ua-tracer by Paul Kinlan

trace S0IPmrTu

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace S0IPmrTu

First seen: 2026-10-06 12:24:11.117 UTC
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✗ fetched JS ✓ fetched image ✗ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✓ fetched og:image ✓ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-06 12:24:11.117 UTC +0 ms homepage GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (16) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-15c9f0ee1dc9c67fa78ac0c254ff250f-d0ee82ff7b25a07b-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-15c9f0ee1dc9c67fa78ac0c254ff250f-5129bf36cc819425-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-06 12:24:11.913 UTC +796 ms CSS GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8358d3e6ffc11b6a3d67b58e2792a68e-0a7186a54aa30dfe-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8358d3e6ffc11b6a3d67b58e2792a68e-e4b4af6118f0840d-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-06 12:24:12.155 UTC +1038 ms preload (image) GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d4806cdceea321744f6195fef3dadef3-e0718ad92fd967b2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d4806cdceea321744f6195fef3dadef3-2c4bddc4e853c9e5-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-06 12:24:12.364 UTC +1247 ms iframe document GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (17) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-bc22fc409772eb711230f8a77af61652-1e14a83f4f8ebbaf-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-bc22fc409772eb711230f8a77af61652-ef10c27dd2fb0203-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-06 12:24:12.367 UTC +1250 ms image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-988ceb4a65701ef38d61fdbbb16f0875-b2d13dd867a3ef40-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-988ceb4a65701ef38d61fdbbb16f0875-3f7192169113a63d-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-06 12:24:12.595 UTC +1478 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/S0IPmrTu/5DL0OAMa/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-de8b9abba8e198320659ef08b57f18a8-0d67cbdecdc85ac9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-de8b9abba8e198320659ef08b57f18a8-6667e9d27efdfdaa-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-06 12:24:12.815 UTC +1698 ms image inside iframe GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/r/S0IPmrTu/5DL0OAMa/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-52625fb17f5e6a963bf63748a00155dc-d812fe2df047bab4-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-52625fb17f5e6a963bf63748a00155dc-2c785d3b6fde6807-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-06 12:24:13.046 UTC +1929 ms CSS background-image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/r/S0IPmrTu/5DL0OAMa/style.css",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-13744116f8e9d9afc0987ade3e9f8bdf-a47ba6b181a3e2d3-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-13744116f8e9d9afc0987ade3e9f8bdf-6c1da5506675200f-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-08 20:58:00.582 UTC +203629465 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (7) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-f6482d979ca88d96c99d33e97580b54a-db0a74978bfaf014-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
2026-10-08 20:58:02.470 UTC +203631353 ms image inside iframe GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-86ae3b3256bedf08e8ec9123a438f3ca-edc29d090ccacd03-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-86ae3b3256bedf08e8ec9123a438f3ca-cdfaceb5aa3dd592-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-09 02:35:25.504 UTC +223874387 ms image GET Mozilla/5.0 (compatible; crawler)
request headers (11) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate",
  "accept-language": "en-US",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-6af38178b0d7e97f1e3c834dc1ec6d78-831e40749c9912b9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; crawler)",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-6af38178b0d7e97f1e3c834dc1ec6d78-cb3a7f8283ffd1ed-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-18 13:44:57.459 UTC +1041646342 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
  "accept-encoding": "gzip,deflate,br",
  "accept-language": "en-US,en;q=0.9",
  "host": "uatracer.com",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-d214fcf811f7cda34eab5a996f424cb0-2bb89e1f7c5e0182-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d214fcf811f7cda34eab5a996f424cb0-43f7b612432feff5-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-24 21:23:22.614 UTC +1587551497 ms image inside iframe GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (12) 
{
  "accept": "*/*",
  "accept-encoding": "gzip",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "document",
  "traceparent": "00-8fe9f0091d2383dfe9d02219493441d2-bcf2eea7d37ca6cc-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8fe9f0091d2383dfe9d02219493441d2-6215bf5716a873fd-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-25 10:05:26.333 UTC +1633275216 ms Open Graph image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "document",
  "traceparent": "00-e0db9b2830728a82fabf05384709dc5d-3bff5715607cf303-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-25 12:19:08.493 UTC +1641297376 ms image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "document",
  "traceparent": "00-4dbe67026310c5f5ff7058402d9f5eed-b1fb0887e5939d60-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-25 13:07:17.474 UTC +1644186357 ms Twitter card image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "document",
  "traceparent": "00-bbf9b8e77fb468ea86a19b5dfcb1cd69-ca359f2e4368700f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}