowser/1.0",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-requested-with": "com.stoutner.privacybrowser.standard"
}
2026-07-15 04:18:31.015 UTC +16748826 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1
request headers (12)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip",
  "accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
  "cache-control": "no-cache",
  "connection": "keep-alive, close",
  "host": "uatracer.com",
  "pragma": "no-cache",
  "traceparent": "00-7ab1a5d0abf45794e4cf12ea189843f2-301982878257b473-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}