ua-tracer
by Paul Kinlan
trace jHJlyCzk
what does a user agent actually fetch, follow & run?
Trace jHJlyCzk
First seen: 2026-09-21 18:45:00.620 UTC
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✗ fetched CSS
✗ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-09-21 18:45:00.620 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-charset": "ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"accept-encoding": "gzip",
"accept-language": "en-us,en;q=0.5",
"connection": "close",
"host": "uatracer.com",
"referer": "https://tiny-helpers.dev/feed.xml",
"sec-fetch-mode": "navigate",
"traceparent": "00-1d0919f9e004c716c7f47c5d0cf22e2f-8ce3857f8ede2f49-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-21 18:51:57.750 UTC | +417130 ms | web app manifest | GET | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0 |
request headers (14){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-charset": "ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"accept-encoding": "gzip",
"accept-language": "en-us,en;q=0.5",
"connection": "close",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-mode": "navigate",
"traceparent": "00-725dd754206a81bbb55000e81e8fe4df-9e29fcb03959aec3-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Edg/134.0.0.0",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-725dd754206a81bbb55000e81e8fe4df-b2f289e1e7aef97f-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-21 18:56:55.339 UTC | +714719 ms | preload (image) | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.3 |
request headers (14){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-charset": "ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"accept-encoding": "gzip",
"accept-language": "en-us,en;q=0.5",
"connection": "close",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-mode": "navigate",
"traceparent": "00-e90bc8285418a8c526834cf40ce78d32-57b1c0ba1dcc9342-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.3",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-e90bc8285418a8c526834cf40ce78d32-dd4b3a9dc8e7249c-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-21 18:58:46.816 UTC | +826196 ms | font (HTML) | GET | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3 |
request headers (14){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-charset": "ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"accept-encoding": "gzip",
"accept-language": "en-us,en;q=0.5",
"connection": "close",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-mode": "navigate",
"traceparent": "00-9a8047ceb823685c894cf923e0302d3e-cfa35d1d79289b86-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.3",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-9a8047ceb823685c894cf923e0302d3e-d9024036fb03145a-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-21 18:59:34.816 UTC | +874196 ms | prefetch | GET | Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.3 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-charset": "ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"accept-encoding": "gzip",
"accept-language": "en-us,en;q=0.5",
"connection": "close",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-mode": "navigate",
"traceparent": "00-cd7e0619ee1fe6e33e9a8c03677e97a7-c9c2ed121dbebba1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/113.0.0.0 Safari/537.3",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-21 19:00:20.534 UTC | +919914 ms | image | GET | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-charset": "ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"accept-encoding": "gzip",
"accept-language": "en-us,en;q=0.5",
"connection": "close",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-mode": "navigate",
"traceparent": "00-7d495d8c0ac79c9c623bd0d19ca724d9-154e143e5862d773-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.0.0 Safari/537.36",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-21 19:07:51.897 UTC | +1371277 ms | iframe document | GET | Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-charset": "ISO-8859-1,utf-8;q=0.7,*;q=0.7",
"accept-encoding": "gzip",
"accept-language": "en-us,en;q=0.5",
"connection": "close",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-mode": "navigate",
"traceparent": "00-44debdb694f0add94957463f5ec38b56-8895c999603c1998-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/62.0.3202.94 Safari/537.36",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||