Summary
A Concise Overview of the scan result of url https://www.tiktok.com/@bergeline96/live?_d=secCgYIASAHKAESPgo813QvfmEydOW1GlryiAi%2F8byE8Fk4YXG6hsvkmSOPyuRg%2FFRhnAujle4faAGPEzG3bSaC5jxZ5aFxQusnGgA%3D&_r=1&_svg=3&checksum=03d93b063457cc7ee20a1c927a9548953183e4c4c664504f3d46ac32e3ffe783&enter_from_merge=share&enter_method=share&sec_user_id=MS4wLjABAAAAOvjYCXpZMH926Ukp91sEk9DMY8_lNqgiPXPxuPEH2BHjeK9yPg9nZeR8ZlVuUuWo&share_app_id=1233&share_enter_from=message&share_from_user_id=7492204443480622122&share_link_id=4c9637c8-7d28-480f-8ce1-0f91eddd4c9b&share_region=US&social_share_type=10&source=h5_m×tamp=1793491905&ug_btm=b9081%2Cb4180&ugbiz_name=LIVE&user_id=7492204443480622122&utm_campaign=client_share&utm_medium=android&utm_source=whatsapp
- Document
- HTML
- 3
- StyleSheets
- 6
- Scripts
- 137
- Font
- 8
- Images
- 2
- Links
- 0
- JavaScript Variables
- 87
- Console log messages
- 0
- Network
- Requests
- 218
- Bytes Transferred
- 5.4MB
- Bytes Total
- 18.82MB
- DNS Record
- CNAME Record
- 6
- A Record
- 9
- Technology
- PaaS
- 1
- Payment processors
- 1
- Web servers
- 1
- Reverse proxies
- 1
- JavaScript libraries
- 1
- Security
- 2
- CDN
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
hCaptcha | hCaptcha is an anti-bot solution that protects user privacy and rewards websites. | Type: headers Name: content-security-policy Regex: (?:\.|\/\/)hcaptcha\.com |
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Web servers | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
| CDN | ||
Amazon S3 | Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. | Type: headers Name: server Regex: s3[^ ]{0,250}amazonaws\.com |
| Payment processors | ||
PayPal | PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders. | Type: headers Name: content-security-policy Regex: \.paypal\.com |
| JavaScript libraries | ||
Lodash | Lodash is a JavaScript library which provides utility functions for common programming tasks using the functional programming paradigm. | Type: scriptSrc Regex: lodash.{0,250}\.js |
| PaaS | ||
Amazon Web Services | Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | Dependent on Amazon S3 |
| Reverse proxies | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 1 msGood
- requestTime
- 7 msGood
- dom
- 2286 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api4.akamai.net. | no |
| A | a2047.api4.akamai.net | 23.213.158.14 | no |
| A | a2047.api4.akamai.net | 23.213.158.10 | no |
| A | a2047.api4.akamai.net | 23.213.158.23 | no |
| A | a2047.api4.akamai.net | 23.213.158.8 | no |
| A | a2047.api4.akamai.net | 23.213.158.4 | no |
| A | a2047.api4.akamai.net | 23.213.158.22 | no |
| A | a2047.api4.akamai.net | 23.213.158.18 | no |
| A | a2047.api4.akamai.net | 23.213.158.21 | no |
| A | a2047.api4.akamai.net | 23.213.158.11 | no |
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api6.akamai.net. | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
www.tiktok.com | 10/31/2026 | 11/1/2027 | 1 year 1 day |
lf16-tiktok-web.tiktokcdn-us.com | 10/31/2026 | 11/1/2027 | 1 year 1 day |
lf16-cdn-tos.tiktokcdn-us.com | 10/31/2026 | 11/1/2027 | 1 year 1 day |
libraweb.tiktokw.us | 10/31/2026 | 11/1/2027 | 1 year 1 day |
mcs-ttp2.tiktokv.us | 10/31/2026 | 11/1/2027 | 1 year 1 day |
mon16-normal-useast5.tiktokv.us | 10/31/2026 | 11/1/2027 | 1 year 1 day |
lf16-tiktok-common.tiktokcdn-us.com | 10/31/2026 | 11/1/2027 | 1 year 1 day |
mcs.tiktokw.us | 10/31/2026 | 11/1/2027 | 1 year 1 day |
