ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace 6whzIcMc

First seen: 2026-06-22 13:05:10.859 UTC
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✗ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-22 13:05:10.859 UTC +0 ms homepage GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0, i",
  "referer": "android-app://com.linkedin.android/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "sec-gpc": "1",
  "traceparent": "00-8ba807aa7fc27d7108d91234dc116c97-8031d75c7e186c12-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.562 UTC +703 ms font (HTML) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-5a7fdcf6a6756adfe4db3be6a7c33e67-4cacb1afdd818d39-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.564 UTC +705 ms CSS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-43b26532837036b647acce7246da38e8-daed10572a9685be-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.621 UTC +762 ms preload (image) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-f9c171c7baeb6c448f729f4d79a9e1dd-40cbc517313006e7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.624 UTC +765 ms prefetch GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "sec-purpose": "prefetch",
  "traceparent": "00-bff2957eebce938d0e43f7bf5071ce01-72bd428fe0e2a54e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.633 UTC +774 ms image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-a2a03e98c99fe84fb8266d95c43a6055-59fba4ebb8e74844-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.636 UTC +777 ms iframe document GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-a3d28e93531a50c72ead15a5faeda191-5979b3c7752a31e8-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.643 UTC +784 ms ES module GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-c60083ca9fecf25a1188406121590f1a-86a8c31b6d449394-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:11.644 UTC +785 ms JS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-181dbfc46b46a6274193213161294f1d-ebdfa41c90188205-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:12.614 UTC +1755 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/6whzIcMc/style.css",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-834c76b9b6ec2d88547a005e62ffb41d-b794827360b75c3e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:12.665 UTC +1806 ms image inside iframe GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/6whzIcMc/iframe",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-1f47692957770607d484d0b55f973ef1-f6ea42edddb9f8c1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:13.172 UTC +2313 ms CSS @font-face GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/6whzIcMc/style.css",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-34bb8c962c0d951bf133f03f0a0c5050-03f587c0bd5c56f2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:13.176 UTC +2317 ms CSS background-image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/6whzIcMc/style.css",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-eeefbb0ff2f57f8058f6323c23fb5d1b-ee3d5bab5e411cc7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:13.646 UTC +2787 ms JS executed beacon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-096ec74ea5e876fe1357129f31249b98-f054d7113863d89a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:13.653 UTC +2794 ms CSP violation report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (21) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "content-length": "424",
  "content-type": "application/json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-574aee2c65efee40719760c34f045859-11232caa4635adbe-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/r/6whzIcMc/main.js\",\"ua\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\"}"
}
2026-06-22 13:05:13.656 UTC +2797 ms ES module executed GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-50301d296c35a854003ce6788c68a6a4-05b86a466a821540-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:13.710 UTC +2851 ms web app manifest GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=2",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-f38db1f889a8d21fa6030a7407247700-028aa00e76d1d8c1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-f38db1f889a8d21fa6030a7407247700-9cb44d2ee7a5b881-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 13:05:14.670 UTC +3811 ms favicon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-2e92d001214c6789838412aeee74baac-a2cc396915bbbce5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:14.672 UTC +3813 ms apple-touch-icon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-9baa988e09f2fefbf5c960fa3aa7168c-75afc6cdb9d09169-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 13:05:15.268 UTC +4409 ms client timing POST POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-US,en;q=0.5",
  "content-length": "2979",
  "content-type": "application/json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Brave\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "sec-gpc": "1",
  "traceparent": "00-0c31778f145aa4442c7be620f962a81f-2fa7aa9ff436fbd1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 1277ms 1054ms
font.woff2 link 1278ms 546ms
preload.png link 1278ms 1230ms
prefetch.png link 1344ms 779ms
iframe iframe 1353ms 1009ms
photo.png img 1353ms 1492ms
main.js script 1353ms 2006ms
module.js script 1354ms 1690ms
import.css css 2338ms 541ms
css-bg.png css 2897ms 500ms
css-font.woff2 css 2900ms 726ms
manifest.json link 3154ms 1429ms
js-ran.gif?t=1782133516364 img 3369ms 598ms
csp-report beacon 3376ms 796ms
module-ran.gif?t=1782133516381 img 3382ms 1000ms
favicon.ico other 4397ms 511ms