ua-tracer
by Paul Kinlan
ua-tracer
what does a user agent actually fetch, follow & run?
Trace TaqTYtuG
First seen: 2026-06-22 13:54:13.567 UTC
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
What this user agent did
Directly-referenced assets:
✓ fetched CSS
✓ fetched JS
✓ fetched image
✓ fetched font (HTML)
Document-level link hints:
✗ fetched favicon
✗ fetched apple-touch-icon
✓ fetched web manifest
✓ fetched preload
✗ fetched prefetch
Second-level follows (proves it parsed the linking file):
✓ followed CSS background-image
✓ followed CSS @font-face
✗ followed manifest icon
✓ followed CSS @import
Frames (does it descend into iframes?):
✓ fetched iframe document
✓ descended into iframe (loaded inner image)
Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):
✓ sent a CSP/Reporting report (any path)
✓ delivered via report-uri/Report-To header (no JS)
✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)
Social embed (Open Graph / Twitter card images):
✗ fetched og:image
✗ fetched twitter:image
JavaScript execution:
✓ EXECUTED classic JS
✓ EXECUTED ES module
✓ posted client timing
Server-side request waterfall
Every request the server received for this trace, in receive order. +ms is the delta from the
homepage request.
| Received | Δ | Kind | Method | User-Agent |
|---|---|---|---|---|
| 2026-06-22 13:54:13.567 UTC | +0 ms | homepage | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=0, i",
"referer": "https://mastodon.social/",
"sec-fetch-dest": "document",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "cross-site",
"traceparent": "00-1fcd7d4f58ca391a3c02be920ea3ec86-3dee29291bca0226-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:14.465 UTC | +898 ms | font (HTML) | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (14){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "https://ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=3, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "font",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-50c965503ac1a27fe0ec60cdc9492c9e-2d82e0007e0223a8-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:14.467 UTC | +900 ms | Reporting API report (POST) | POST | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"cache-control": "max-age=0",
"content-length": "472",
"content-type": "application/csp-report",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "null",
"priority": "u=7, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-47a7ddedf97e5b322b4949e9f4f693cb-a406470c7065689e-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"referrer\":\"https://mastodon.social/\",\"effectiveDirective\":\"style-src-elem\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":8,\"columnNumber\":1}}"
}
|
||||
| 2026-06-22 13:54:14.468 UTC | +901 ms | CSS | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=1, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-8ee4cdf81e5a47207f3bbf743d62c952-d552a84d68b00319-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:14.472 UTC | +905 ms | ES module | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (14){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "https://ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=1, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "script",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-db10e260780162488cbaf685529d04f5-cea32d1ed0a8f877-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:14.473 UTC | +906 ms | JS | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=1, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "script",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-e513726d0168382293574d129b37a1d0-f2c35d2fd9a2131f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:14.475 UTC | +908 ms | iframe document | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=0, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "iframe",
"sec-fetch-mode": "navigate",
"sec-fetch-site": "same-origin",
"traceparent": "00-7e9865d3ab6aa91b3a5d115a9955cac2-dda4ae38031fb0a2-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:15.025 UTC | +1458 ms | CSS @import (nested stylesheet) | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "text/css,*/*;q=0.1",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=1, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "style",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-edb22ecde8a9f24dd0f7a594bb09a5b0-50cdfa514684e3d0-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:15.942 UTC | +2375 ms | web app manifest | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=5, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "manifest",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-b59860c2543a075d4812746e58710102-e1f355ae7ba5ad17-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:15.995 UTC | +2428 ms | CSS @font-face | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=3, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "font",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-8a1f8d1cc9c3685aa3dbca43e31ec967-b38178ca11384bc9-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:16.028 UTC | +2461 ms | Reporting API report (POST) | POST | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"cache-control": "max-age=0",
"content-length": "496",
"content-type": "application/csp-report",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "null",
"priority": "u=7, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-3b004ce0ee28f1389663bd392e8ab701-6b9983322bcf0b19-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"referrer\":\"https://mastodon.social/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net:443/r/TaqTYtuG/main.js\",\"lineNumber\":45,\"columnNumber\":23}}"
}
|
||||
