ua-tracer
by Paul Kinlan
trace gHyCCgkw
what does a user agent actually fetch, follow & run?
Trace gHyCCgkw
First seen: 2026-09-01 11:26:58.171 UTC
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)
Bot verification: Not a known bot (no IP-range check applies).
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✗ fetched JS
✓ fetched image
✗ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✗ fetched web manifest
✓ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✓ fetched og:image
✓ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-09-01 11:26:58.171 UTC | +0 ms | homepage | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (14){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"host": "uatracer.com",
"priority": "u=0, i",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "none",
"sec-fetch-user": "?1",
"traceparent": "00-3d7d407d690198e5cdfab5413a673ae0-80e2c2dd4181570f-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-01 11:27:00.294 UTC | +2123 ms | CSS | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (14){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=gHyCCgkw",
"host": "uatracer.com",
"priority": "u=0",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-d8d52ac6461b096f5795c87cfdf68ce7-a47f2e607a21dd98-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-01 11:27:00.490 UTC | +2319 ms | preload (image) | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (15){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=gHyCCgkw",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-1a41812115be4994c248aa6ad8a49d3a-da00b59da2794e9f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-01 11:27:00.692 UTC | +2521 ms | image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (15){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=gHyCCgkw",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-9dfe02ae91da5249e34ff054fd7dd954-5b8e6d54d0614bf4-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-01 11:27:00.696 UTC | +2525 ms | iframe document | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (15){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=gHyCCgkw",
"host": "uatracer.com",
"priority": "u=0, i",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"traceparent": "00-211c46d7b7edaaaf39f7ccfcfc965027-8caf2b31359728a5-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-01 11:27:01.123 UTC | +2952 ms | CSS @import (nested stylesheet) | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (14){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=gHyCCgkw",
"host": "uatracer.com",
"priority": "u=0",
"referer": "https://uatracer.com/r/gHyCCgkw/a5C9qQI0/style.css",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-f8e12f842bdf5d310a1a1eb3354b478c-6e1171be363e9d04-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-01 11:27:01.492 UTC | +3321 ms | image inside iframe | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (15){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=gHyCCgkw",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/r/gHyCCgkw/a5C9qQI0/iframe",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-b413ffe1f9fa23a420621d1a18536ceb-bc3aa5ec83f83242-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-01 11:27:01.884 UTC | +3713 ms | CSS background-image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (15){
"accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
"accept-encoding": "identity",
"accept-language": "en-US,en;q=0.5",
"cookie": "ua-tracer-trace=gHyCCgkw",
"host": "uatracer.com",
"priority": "i",
"range": "bytes=0-499",
"referer": "https://uatracer.com/r/gHyCCgkw/a5C9qQI0/style.css",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-b538a531a538962d4acf88aafb5290f2-d7306210bd7cad8a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-02 00:50:49.509 UTC | +48231338 ms | iframe document | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1 |
request headers (12){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
"accept-encoding": "gzip",
"accept-language": "zh-CN,zh;q=0.9,en-US;q=0.8,en;q=0.7",
"cache-control": "no-cache",
"connection": "keep-alive, close",
"host": "uatracer.com",
"pragma": "no-cache",
"traceparent": "00-a627639f630d851a49e25aa89dec69a8-d0eaaaa43199fc8c-01",
"tracestate": "",
"upgrade-insecure-requests": "1",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 13_2_3 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/13.0.3 Mobile/15E148 Safari/604.1",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-03 12:45:50.409 UTC | +177532238 ms | image | GET | Mozilla/5.0 (compatible; crawler) |
request headers (9){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US",
"connection": "keep-alive",
"host": "uatracer.com",
"traceparent": "00-432f34a1d4ce7fc6f54c9dde7d1d566f-a5d48bb4027cec02-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (compatible; crawler)",
"via": "HTTP/1.1 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-03 16:39:35.728 UTC | +191557557 ms | image inside iframe | GET | Mozilla/5.0 (compatible; crawler) |
request headers (9){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"accept-language": "en-US",
"connection": "keep-alive",
"host": "uatracer.com",
"traceparent": "00-20b619788dcdd2ab4327392ff751d4b8-4cea31465dfe6348-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (compatible; crawler)",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-03 21:12:06.345 UTC | +207908174 ms | iframe document | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (7){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-bcca04257503211546a4effc61474c11-7c04f10e145a6154-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-09-03 21:12:10.931 UTC | +207912760 ms | image inside iframe | GET | Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36 |
request headers (9){
"accept-encoding": "gzip,deflate",
"connection": "close",
"host": "uatracer.com",
"traceparent": "00-efa9482020f4cef08a041db735135aea-4548d0c5dc094e8c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-efa9482020f4cef08a041db735135aea-ee2747fe0fe67186-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-16 21:09:02.025 UTC | +1330923854 ms | image inside iframe | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (12){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-73a40d012ebec4695ef2f1088d0020bc-8213cf777cb4b5da-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-73a40d012ebec4695ef2f1088d0020bc-c6de61ca1cca1c4e-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-17 01:02:38.726 UTC | +1344940555 ms | Open Graph image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (12){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-bea07e9cbab7dea3c7dc91e6b2b0ae4f-aa64cd9ace181d2c-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-bea07e9cbab7dea3c7dc91e6b2b0ae4f-e2257545702d230d-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-17 10:06:25.099 UTC | +1377566928 ms | image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (12){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-27370aedf58d698824c5d6a8598b9265-63ca3c4dd4f5a4b0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
"x-deno-userspace-traceparent": "00-27370aedf58d698824c5d6a8598b9265-1fdc45c1f3af4f2f-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-09-17 11:55:17.935 UTC | +1384099764 ms | Twitter card image | GET | Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com) |
request headers (10){
"accept": "*/*",
"accept-encoding": "gzip",
"accept-language": "zh,zh-CN;q=0.9",
"host": "uatracer.com",
"referer": "https://uatracer.com/",
"sec-fetch-dest": "document",
"traceparent": "00-8fd2b8147b17e9fd9402b43b9ea4fc32-6a87319562993c1f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; spider-feedback@bytedance.com)",
"via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
|
||||