ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace MtUjwaEx

First seen: 2026-06-22 18:23:40.426 UTC
User-Agent: Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✓ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-22 18:23:40.426 UTC +0 ms homepage GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0, i",
  "referer": "https://go.bsky.app/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "cross-site",
  "traceparent": "00-c3d217dc3b3875a0733a1cd35b218761-d3cb19a3bd71ebd6-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.936 UTC +510 ms CSS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-6002b725451f14126d4e3359513ccb5d-7af2909b5eb2727d-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.940 UTC +514 ms font (HTML) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-88042eb173f8917fd6ae46bc9640fae7-e6822b013a856867-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.940 UTC +514 ms preload (image) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-795f2c71422674130043195165479cce-34d5149ecd5c3886-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.944 UTC +518 ms prefetch GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-de6e187e0cebdb4cc76c5f596d2523e0-03c0ea1d44650037-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.953 UTC +527 ms iframe document GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-3286a02919a0d9112abbdc589eae5edc-55f61a2850867dff-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.953 UTC +527 ms image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-4e1b2f96e7f4694c0d99649af9ffc78b-d2edfba87835a138-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.954 UTC +528 ms JS GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d0c28c5f281e30895a84502a2f96a032-44d51e9c9958e165-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:40.956 UTC +530 ms ES module GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-c5685863a17b4d67e297d79cb163ba84-b211c826d4e785a7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:41.347 UTC +921 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/MtUjwaEx/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-94beb3cf8b20064867dd01bf4765b051-21ed848dc542a24b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:41.716 UTC +1290 ms image inside iframe GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/MtUjwaEx/iframe",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d0d0a5eaa30dc20a54bd518af57a5b8a-c8272791054d04a5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:41.977 UTC +1551 ms JS executed beacon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-35968a096f5a6b33f364d2794f9d899e-1f413350b656d478-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:41.982 UTC +1556 ms CSS @font-face GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (18) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/MtUjwaEx/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5f6694038f36ca7255567f05bc09cf9d-777c32d02da5fead-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:41.985 UTC +1559 ms CSS background-image GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/MtUjwaEx/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-72ff637455d03f727be94e5c74a49f5f-b7b3bea98bf7f194-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:42.082 UTC +1656 ms CSP violation report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (21) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "content-length": "424",
  "content-type": "application/json",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-929460d88369666951dd66669e0308af-0f66cca512fb23ba-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/r/MtUjwaEx/main.js\",\"ua\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\"}"
}
2026-06-22 18:23:42.088 UTC +1662 ms Reporting API report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (21) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "content-length": "2061",
  "content-type": "application/json",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-f04893d3dc13c2d2d6cf2d6e6579b0c2-3a5f8e20b8cee346-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":8,\"columnNumber\":0,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://go.bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":212,\"columnNumber\":0,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://go.bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":720,\"columnNumber\":0,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://go.bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/r/MtUjwaEx/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://go.bsky.app/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\"}"
}
2026-06-22 18:23:42.176 UTC +1750 ms ES module executed GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ccff71c5e8b1afe2bbd72c062cca0d07-441d52f36a8fdb7f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:42.210 UTC +1784 ms web app manifest GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=2",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-5b63b732436ee943474574005a9ac441-7690273215b76e55-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-5b63b732436ee943474574005a9ac441-4830091e8a0995fa-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 18:23:42.844 UTC +2418 ms favicon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-13060eee33df9740394aeb9860d41872-53c064c8473fae36-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:42.848 UTC +2422 ms apple-touch-icon GET Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (17) 
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-068367a727d2eedaf2b1e600709b8f61-b057f333e2a6c109-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:43.477 UTC +3051 ms client timing POST POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "content-length": "3321",
  "content-type": "application/json",
  "dnt": "1",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?1",
  "sec-ch-ua-platform": "\"Android\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-779487f7474fd441909a561e58e5c9b8-ca9646271e907aa5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net"
}
2026-06-22 18:23:49.644 UTC +9218 ms Reporting API report (POST) POST Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36
request headers (12) 
{
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en,fr-CA;q=0.9,fr;q=0.8,en-US;q=0.7,fr-FR;q=0.6",
  "content-length": "2402",
  "content-type": "application/reports+json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "traceparent": "00-5a94b28c35c4da99d70076c5e8705198-a12c25aeba8e8f4a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36",
  "via": "HTTP/2 ord.vultr.prod.deno-cluster.net",
  "x-report-body": "[{\"age\":8700,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":212,\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"referrer\":\"https://go.bsky.app/\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\"},{\"age\":8700,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-elem\",\"lineNumber\":8,\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"referrer\":\"https://go.bsky.app/\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\"},{\"age\":8698,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":720,\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"referrer\":\"https://go.bsky.app/\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\"},{\"age\":7677,\"body\":{\"blockedURL\":\"inline\",\"columnNumber\":11,\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":45,\"originalPolicy\":\"style-src 'self'; report-uri /r/MtUjwaEx/csp-report; report-to ua-tracer\",\"referrer\":\"https://go.bsky.app/\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/r/MtUjwaEx/main.js\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Linux; Android 10; K) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Mobile Safari/537.36\"}]"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 931ms 420ms
font.woff2 link 931ms 1471ms
preload.png link 934ms 621ms
prefetch.png link 948ms 941ms
iframe iframe 961ms 731ms
photo.png img 961ms 829ms
main.js script 961ms 445ms
module.js script 962ms 1226ms
import.css css 1359ms 609ms
js-ran.gif?t=1782152622324 img 1982ms 528ms
css-bg.png css 1989ms 602ms
css-font.woff2 css 1989ms 326ms
csp-report beacon 2092ms 1297ms
report beacon 2095ms 890ms
manifest.json link 2136ms 557ms
module-ran.gif?t=1782152622541 img 2192ms 639ms
favicon.ico other 2856ms 305ms
apple-touch-icon.png other 2856ms 447ms