| 2026-06-22 13:54:16.030 UTC | +2463 ms | preload (image) | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=5, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-99d0d5322e2748254324be753feabe30-51153db0479182a2-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:16.031 UTC | +2464 ms | image | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=5, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-86517a38b15e459c11cd8c7806485c4d-1a6caf3a7b950599-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:16.036 UTC | +2469 ms | JS executed beacon | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=5, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-01fd2df41b078806535db698e5f25e77-7934c3ac68f8d6d2-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:16.036 UTC | +2469 ms | Reporting API report (POST) | POST | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"cache-control": "max-age=0",
"content-length": "474",
"content-type": "application/csp-report",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "null",
"priority": "u=7, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-65fd5090811b15dbd1c0842c3b5660ec-c9a8791a1cc9ce5a-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"referrer\":\"https://mastodon.social/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":770,\"columnNumber\":1}}"
}
|
||||
| 2026-06-22 13:54:16.036 UTC | +2469 ms | Reporting API report (POST) | POST | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"cache-control": "max-age=0",
"content-length": "474",
"content-type": "application/csp-report",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "null",
"priority": "u=7, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-93f79b7d99329825bd2c436af34a9764-620900f81ac1e6f5-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"referrer\":\"https://mastodon.social/\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":212,\"columnNumber\":1}}"
}
|
||||
| 2026-06-22 13:54:16.037 UTC | +2470 ms | CSS background-image | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=5, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-abfd8c9c345ce86f6d6ef79b04b8d340-6c8ef535d4ea5f16-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:16.037 UTC | +2470 ms | Reporting API report (POST) | POST | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"cache-control": "max-age=0",
"content-length": "2105",
"content-type": "application/json",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "https://ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=7, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-fded22c5597c8b31b9c804d7c9cc07e8-4991d25cd0af5471-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://mastodon.social/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":8,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://mastodon.social/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":212,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://mastodon.social/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":770,\"columnNumber\":1}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"https://mastodon.social/\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/TaqTYtuG/csp-report; report-to ua-tracer\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net:443/r/TaqTYtuG/main.js\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200,\"lineNumber\":45,\"columnNumber\":23}}],\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1\"}"
}
|
||||
| 2026-06-22 13:54:16.037 UTC | +2470 ms | CSP violation report (POST) | POST | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (18){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"cache-control": "max-age=0",
"content-length": "452",
"content-type": "application/json",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "https://ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=7, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-945e57f1b4ea1f776eac23197c4e8e93-c82c9eacf6c52c84-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
"x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net:443/r/TaqTYtuG/main.js\",\"ua\":\"Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1\"}"
}
|
||||
| 2026-06-22 13:54:16.038 UTC | +2471 ms | ES module executed | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=5, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-c87932c9e3c65379a46f8c7eaf089522-591a45bd8d68d93f-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:16.217 UTC | +2650 ms | image inside iframe | GET | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (13){
"accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=5, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/TaqTYtuG/iframe",
"sec-fetch-dest": "image",
"sec-fetch-mode": "no-cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-a2b9a8b22a2cf1fc1605630ad650ec33-5814927c810ff0b1-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
| 2026-06-22 13:54:18.729 UTC | +5162 ms | client timing POST | POST | Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1 |
request headers (17){
"accept": "*/*",
"accept-encoding": "gzip, deflate, br, zstd",
"accept-language": "en-GB,en;q=0.9",
"cache-control": "max-age=0",
"content-length": "3430",
"content-type": "application/json",
"host": "ua-tracer.paulkinlan-ea.deno.net",
"origin": "https://ua-tracer.paulkinlan-ea.deno.net",
"priority": "u=7, i",
"referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
"sec-fetch-dest": "empty",
"sec-fetch-mode": "cors",
"sec-fetch-site": "same-origin",
"traceparent": "00-ec6adc3417423d79fcffa32664af7bbe-32e7b56ad1133d49-01",
"tracestate": "",
"user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
"via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
|
||||
Client-side resource waterfall
Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real
browser-grade engine, not just a downloader.
| Resource | Initiator | Start | Duration | Timeline |
|---|---|---|---|---|
| other | 897ms | 1221ms | ||
| link | 899ms | 555ms | ||
| link | 900ms | 974ms | ||
| other | 900ms | 1930ms | ||
| link | 900ms | 2909ms | ||
| other | 901ms | 3624ms | ||
| img | 905ms | 3628ms | ||
| other | 907ms | 3704ms | ||
| script | 908ms | 1095ms | ||
| script | 909ms | 757ms | ||
| iframe | 912ms | 1726ms | ||
| css | 1459ms | 916ms | ||
| img | 2385ms | 1936ms | ||
| other | 2387ms | 1217ms | ||
| css | 2428ms | 2106ms | ||
| other | 2430ms | 2148ms | ||
| css | 2432ms | 639ms | ||
| other | 2432ms | 1581ms | ||
| img | 2449ms | 496ms |