ua-tracer
by Paul Kinlan
trace llpMvVfD
what does a user agent actually fetch, follow & run?
Trace llpMvVfD
First seen: 2026-11-03 17:53:36.504 UTC
User-Agent: Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✓ fetched favicon
✓ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✓ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✗ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-11-03 17:53:36.504 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-7870b552d23fa63345164a1c5d89082d-5b3633e8b2578710-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.174 UTC | +9670 ms | font (HTML) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-30a89fae82d9e9bee85d47f66c69a455-ed4ed076db0b0bb0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.175 UTC | +9671 ms | CSS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-de184330d903daa7b80eebcabc5e5a73-50f618f8719c362c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.212 UTC | +9708 ms | favicon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-d5a97d4f0a7a090eb68983f29683d824-ec8c03c8fcceb5ab-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.222 UTC | +9718 ms | apple-touch-icon | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-acaed9c427102f0af4fadb398d78e813-b43e928be0921e73-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.264 UTC | +9760 ms | web app manifest | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-21a572c2dc06eba877399fdbe22c2439-27c964f763d29e37-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.265 UTC | +9761 ms | preload (image) | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-b734acd0c949aa4d842cb8aabf0a6bed-e4e37e9795061e86-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.302 UTC | +9798 ms | prefetch | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-371b8ae16ee5bb0bbe07554ace1ed86a-7d606d0ace4578a9-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.344 UTC | +9840 ms | image | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-7b3247a50ae8207c981bbbba5a1c7221-fed3060b384b74d9-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.348 UTC | +9844 ms | JS | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-e9a1bcfeeaad0bafec854219b4bb53e2-7e05b2a7b6a67a78-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-11-03 17:53:46.405 UTC | +9901 ms | ES module | GET | Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 |
request headers (6){
"accept-encoding": "gzip",
"host": "uatracer.com",
"traceparent": "00-d8ce010e7eb33fcd1a904bddbace9e2e-3deebb0ae37f8f12-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||