ua-tracer by Paul Kinlan

trace YytBI0vD

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace YytBI0vD

First seen: 2026-10-30 02:19:54.684 UTC
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✗ fetched JS ✓ fetched image ✗ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✓ fetched og:image ✓ fetched twitter:image

JavaScript execution:

✗ EXECUTED classic JS ✗ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-30 02:19:54.684 UTC +0 ms homepage GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (14) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-e4e0dad2edb8a2823bf08de9ea952352-c92259135afa1e74-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-30 02:19:56.781 UTC +2097 ms CSS GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (14) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4875e7e7d7dcbe2884b88265db62e662-218638bb0db915c6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-30 02:19:57.001 UTC +2317 ms preload (image) GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (15) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-83f0b550a9fed437529b1a9f669863de-25765e148bf0e737-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-30 02:19:57.353 UTC +2669 ms iframe document GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-85d2d273742928923b0e378f3f485180-ef57295360f6e1ef-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-30 02:19:57.617 UTC +2933 ms image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (15) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-85fc2f7c9b9da9052bb8788a96101e54-b55b8712a7713e28-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-30 02:19:57.621 UTC +2937 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (14) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/YytBI0vD/2RYgHgWY/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8ae78c6ebf02c2d85e3ae34d53f09d1f-9c7411857bc017c7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-30 02:19:58.100 UTC +3416 ms image inside iframe GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (15) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/r/YytBI0vD/2RYgHgWY/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-bbbe8373ed04c04214b8c91dd30b04bb-a7aceb4be1bad3ce-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-10-30 02:19:58.633 UTC +3949 ms CSS background-image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (15) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "en-US,en;q=0.5",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/r/YytBI0vD/2RYgHgWY/style.css",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ccdc7fcccb2ff1eb27ac130602a36836-cea75b993d31beda-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-11-01 18:01:14.865 UTC +229280181 ms image GET Mozilla/5.0 (compatible; crawler)
request headers (11) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate",
  "accept-language": "en-US",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-891dc64569a4418287f47abf72743c92-e7ea23a0d09e1bfb-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; crawler)",
  "via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-891dc64569a4418287f47abf72743c92-b86d0d5fe309ce17-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-01 18:42:55.678 UTC +231780994 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-6ed29f39dfacae206e97ffdb177fd324-21c5c26047800340-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-6ed29f39dfacae206e97ffdb177fd324-4fc2c5106ae8ba65-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-01 18:42:59.847 UTC +231785163 ms image inside iframe GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-cff13f0cf8844074a40cbac877b662a1-a681af0dcbe22659-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-cff13f0cf8844074a40cbac877b662a1-8fd7cdd7e08307ca-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-01 18:57:37.901 UTC +232663217 ms image inside iframe GET Mozilla/5.0 (compatible; crawler)
request headers (11) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate",
  "accept-language": "en-US",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-077b976c265d35f6a008f239f9530ca4-c8c01801461f5474-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; crawler)",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-077b976c265d35f6a008f239f9530ca4-9226218f9367d242-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-04 01:54:20.623 UTC +430465939 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36
request headers (13) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
  "accept-encoding": "gzip,deflate,br",
  "accept-language": "en-US,en;q=0.9",
  "host": "uatracer.com",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-84317b167d0b13df33c57540fe0cd464-6febe0ffc52b2d08-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-11-08 05:58:45.153 UTC +790730469 ms Twitter card image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (12) 
{
  "accept": "*/*",
  "accept-encoding": "gzip",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "document",
  "traceparent": "00-fb827667c52cef1dd19492a217e3db09-585d422446755d71-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-fb827667c52cef1dd19492a217e3db09-029fb32ae0de2946-01",
  "x-deno-userspace-tracestate": ""
}
2026-11-08 06:22:17.043 UTC +792142359 ms Open Graph image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "document",
  "traceparent": "00-45a553e96079e0f430188159771d7cbb-abb3550a502aea7d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-11-08 07:28:36.150 UTC +796121466 ms image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
request headers (10) 
{
  "accept": "*/*",
  "accept-encoding": "gzip",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "document",
  "traceparent": "00-78e351fa23e89db284e13ad624650445-aec6dec85914ab4e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}