ua-tracer by Paul Kinlan

trace pYwWjg2C

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace pYwWjg2C

First seen: 2026-10-07 14:41:32.280 UTC
User-Agent: Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
Bot verification: Not a known bot (no IP-range check applies).

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✗ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✗ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✗ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✗ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✗ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-10-07 14:41:32.280 UTC +0 ms homepage GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (16) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh,zh-CN;q=0.9",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-6b523245a72d2a827f7479ae8e4eb238-862856e007d653e5-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-6b523245a72d2a827f7479ae8e4eb238-6e37a63b0ddbf673-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.028 UTC +748 ms preload (image) GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d9640bb8a741a6212c29e2cfcab22fcf-8d77a7a1cd0af375-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-d9640bb8a741a6212c29e2cfcab22fcf-809c12105c2f4f5f-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.037 UTC +757 ms CSS GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-127076a5a0e13561ecb5cb7a1df95b2a-dbfa79aff2fe3a4c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-127076a5a0e13561ecb5cb7a1df95b2a-ab547d61d6b50b21-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.300 UTC +1020 ms image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ad8566b28dafd356aa2471bc9d6ffb1c-0b3b0a7a90a5b3f5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-ad8566b28dafd356aa2471bc9d6ffb1c-8fe072f7f4c22257-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.305 UTC +1025 ms JS GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-84e2c4156e38b213d50a9f3ffda1c991-3a02ca69e7a02b49-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-84e2c4156e38b213d50a9f3ffda1c991-21c3077313c69dfc-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.306 UTC +1026 ms ES module GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "origin": "https://uatracer.com",
  "priority": "u=1",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e88e1e4844496631dad78c6083470792-22bc01f198be6320-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e88e1e4844496631dad78c6083470792-3ff74b700af64b78-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.309 UTC +1029 ms iframe document GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/heif,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0, i",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-82ce93346dead4f161f570b1b7870878-81dc8b25f8d5e525-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-82ce93346dead4f161f570b1b7870878-a89fc65a103cd161-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.496 UTC +1216 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (16) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "u=0",
  "referer": "https://uatracer.com/r/pYwWjg2C/Jylh9n7p/style.css",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-2caa2ec92cd5168c4311b08e0cfb2bf3-f49003d072d226c7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-2caa2ec92cd5168c4311b08e0cfb2bf3-1848524e61ae12c3-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.670 UTC +1390 ms image inside iframe GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/r/pYwWjg2C/Jylh9n7p/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-6c524f3fce7fe579ff115e2e23f82525-98ad1830690e2b12-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-6c524f3fce7fe579ff115e2e23f82525-94187b5d2baeaef0-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.885 UTC +1605 ms JS executed beacon GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-57ef1048688dca105fc674ef2af2a0ec-57df02ddb3b2dae0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-57ef1048688dca105fc674ef2af2a0ec-52549543b5f58e31-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.889 UTC +1609 ms CSS background-image GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/r/pYwWjg2C/Jylh9n7p/style.css",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-fd9f4bc86ae3ca7665a43ce6079e6e76-9bafcf1f75bd5ced-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-fd9f4bc86ae3ca7665a43ce6079e6e76-3828c6c53252302f-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-07 14:41:33.982 UTC +1702 ms ES module executed GET Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)
request headers (17) 
{
  "accept": "image/heif,image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "identity",
  "accept-language": "zh,zh-CN;q=0.9",
  "cookie": "[redacted]",
  "host": "uatracer.com",
  "priority": "i",
  "range": "bytes=0-499",
  "referer": "https://uatracer.com/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-af13925a37161ee256149a563f885257-8c601d78dd8f9842-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 5.0) AppleWebKit/537.36 (KHTML, like Gecko) Mobile Safari/537.36 (compatible; Bytespider; https://zhanzhang.toutiao.com/)",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-af13925a37161ee256149a563f885257-f69662107a8bdad5-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-09 05:34:14.152 UTC +139961872 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-21eccb703904efb7e4d0b790c63ab24d-789249cd9be5d102-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-21eccb703904efb7e4d0b790c63ab24d-65c6b7adc9bbe5ae-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-09 05:34:15.143 UTC +139962863 ms image inside iframe GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36
request headers (9) 
{
  "accept-encoding": "gzip,deflate",
  "connection": "close",
  "host": "uatracer.com",
  "traceparent": "00-420b66f6d366b0bdbc3d44484e9d2246-883ac0274ca06e15-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot) Chrome/119.0.6045.214 Safari/537.36",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-420b66f6d366b0bdbc3d44484e9d2246-391e517bd709c91b-01",
  "x-deno-userspace-tracestate": ""
}
2026-10-10 00:29:32.283 UTC +208080003 ms image inside iframe GET Mozilla/5.0 (compatible; crawler)
request headers (9) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate",
  "accept-language": "en-US",
  "connection": "keep-alive",
  "host": "uatracer.com",
  "traceparent": "00-3e01e5849a9943b1a9656e3a96cc2aa9-329842407559d510-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (compatible; crawler)",
  "via": "HTTP/1.1 ord.vultr.prod.deno-cluster.net"
}
2026-10-16 01:32:35.278 UTC +730262998 ms iframe document GET Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36
request headers (13) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8",
  "accept-encoding": "gzip,deflate,br",
  "accept-language": "en-US,en;q=0.9",
  "host": "uatracer.com",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-18ca6499d39d7c793667c66377d6f66f-83fedccf8f93e11c-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; Reflectionbot/1.0; +https://reflection.ai/bot) Chrome/151.0.0.0 Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}

Client-side resource waterfall

JS executed (beacon hit) but no resource-timing payload was posted (UA may block sendBeacon/fetch or strip the body).