Use profiler.js from https://raw.github.com

This way bookmarklet should load the file even for sites
served by https (of course only the ones that don't explicitly
block scripts like this e.g. Facebook)