ua-tracer
by Paul Kinlan
ua-tracer
what does a user agent actually fetch, follow & run?
Trace lQDBY7K1
First seen: 2026-06-29 12:13:18.943 UTC
User-Agent: Twitterbot/1.0
What this user agent did
Directly-referenced assets:
✗ fetched CSS
✗ fetched JS
✗ fetched image
✗ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✗ fetched web manifest
✗ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✗ followed CSS background-image
✗ followed CSS @font-face
✗ followed manifest icon
✗ followed CSS @import
Frames (does it descend into iframes?):
✗ fetched iframe document
✗ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✗ sent a CSP/Reporting report (any path)
✗ delivered via report-uri/Report-To header (no JS)
✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✓ fetched og:image
✓ fetched twitter:image
JavaScript execution:
✗ EXECUTED classic JS
✗ EXECUTED ES module
✗ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-06-29 12:13:18.943 UTC | +0 ms | homepage | GET | Twitterbot/1.0 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-c82b2c3e2290ae2262ffc2df568f5998-4e7859ea4d583567-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "c1b704254cd538a2",
"x-b3-sampled": "false",
"x-b3-spanid": "5543ea08ba60f582",
"x-b3-traceid": "0000000000000000629a6268a95a06db"
}
|
||||
| 2026-06-29 12:13:19.763 UTC | +820 ms | Open Graph image | GET | Twitterbot/1.0 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-83ff97d1bdd46acc4c2ca0b118edbbc4-ef06fc8901c29fb7-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "90dcd804c031ea03",
"x-b3-sampled": "false",
"x-b3-spanid": "aa10e8d3540773ca",
"x-b3-traceid": "0000000000000000629a6268a95a06db"
}
|
||||
| 2026-06-29 12:13:19.931 UTC | +988 ms | Twitter card image | GET | Twitterbot/1.0 |
request headers (15){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-8857f0a7bdb0ccdb76cb0b73d2197b09-c5f7c4eabf49a086-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "c7abda4966a13e6f",
"x-b3-sampled": "false",
"x-b3-spanid": "e345a779dd7fc81b",
"x-b3-traceid": "0000000000000000629a6268a95a06db",
"x-deno-userspace-traceparent": "00-8857f0a7bdb0ccdb76cb0b73d2197b09-84f3d926b808f460-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-06-29 12:17:52.384 UTC | +273441 ms | Twitter card image | GET | Twitterbot/1.0 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-7e14437acba6c228d4e6570f79f17d7c-2efe27bc63705843-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "4a06bdd5208a4587",
"x-b3-sampled": "false",
"x-b3-spanid": "74743ca4b2d306e9",
"x-b3-traceid": "00000000000000001acd86c17f2c5ac2"
}
|
||||
| 2026-06-29 12:17:52.390 UTC | +273447 ms | Open Graph image | GET | Twitterbot/1.0 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-e6937898ec64bc914721018428e365fc-a0dd23a20f688e2f-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "5aea21c8d9ef686d",
"x-b3-sampled": "false",
"x-b3-spanid": "a03cff12a0a29754",
"x-b3-traceid": "00000000000000001acd86c17f2c5ac2"
}
|
||||
| 2026-06-29 12:23:04.326 UTC | +585383 ms | Twitter card image | GET | Twitterbot/1.0 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-41b60410681a5d47c20e9fc4aedff80a-0aefbd8c47ff8947-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "96c6ce78e616c494",
"x-b3-sampled": "false",
"x-b3-spanid": "42570024b55085e1",
"x-b3-traceid": "0000000000000000b510f1d775f6b529"
}
|
||||
| 2026-06-29 12:23:04.478 UTC | +585535 ms | Twitter card image | GET | Twitterbot/1.0 |
request headers (15){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-7361daa798f3bf8411aecff41e7a6f25-1e8661247168a0ff-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "e733ce09d10cfd1c",
"x-b3-sampled": "false",
"x-b3-spanid": "da31eff0741a4ab5",
"x-b3-traceid": "0000000000000000b510f1d775f6b529",
"x-deno-userspace-traceparent": "00-7361daa798f3bf8411aecff41e7a6f25-bcbdc258680d1372-01",
"x-deno-userspace-tracestate": ""
}
|
||||
| 2026-06-29 12:38:04.885 UTC | +1485942 ms | Twitter card image | GET | Twitterbot/1.0 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate",
"finagle-ctx-com.twitter.finagle.retries": "0",
"host": "uatracer.com",
"traceparent": "00-c67a6a6399d03089392c8202f6616d41-376358d296b30224-01",
"tracestate": "",
"user-agent": "Twitterbot/1.0",
"via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
"x-b3-flags": "17146314754",
"x-b3-parentspanid": "3ad22356d51067b8",
"x-b3-sampled": "false",
"x-b3-spanid": "8779b6d841e0ec1d",
"x-b3-traceid": "000000000000000036a6ff5ea8244472"
}
|
||||