ua-tracer
by Paul Kinlan
trace 6syuWGvZ
what does a user agent actually fetch, follow & run?
Trace 6syuWGvZ
First seen: 2026-07-04 04:03:34.268 UTC
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✗ fetched JS
✓ fetched image
✗ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✗ fetched web manifest
✓ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✓ fetched og:image
✓ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-07-04 04:03:34.268 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (16){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"host": "uatracer.com",
"priority": "u=0, i",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-fetch-user": "?1",
"traceparent": "00-8ffc3cb67f82933a75475ae0fb659d1f-0c3dced1a450787e-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-8ffc3cb67f82933a75475ae0fb659d1f-6fe6d1c0f61cca45-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-04 04:03:36.145 UTC | +1877 ms | CSS | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=6syuWGvZ",
"host": "uatracer.com",
"priority": "u=0",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-6e600d40edcfc926fa340dc998874a4a-f109ee448fc6b574-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-6e600d40edcfc926fa340dc998874a4a-e65f53cf79fcae07-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-04 04:03:36.357 UTC | +2089 ms | preload (image) | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (17){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=6syuWGvZ",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-8fae4f10368b569fe1464d91b68b67c0-286dbcf0fa2a29f9-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-8fae4f10368b569fe1464d91b68b67c0-fed00274bce92816-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-04 04:03:36.373 UTC | +2105 ms | iframe document | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (17){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=6syuWGvZ",
"host": "uatracer.com",
"priority": "u=0, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"traceparent": "00-2b6fb7c68d8c555ab801a385ef63b675-3187273844b0c2d7-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-2b6fb7c68d8c555ab801a385ef63b675-7a4412f93ef24b0a-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-04 04:03:36.381 UTC | +2113 ms | image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (17){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=6syuWGvZ",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-a97988c55f3e8e2db337c6683b108b55-325033d788bfce1b-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-a97988c55f3e8e2db337c6683b108b55-f20fb402928edebd-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-04 04:03:36.826 UTC | +2558 ms | CSS @import (nested stylesheet) | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (16){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=6syuWGvZ",
"host": "uatracer.com",
"priority": "u=0",
"referer": "https://uatracer.com/r/6syuWGvZ/62qCREUG/style.css",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-440ae51e64d84d45e75d01cf4f9813f3-f4c5f61a7a5a4b79-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-440ae51e64d84d45e75d01cf4f9813f3-b8c0372b8c1ca2db-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-04 04:03:37.567 UTC | +3299 ms | image inside iframe | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (17){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=6syuWGvZ",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/r/6syuWGvZ/62qCREUG/iframe",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-6531112316f847b25e49f48f2e68aad1-b2557abb446904fb-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-6531112316f847b25e49f48f2e68aad1-ef396cd818784b48-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-04 04:03:37.799 UTC | +3531 ms | CSS background-image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (17){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=6syuWGvZ",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/r/6syuWGvZ/62qCREUG/style.css",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-c1c92b1676656d4b3cef22ae3043b460-de8741067aa58a6f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-c1c92b1676656d4b3cef22ae3043b460-0c2b5bc574614e17-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-07-06 01:16:22.748 UTC | +162768480 ms | image | GET | Mozilla/5.0 (compatible; crawler) |
request headers (9){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US",
"connection": "keep-alive",
"host": "uatracer.com",
"traceparent": "00-2949cdc3a4c46a7cdb4a926d18e60dc6-b9dd4857d21ddd75-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (compatible; crawler)",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-06 07:32:48.496 UTC | +185354228 ms | image inside iframe | GET | Mozilla/5.0 (compatible; crawler) |
request headers (9){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US",
"connection": "keep-alive",
"host": "uatracer.com",
"traceparent": "00-d903b4f9cc94f704b7bdcd2be5284107-9ab13fa7a8f6d459-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (compatible; crawler)",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-22 19:53:34.451 UTC | +1612200183 ms | Twitter card image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (10){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-a17957e1868646673216aff05e6339e7-de1677955877fc40-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-22 20:16:37.979 UTC | +1613583711 ms | Open Graph image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (10){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-94107a5e6e60b77af40d90475088897b-c164b82d1efd08ba-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-22 20:27:34.569 UTC | +1614240301 ms | image inside iframe | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (10){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-15e22bb0c5ccbf850325f3b352820c56-650dfcec7f5a9f69-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-22 20:57:28.843 UTC | +1616034575 ms | Open Graph image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (10){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-4a9354f32cdc6a3f93b8820e1831a23a-16982de95efc34aa-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-23 08:21:30.335 UTC | +1657076067 ms | image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (10){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-e2cd4f2860ae745f18cb66e7b30e8404-da5f4c9708bc86fd-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-07-23 09:10:14.215 UTC | +1659999947 ms | image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (10){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-b1371fd978beddb5d2f8d5141f0efefd-b812602159110ea1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||