ua-tracer by Paul Kinlan

trace I4zaayr3

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace I4zaayr3

First seen: 2026-10-11 20:50:37.365 UTC
User-Agent: MetaRabbitBot/2.0 (+https://www.metarabbit.dev/terms#automated-fetching)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✗ fetched CSS ✗ fetched JS ✗ fetched image ✗ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✗ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✗ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✗ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✓ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-11 20:50:37.365 UTC +0 ms homepage GET MetaRabbitBot/2.0 (+https://www.metarabbit.dev/terms#automated-fetching)
request headers (15) 
{
  "accept-encoding": "gzip, br",
  "cdn-loop": "cloudflare; loops=1",
  "cf-ew-via": "15",
  "cf-ray": "a490bcf708ecc891-AMS",
  "cf-visitor": "{\"scheme\":\"https\"}",
  "cf-worker": "metarabbit.dev",
  "host": "uatracer.com",
  "traceparent": "00-2907857bafd6d361cd31e5eac07c1fcf-c0be1fb1368efd60-01",
  "tracestate": "",
  "user-agent": "MetaRabbitBot/2.0 (+https://www.metarabbit.dev/terms#automated-fetching)",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-2907857bafd6d361cd31e5eac07c1fcf-f6290ff8e770355b-01",
  "x-deno-userspace-tracestate": "",
  "x-forwarded-for": "2a06:98c0:3600::103",
  "x-forwarded-proto": "https"
}
2026-10-11 20:50:40.938 UTC +3573 ms Open Graph image GET —
request headers (12) 
{
  "accept-encoding": "gzip, br",
  "cdn-loop": "cloudflare; loops=1",
  "cf-ew-via": "15",
  "cf-ray": "a490bd0db9a0c891-AMS",
  "cf-visitor": "{\"scheme\":\"https\"}",
  "cf-worker": "metarabbit.dev",
  "host": "uatracer.com",
  "traceparent": "00-44aabf191dae9dff5c8c6b5944915fdb-0ff0fbc5be65ac64-01",
  "tracestate": "",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-forwarded-for": "2a06:98c0:3600::103",
  "x-forwarded-proto": "https"
}
2026-11-04 20:20:19.887 UTC +2071782522 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36
request headers (8) 
{
  "accept": "*/*",
  "accept-encoding": "identity",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-7413816fb5eae79b53dba2bc338f003f-cf79c1188201dcb4-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/146.0.0.0 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
2026-11-04 20:20:20.862 UTC +2071783497 ms favicon GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36
request headers (8) 
{
  "accept": "*/*",
  "accept-encoding": "identity",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-bfaa397258e69ff2d0c6b6a0dba838b9-45354e0eea75a3c0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
2026-11-04 20:26:38.476 UTC +2072161111 ms favicon GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "identity",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-ee8f5e5ed43393589ba81dcafa0ec6ff-ae48209ee0a612ba-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/145.0.0.0 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-ee8f5e5ed43393589ba81dcafa0ec6ff-f3379b1517db1653-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-04 20:29:41.639 UTC +2072344274 ms Open Graph image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "identity",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-a9e0a9536c774e3e3cb216d726e3dd6c-07d09d1c4a81df94-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/131.0.0.0 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a9e0a9536c774e3e3cb216d726e3dd6c-ceb1e529e693988c-01",
  "x-deno-userspace-tracestate": ""
}