ua-tracer by Paul Kinlan

ua-tracer

what does a user agent actually fetch, follow & run?

← all traces

Trace gUyPriMQ

First seen: 2026-06-22 14:39:29.405 UTC
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36

What this user agent did

Directly-referenced assets:

✓ fetched CSS ✓ fetched JS ✓ fetched image ✓ fetched font (HTML)

Document-level link hints:

✓ fetched favicon ✗ fetched apple-touch-icon ✓ fetched web manifest ✓ fetched preload ✓ fetched prefetch

Second-level follows (proves it parsed the linking file):

✓ followed CSS background-image ✓ followed CSS @font-face ✗ followed manifest icon ✓ followed CSS @import

Frames (does it descend into iframes?):

✗ fetched iframe document ✗ descended into iframe (loaded inner image)

Reporting (a report-only CSP is violated by inline styles; reports can arrive via HTTP headers with no JS, or via in-page beacons):

✓ sent a CSP/Reporting report (any path) ✓ delivered via report-uri/Report-To header (no JS) ✓ delivered via in-page beacon (securitypolicyviolation / ReportingObserver)

Social embed (Open Graph / Twitter card images):

✗ fetched og:image ✗ fetched twitter:image

JavaScript execution:

✓ EXECUTED classic JS ✓ EXECUTED ES module ✓ posted client timing

Server-side request waterfall

Every request the server received for this trace, in receive order. +ms is the delta from the homepage request.

