ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace XsPP04j2

First seen: 2026-06-22 12:57:38.284 UTC
User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✗ fetched favicon ✗ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✗ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✓ fetched iframe document ✓ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✗ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-22 12:57:38.284 UTC +0 ms homepage GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (14) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0, i",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "traceparent": "00-7a36212b2629f10f4f2f1e2cc07da7d5-da2c1182315f8d7c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7a36212b2629f10f4f2f1e2cc07da7d5-80e28e5488a6f286-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:38.716 UTC +432 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "448",
  "content-type": "application/csp-report",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b9e163590dd6524e1263da4fb32f6f36-aff5e9c9f94e356e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b9e163590dd6524e1263da4fb32f6f36-2f5ecfedc84e8a4f-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"referrer\":\"\",\"effectiveDirective\":\"style-src-elem\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/XsPP04j2/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":8,\"columnNumber\":1}}"
}
2026-06-22 12:57:38.718 UTC +434 ms CSS GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b404053d1307ac6ff728037db1ff064e-8469065577cfcf0b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b404053d1307ac6ff728037db1ff064e-546c15ae2bb5130f-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:38.720 UTC +436 ms font (HTML) GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=3, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-15ae484de59fc337214516b465815e8a-5c7b9ac7d8751a91-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-15ae484de59fc337214516b465815e8a-6fbd48bf136c3779-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:38.744 UTC +460 ms JS GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e8a7ec3778cd3ba2ef3df2d839c84019-af7aaaea717881f7-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e8a7ec3778cd3ba2ef3df2d839c84019-68f3bde10d03ff36-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:38.749 UTC +465 ms ES module GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (16) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b95955c61d3545b29f8c361d3b38b593-d0a17d866c21b1e6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b95955c61d3545b29f8c361d3b38b593-07451cb89ad74df4-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:38.751 UTC +467 ms iframe document GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "iframe",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-3b06133966dbe0f8a0ae0c74c3350caa-6ecc01b8086dcc0c-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-3b06133966dbe0f8a0ae0c74c3350caa-a852a5fa21292d2c-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:39.471 UTC +1187 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a78853d0b63c336b1d776cdc39973421-f3d5673421e884eb-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a78853d0b63c336b1d776cdc39973421-821654884e4a169d-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.215 UTC +1931 ms CSS @font-face GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=3, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-b9be5e6c4a69670a21b80d29e0ad3cf9-c3a63e03f04ee8ab-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-b9be5e6c4a69670a21b80d29e0ad3cf9-c1dd0a5a2f4d50e2-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.391 UTC +2107 ms web app manifest GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=5, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e9caec794a56499d352bfcd96e847e97-fda721a73a75bc59-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-e9caec794a56499d352bfcd96e847e97-eb9f6ef89fe74063-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.391 UTC +2107 ms ES module executed GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=5, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-8aecc1f62cc18209bed298a4f630e244-597ebba13f2999d6-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-8aecc1f62cc18209bed298a4f630e244-506b8d958ccf7109-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.392 UTC +2108 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "450",
  "content-type": "application/csp-report",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-6ffa0fbce149d1e115ee98ef4e19af3d-3899ba818bc9e264-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-6ffa0fbce149d1e115ee98ef4e19af3d-48a391a68a4d8046-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"referrer\":\"\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/XsPP04j2/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":701,\"columnNumber\":1}}"
}
2026-06-22 12:57:40.396 UTC +2112 ms image GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=5, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-a042169b246034a21a1da36c4ba0dfc7-ffba8f25ea3ca0fa-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-a042169b246034a21a1da36c4ba0dfc7-fafdfad47c6edfa7-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.396 UTC +2112 ms preload (image) GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=5, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-7de0022c4831fd19f59c058fd13a3a8b-e0a14441ce0f6b7f-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-7de0022c4831fd19f59c058fd13a3a8b-eca0f656624eb878-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.396 UTC +2112 ms Reporting API report (POST) POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (20) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "450",
  "content-type": "application/csp-report",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "null",
  "priority": "u=7, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-ca2929e22b9e5a76611b3ad6c8b2f666-2df602d80acbfdf3-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-ca2929e22b9e5a76611b3ad6c8b2f666-5c76f7c85c8ac448-01",
  "x-deno-userspace-tracestate": "",
  "x-report-body": "{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"referrer\":\"\",\"effectiveDirective\":\"style-src-attr\",\"blockedURL\":\"inline\",\"originalPolicy\":\"style-src 'self'; report-uri /r/XsPP04j2/csp-report; report-to ua-tracer\",\"statusCode\":200,\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":189,\"columnNumber\":1}}"
}
2026-06-22 12:57:40.396 UTC +2112 ms CSS background-image GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=5, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-1e17207c3b3714c01e590bc41febc09c-3a1bac7312acb8ec-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-1e17207c3b3714c01e590bc41febc09c-d73860dc993f2139-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.397 UTC +2113 ms JS executed beacon GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=5, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-0910de0838bd2bc96014f3ea57bbca14-0276f6c738a70c8a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-0910de0838bd2bc96014f3ea57bbca14-603d7a44083f5d4c-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:40.712 UTC +2428 ms image inside iframe GET Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (15) 
{
  "accept": "image/webp,image/avif,image/jxl,image/heic,image/heic-sequence,video/*;q=0.8,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=5, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/XsPP04j2/iframe",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-579f187afe6cc1644e8730882a4f4e1a-0066042daf4d9778-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-579f187afe6cc1644e8730882a4f4e1a-1b26170bf4c36dd8-01",
  "x-deno-userspace-tracestate": ""
}
2026-06-22 12:57:43.169 UTC +4885 ms client timing POST POST Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1
request headers (19) 
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en;q=0.9",
  "cache-control": "max-age=0",
  "content-length": "2920",
  "content-type": "application/json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=7, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-018c32e5a04634f0325d0da55f5851a3-36418e087bc422e5-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (iPhone; CPU iPhone OS 18_7 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.5 Mobile/15E148 Safari/604.1",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-deno-userspace-traceparent": "00-018c32e5a04634f0325d0da55f5851a3-3b2e6fa8ff5b2505-01",
  "x-deno-userspace-tracestate": ""
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
report other 457ms 453ms
style.css link 460ms 750ms
font.woff2 link 462ms 862ms
manifest.json other 464ms 2103ms
preload.png link 466ms 3833ms
report other 470ms 3100ms
photo.png img 474ms 2579ms
report other 486ms 2782ms
main.js script 488ms 1624ms
module.js script 490ms 1130ms
iframe iframe 492ms 1948ms
import.css css 1214ms 716ms
css-bg.png css 1956ms 2123ms
css-font.woff2 css 1957ms 1164ms
js-ran.gif?t=1782133060365 img 2120ms 2163ms
module-ran.gif?t=1782133060374 img 2129ms 720ms