p16-common-sign.tiktokcdn-us.com | 10/31/2026 | 11/1/2027 | 1 year 1 day |
webcast.us.tiktok.com | 10/31/2026 | 11/1/2027 | 1 year 1 day |
www.tiktokw.us | 10/31/2026 | 11/1/2027 | 1 year 1 day |
mssdk-ttp2.tiktokw.us | 10/31/2026 | 11/1/2027 | 1 year 1 day |
sf-i18n-resources.tiktokcdn-us.com | 10/31/2026 | 11/1/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Access-Control-Expose-Headers | x-tt-traceflag,x-tt-logid |
| Cache-Control | max-age=0, no-cache, no-store |
| Connection | keep-alive Transfer-Encoding |
| Content-Encoding | br |
| Content-Security-Policy | report-uri https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=5UAb3okeyRbC2YjgXAVTpo&v=4&s=449&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://*.us.tiktok.com wss://tiktok.com wss://tiktokv.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok-usts.com *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokglobalshop.us *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.us *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttcdn-us.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com; connect-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: http://localhost:* https://localhost:* wss://*.us.tiktok.com wss://im-ws.tiktok.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-usts.com *.tiktok.com/passport/ *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.us *.tiktokglobalshopv.us *.tiktokmusic.me *.tiktokshops.us *.tiktokstaticb.com *.tiktokus.info *.tiktokv-us.com *.tiktokv.us *.tiktokw.eu/passport/ *.tiktokw.us *.topbuzzcdn.com *.ttcdn-us.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.us.tiktok.com *.us.tiktokv.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com affiliate-us.tiktok.com analytics.tiktok.com api.music.apple.com code.jquery.com effecthouse.tiktok.com facebook.com google.com i.ticketweb.com im-api.tiktok.com im-image.tiktokv.com im-ws.tiktok.com image-va.tiktok.com images.universe.com interactives.ap.org livecenter.tiktok.com login-eu.www.tiktok.com login-no1a.www.tiktok.com login-row.www.tiktok.com login-us.www.tiktok.com media.ticketmaster.eu newassets.hcaptcha.com newsroom.tiktok.com p0-pu-private-useast8.tiktok.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net scm-us.tiktok.com seller-us.tiktok.com shop.tiktok.com starling-i18n.tiktokv.com/check_and_get_text/ starling-sg.tiktokv.com/check_and_get_text/ starling-va.tiktokv.com/check_and_get_text/ static-label.frontgatetickets.com static.captchami.com support.tiktok.com t.co t.tiktok.com tikitoks.com tiktok.captchami.com tiktokfollowersfree.com tv.tiktok.com tx41v.arkoselabs.com unpkg.com us.tiktok.com v16-webapp-prime.tiktok.com v16-webapp.tiktok.com v19-webapp-prime.tiktok.com vas-alisg16.tiktokv.com vas-maliva16.tiktokv.com vas-useast2a.tiktokv.com vas-va.tiktokv.com vcs-sg.tiktokv.com vcs-va.byteoversea.com vcs-va.tiktokv.com verification-i18n.tiktok.com verification-sg.tiktok.com verification-va.byteoversea.com verification-va.tiktok.com verification.tiktokw.eu verification16-normal-no1a.tiktokw.eu verify-sg.byteoversea.com vimeo.com web-i18n.tiktok.com/passport/ web-sg.tiktok.com/passport/ web-va.tiktok.com/passport/ webapp-sg.tiktok.com webapp-va.tiktok.com www.tiktok.com; script-src 'report-sample' 'unsafe-eval' 'inline-speculation-rules' 'wasm-unsafe-eval' *.tiktokcdn-us.com accounts.google.com apis.google.com billshark-cdn.s3.amazonaws.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.braintreegateway.com js.hcaptcha.com js.hsforms.net recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/bric-captcha-ttweb/core-captcha/ static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.facebook.net www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com lf16-tiktok-web.tiktokcdn-us.com/obj/tiktok-web-tx/obj/waf-aiso/ appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ |
| Content-Type | text/html; charset=utf-8 |
| Date | Sun, 01 Nov 2026 09:14:41 GMT |
| Expires | Sun, 01 Nov 2026 09:14:41 GMT |
| Pragma | no-cache |
| Server | nginx |
| Server-Timing | cdn-cache; desc=MISS, edge; dur=47, origin; dur=251 inner; dur=246 |
| Transfer-Encoding | chunked |
| X-Akamai-Request-ID | 349e4aaf.3d8bba69 |
| X-Cache | TCP_MISS from a23-35-16-7.deploy.akamaitechnologies.com (AkamaiGHost/22.7.0-c18a5259117e1d1b2cb0ace70ccfa9bb) (-) |
| X-Cache-Remote | TCP_MISS from a23-57-66-16.deploy.akamaitechnologies.com (AkamaiGHost/22.7.0-c18a5259117e1d1b2cb0ace70ccfa9bb) (-) |
| X-Origin-Response-Time | 251,23.57.66.16 |
| X-Parent-Response-Time | 297,23.35.16.7 |
| feature-policy | microphone 'none'; geolocation 'none' |
| referrer-policy | strict-origin-when-cross-origin |
| reporting-endpoints | csp-endpoint="https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=5UAb3okeyRbC2YjgXAVTpo&v=4&s=449&b=oab" |
| strict-transport-security | max-age=31536000; includeSubdomains |
| tt-gateway-flag | v2 |
| x-bytefaas-execution-duration | 234.61 |
| x-bytefaas-request-id | 202611010914417D38ADDDAFF191970AAE |
| x-content-type-options | nosniff |
| x-download-options | noopen |
| x-edenx-router | liveRoom |
| x-frame-options | SAMEORIGIN |
| x-gw-dst-psm | serverless.live.desktop |
| x-powered-by | Goofy Node |
| x-pumbaa-web-avail | 1 |
| x-response-send-type | default |
| x-tt-logid | 202611010914417D38ADDDAFF191970AAE |
| x-tt-trace-host | 0170cfe679479a8a3c74e1577b165c16fd5a8e49a83eba95567e9048b2f0bc113d6d76b5b6e0074cc91770301f3c5bfe59f5df524312b66e9c3a6ed0e2558d264e388f1e6c7ffa838005d586f8f7ff78fd25824e7dd33c5f386bdb676a4967a9197ca884426c22b9912e15cf3658e1083e |
| x-tt-trace-id | 00-2611010914417D38ADDDAFF191970AAE-13BD8A734336FAFC-00 |
| x-tt-trace-tag | id=16;cdn-cache=miss;type=dyn |
| x-xss-protection | 1; mode=block |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| tt_csrf_token | [tt_csrf_token redacted] | .tiktok.com/ | 12/31/1969, 11:59:59 PM | yes | yes |
| tt_chain_token | [tt_chain_token redacted] | .tiktok.com/ | 4/30/2027, 9:14:41 AM | yes | yes |
| _tea_utm_cache_1988 | {%22utm_source%22:%22whatsapp%22%2C%22utm_medium%22:%22android%22%2C%22utm_campaign%22:%22client_share%22} | .www.tiktok.com/ | 11/8/2026, 9:14:43 AM | no | no |
| tiktok_webapp_theme_source | auto | .www.tiktok.com/ | 8/28/2027, 9:14:42 AM | yes | no |
| tiktok_webapp_theme | light | .www.tiktok.com/ | 8/28/2027, 9:14:42 AM | yes | no |
| ttwid | 1%7CxryHdL1WR7pPunxrYmPbEZBa9YhFB6FyjZqBOzCAEdc%7C1793524482%7C0f8f67743e075e18138a8fa87bb5a263bd256659f29a0b24da47252c5469228e | .tiktok.com/ | 11/1/2027, 9:14:42 AM | yes | yes |
| _tea_utm_cache_345918 | {%22utm_source%22:%22whatsapp%22%2C%22utm_medium%22:%22android%22%2C%22utm_campaign%22:%22client_share%22} | .www.tiktok.com/ | 11/8/2026, 9:14:43 AM | no | no |
| msToken | [msToken redacted] | .tiktok.com/ | 11/11/2026, 9:14:44 AM | yes | no |
| msToken | [msToken redacted] | www.tiktok.com/ | 1/30/2027, 9:14:44 AM | no | no |