ReceivedΔKindMethodUser-Agent
2026-06-22 14:39:29.405 UTC +0 ms homepage GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (17)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0, i",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "document",
  "sec-fetch-mode": "navigate",
  "sec-fetch-site": "none",
  "sec-fetch-user": "?1",
  "traceparent": "00-86559ea63f4936770340adf51291477c-4f5cf32d4e455666-01",
  "tracestate": "",
  "upgrade-insecure-requests": "1",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:29.797 UTC +392 ms CSS GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-cfb6db68180fdd68acea4208f9914bfa-1e984a2f141dc36b-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:29.797 UTC +392 ms font (HTML) GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (17)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-1151cf3984d0928bdeed0ffa3ed8d665-42e476ec7cbf8651-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:29.800 UTC +395 ms preload (image) GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-2af3d1011d79f27d557eb05265b85928-e3320bf2fc109d52-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:29.801 UTC +396 ms web app manifest GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=2",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "manifest",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-9114ce16c992b793a2a9b7218fe27716-d56339422a79b825-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:30.453 UTC +1048 ms JS GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-15ca2856078330e5bb425527f0cb3452-2c856867fcc3a869-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:30.668 UTC +1263 ms ES module GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (17)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "script",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-81e69846cf2338e248fd4a6f51ee5372-7d42d6e1728cca11-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:30.896 UTC +1491 ms CSS @import (nested stylesheet) GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "text/css,*/*;q=0.1",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/gUyPriMQ/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "style",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-213acbffc2261abd96709e9b83f0a4f0-3b9bf86a927333a4-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:31.033 UTC +1628 ms image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e2b02b82f0dbe8ef9eba31406d076182-bf49654cbfad49c0-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:31.040 UTC +1635 ms prefetch GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (17)
{
  "accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "sec-purpose": "prefetch",
  "traceparent": "00-af3a1a6e73245cbbecc99f898f61d055-910445004728f338-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:31.335 UTC +1930 ms CSS @font-face GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (17)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=0",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/gUyPriMQ/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "font",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-e63b61cd7f669542ec2dfc19f4f5ac8b-ec47ea21c081f1e1-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:31.336 UTC +1931 ms CSS background-image GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/r/gUyPriMQ/style.css",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-953b84ae97d0f9d48f39cac924dc0961-c430e3f2eb10868e-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:31.615 UTC +2210 ms JS executed beacon GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-d87c8e70d1fec0369248d6e000813fa7-f01ad2130ec7cbb9-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:31.616 UTC +2211 ms CSP violation report (POST) POST Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (20)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "content-length": "430",
  "content-type": "application/json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-6e8d87d16059c1211850856b5dfaef4f-69c9866cc1bb70f2-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"securitypolicyviolation\",\"violatedDirective\":\"style-src-attr\",\"effectiveDirective\":\"style-src-attr\",\"blockedURI\":\"inline\",\"documentURI\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"disposition\":\"report\",\"lineNumber\":45,\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/r/gUyPriMQ/main.js\",\"ua\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}"
}
2026-06-22 14:39:31.617 UTC +2212 ms Reporting API report (POST) POST Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (20)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "content-length": "1987",
  "content-type": "application/json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-9340e0cce4c981c22581fa0bb57598f1-53b8f05931754b6a-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "{\"source\":\"ReportingObserver\",\"reports\":[{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":8,\"columnNumber\":0,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-elem\",\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":212,\"columnNumber\":0,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"lineNumber\":770,\"columnNumber\":0,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}},{\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"body\":{\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/r/gUyPriMQ/main.js\",\"lineNumber\":45,\"columnNumber\":11,\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"referrer\":\"\",\"blockedURL\":\"inline\",\"effectiveDirective\":\"style-src-attr\",\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"sample\":\"\",\"disposition\":\"report\",\"statusCode\":200}}],\"ua\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}"
}
2026-06-22 14:39:31.620 UTC +2215 ms ES module executed GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-9c5d0d656f379a7ce6e06f0de867c391-9f4ac2175c012725-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:33.086 UTC +3681 ms favicon GET Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (16)
{
  "accept": "image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=1, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "image",
  "sec-fetch-mode": "no-cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-2310896f22f3d7c21db965b6659f5d11-c9639dfcb74a8094-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:39:33.688 UTC +4283 ms client timing POST POST Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (19)
{
  "accept": "*/*",
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "content-length": "3139",
  "content-type": "application/json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "referer": "https://ua-tracer.paulkinlan-ea.deno.net/",
  "sec-ch-ua": "\"Google Chrome\";v=\"149\", \"Chromium\";v=\"149\", \"Not)A;Brand\";v=\"24\"",
  "sec-ch-ua-mobile": "?0",
  "sec-ch-ua-platform": "\"macOS\"",
  "sec-fetch-dest": "empty",
  "sec-fetch-mode": "cors",
  "sec-fetch-site": "same-origin",
  "traceparent": "00-0c591e6d07e8f96d97c2abca52069639-9af9a966e5a683cf-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net"
}
2026-06-22 14:40:13.998 UTC +44593 ms Reporting API report (POST) POST Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36
request headers (12)
{
  "accept-encoding": "gzip, deflate, br, zstd",
  "accept-language": "en-GB,en-US;q=0.9,en;q=0.8,cy;q=0.7",
  "content-length": "2350",
  "content-type": "application/reports+json",
  "host": "ua-tracer.paulkinlan-ea.deno.net",
  "origin": "https://ua-tracer.paulkinlan-ea.deno.net",
  "priority": "u=4, i",
  "traceparent": "00-4b0b9719acf0f3dba36f509f9da1e6d6-ea897f9199eb46b8-01",
  "tracestate": "",
  "user-agent": "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36",
  "via": "HTTP/2 ams.vultr.prod.deno-cluster.net",
  "x-report-body": "[{\"age\":44101,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":770,\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"},{\"age\":44118,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-elem\",\"lineNumber\":8,\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"},{\"age\":42301,\"body\":{\"blockedURL\":\"inline\",\"columnNumber\":11,\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":45,\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/r/gUyPriMQ/main.js\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"},{\"age\":44117,\"body\":{\"blockedURL\":\"inline\",\"disposition\":\"report\",\"documentURL\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"effectiveDirective\":\"style-src-attr\",\"lineNumber\":212,\"originalPolicy\":\"style-src 'self'; report-uri /r/gUyPriMQ/csp-report; report-to ua-tracer\",\"referrer\":\"\",\"sample\":\"\",\"sourceFile\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"statusCode\":200},\"type\":\"csp-violation\",\"url\":\"https://ua-tracer.paulkinlan-ea.deno.net/\",\"user_agent\":\"Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/149.0.0.0 Safari/537.36\"}]"
}

Client-side resource waterfall

Reported by performance.getEntriesByType('resource') after JS ran in the UA. This proves a real browser-grade engine, not just a downloader.

ResourceInitiatorStartDurationTimeline
style.css link 391ms 876ms
font.woff2 link 391ms 439ms
preload.png link 391ms 657ms
prefetch.png link 393ms 2107ms
manifest.json link 394ms 1096ms
iframe iframe 412ms 920ms
photo.png img 412ms 1666ms
main.js script 412ms 1800ms
module.js script 413ms 1290ms
import.css css 1267ms 663ms
css-bg.png css 1931ms 437ms
css-font.woff2 css 1931ms 942ms
js-ran.gif?t=1782139171572 img 2213ms 1470ms
csp-report beacon 2214ms 455ms
report beacon 2214ms 1240ms
module-ran.gif?t=1782139171574 img 2215ms 938ms
favicon.ico other 3684ms 437ms