ua-tracer by Paul Kinlan

trace CbALCoof

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace CbALCoof

First seen: 2026-07-10 21:22:45.587 UTC
User-Agent: HackerLangsBot/1.0 (+link preview)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✗ fetched JS ✗ fetched image ✗ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✓ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-07-10 21:22:45.587 UTC +0 ms homepage GET HackerLangsBot/1.0 (+link preview)
request headers (10) 
{
  "accept": "text/html,application/xhtml+xml",
  "accept-encoding": "br, gzip, deflate",
  "accept-language": "*",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "sec-fetch-mode": "cors",
  "traceparent": "00-428cc48c38a627ae5d1463c9f98f2434-b526d258c8f3ec6c-01",
  "tracestate": "",
  "user-agent": "HackerLangsBot/1.0 (+link preview)",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
2026-07-18 17:18:38.575 UTC +676552988 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (12) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "cross-site",
  "sec-fetch-storage-access": "active",
  "traceparent": "00-5c8e15cc6b1215e91a5c11451b3a45aa-5d98bf771cb8e035-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-18 17:18:52.824 UTC +676567237 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (12) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "origin": "https://hackertrans.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-6ada4168bec10218034607ebdc44cce2-12b839af75ce1fd0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-19 02:39:01.621 UTC +710176034 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (12) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "cross-site",
  "sec-fetch-storage-access": "active",
  "traceparent": "00-fd20f5083fee9274ce558d9c238c734f-d755968985c80f3a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-19 02:39:37.135 UTC +710211548 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (12) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "origin": "https://hackertrans.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-9876c9f9666f2da0a89e97e68c78de2e-eb0cc361da53f952-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-19 06:55:01.234 UTC +725535647 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (12) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "cross-site",
  "sec-fetch-storage-access": "active",
  "traceparent": "00-9f209480877343dd2c199d52b610a0dd-9a12cfb6c50706db-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-19 06:55:12.650 UTC +725547063 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (12) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "origin": "https://hackertrans.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-9a2d62c4694e15359caf10d3b49a2dcf-6c342e97b15e4682-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-19 10:37:21.759 UTC +738876172 ms Open Graph image GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (12) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "cross-site",
  "sec-fetch-storage-access": "active",
  "traceparent": "00-3f96a199219fca872f9e05b8e8baba6e-bb8f608a0f9c5642-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-07-19 10:37:32.482 UTC +738886895 ms Open Graph image GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (14) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip",
  "accept-language": "en-US,en;q=0.9;q=0.9",
  "host": "uatracer.com",
  "origin": "https://hackertrans.com",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-7dc13bde311335db1dbc7a66bdf31200-d7dbe5ead80d4ea1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7dc13bde311335db1dbc7a66bdf31200-bbd73d60798696aa-01",
  "x-deno-userspace-tracestate": ""
}
2026-07-22 03:02:58.515 UTC +970812928 ms Open Graph image GET Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))
request headers (6) 
{
  "accept": "*/*",
  "host": "uatracer.com",
  "traceparent": "00-ec1ab3d65f50f10830235edd80035b7a-e67dcee358830835-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36 (compatible; meta-externalagent/1.1 (+https://developers.facebook.com/docs/sharing/webmasters/crawler))",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}