ua-tracer by Paul Kinlan

trace 4z78sJq5

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace 4z78sJq5

First seen: 2026-09-23 03:39:03.285 UTC
User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
Bot verification: ✓ verified Bingbot IP checked against published bot CIDR ranges; IP in Bingbot published range.

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✓ fetched JS ✗ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-09-23 03:39:03.285 UTC +0 ms homepage GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br",
  "from": "bingbot(at)microsoft.com",
  "host": "uatracer.com",
  "traceparent": "00-5183d63b3e3ad8b0a4defe61d3372e77-a7aadd9ec45929f1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-5183d63b3e3ad8b0a4defe61d3372e77-f2acec3f777cae7b-01",
  "x-deno-userspace-tracestate": ""
}
2026-09-23 03:39:17.687 UTC +14402 ms prefetch GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br",
  "from": "bingbot(at)microsoft.com",
  "host": "uatracer.com",
  "traceparent": "00-320f7faa13e8d49521d917d2e7bd8abd-859b17c9f0009303-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-320f7faa13e8d49521d917d2e7bd8abd-2bc8d01c5ebd3ec2-01",
  "x-deno-userspace-tracestate": ""
}
2026-09-23 03:39:22.515 UTC +19230 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br",
  "from": "bingbot(at)microsoft.com",
  "host": "uatracer.com",
  "traceparent": "00-22aada4f6efdd1fb814939605700bebf-6ab266bc657db344-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-22aada4f6efdd1fb814939605700bebf-305f8dab079c668b-01",
  "x-deno-userspace-tracestate": ""
}
2026-09-23 03:39:22.581 UTC +19296 ms font (HTML) GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br",
  "from": "bingbot(at)microsoft.com",
  "host": "uatracer.com",
  "traceparent": "00-c9e8c39a35911ca6d8f18168e752054f-d9a0e974300f68d7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-c9e8c39a35911ca6d8f18168e752054f-75a9eb333abb4933-01",
  "x-deno-userspace-tracestate": ""
}
2026-09-23 03:39:22.689 UTC +19404 ms JS GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br",
  "from": "bingbot(at)microsoft.com",
  "host": "uatracer.com",
  "traceparent": "00-2e3d88218d84a6f7a7c53028c0f0b4b5-91bd4403db091b98-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-2e3d88218d84a6f7a7c53028c0f0b4b5-4b0cc0115db027da-01",
  "x-deno-userspace-tracestate": ""
}
2026-09-23 03:39:22.827 UTC +19542 ms ES module GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br",
  "from": "bingbot(at)microsoft.com",
  "host": "uatracer.com",
  "traceparent": "00-eacb3f4988f424eb1dfe926ff4099385-8da7e61478072a2c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-eacb3f4988f424eb1dfe926ff4099385-16d1231e8863ea3b-01",
  "x-deno-userspace-tracestate": ""
}
2026-09-23 03:55:17.120 UTC +973835 ms client timing POST POST Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br",
  "content-length": "1816",
  "content-type": "application/json",
  "cookie": "ua-tracer-trace=4z78sJq5",
  "from": "bingbot(at)microsoft.com",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "referer": "https://uatracer.com/",
  "traceparent": "00-92ddcb9c565f542f4b8446034f858453-e91deb76c48276f5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/136.0.0.0 Safari/537.36 AppleWebKit/537.36 (KHTML, like Gecko; compatible; bingbot/2.0; +http://www.bing.com/bingbot.htm) Chrome/116.0.1938.76 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-92ddcb9c565f542f4b8446034f858453-c85322c8a12fa21a-01",
  "x-deno-userspace-tracestate": ""
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 1039ms 56ms
preload.png link 1040ms 56ms
font.woff2 link 1040ms 1062ms
photo.png img 1040ms 56ms
module.js script 1040ms 1071ms
main.js script 1040ms 1078ms
prefetch.png link 1046ms 1072ms
iframe iframe 1050ms 1126ms
js-ran.gif?t=1790135712304 img 2123ms 47ms
module-ran.gif?t=1790135712309 img 2127ms 43ms