Summary
A Concise Overview of the scan result of url https://www.tiktok.com/ug/incentive/share/push_coin?__status_bar=true&_d=f6el0867ajl4ek&_pia_=1&_svg=1&aid=1340&checksum=82726ed5a4d7fdfb8a31e21acf9855f6a31d847d9016290182051e343551706c&enable_canvas=1&enable_canvas_optimize=1&gameplay=push_coin&gd_label=click_wap_referral_push_coin&hide_nav_bar=1&inc_pid=referral_onelink_push_coin&inc_target_url=aweme%3A%2F%2Froma_redirect%2F%3Fspark_page%3Dpush_coin_page%26enter_from%3Dcoin_pusher_onelink_jump&incentive_redirect=1&item_type=0&media_source=referral_onelink_push_coin&og_desc_text=Receba+suas+recompensas+antes+que+elas+expirem&og_image=https%3A%2F%2Fp16-ug-incentive-va.tiktokcdn.com%2Ftos-maliva-i-68e3t9dfc1-us%2F5e94f4f1de30469cb48a21c86efa32b0.png~tplv-68e3t9dfc1-image.image&og_title_text=Baixe+o+TikTok+Lite+e+ganhe+recompensas%21&panel_source_v2=share_panel®ion=br&sec_user_id=MS4wLjABAAAAcGej-Ms-TUUUTy2mPg-TiIKgxPawGJxveXO_nIqFftgM9P5sgo2yOSjZD6Cn1mSl&series_category=0&share_app_id=1340&share_app_id=1340&share_enter_from=coin_pusher_entrance_card&share_link_id=06c2470f-0596-4072-929b-6d9755028a3a&share_page_data=MIIBYwQMEnr%2Fu9HmInUdfONxBIIBPw38hjpDnhR11ag5lhPk3YW9bIPDnNjO4o%2FhK%2BP6SxfpQRkqv9EtRAkGl%2FqkRhIc%2BSbNLqWsxz1NP%2Bvno5WoIpbE7wZoe9wWSPWqXiKAg28fLPKa1%2FT5tyFAJDhlZ%2FOTRFJXV8UV%2BhGQPbcF6Roh0Ygh%2FUWOG%2F8btYkie5P9n3ilGFJw%2BMH7unvG5QWf9suBR9qW1%2BMN8yt0%2BPMMd5RJ4Ax5Jf3oGzfUWqxGn7QuivFWaTLPYRywTfB04uLQFaN6E30SiOTssgCPbjTpWpWoSHXxcfTp1%2BMrs9lhWwlmP3qtjVosotkp%2FuEMnnUlgKINlWSWc8Xqj%2FVI%2BgdUUv5iTc5ntBTahQbo%2BPnRFcNyLhX8wyiTCD8gJ%2F0fsZZ1yly7YvFNA%2BYQ7gls0XDQiIjQBSvsFysSrtHHZKuPmotExskEEBK78IaK4TUN9fbIEKjPLDE%3D&share_position=invite_panel&share_region=BR&share_scene=10003&share_time=1794250295802&share_type=link&sharer_biz=ug_paid_acquisition&sharer_os=android&should_full_screen=1×tamp=1794250295&u_code=7706244772390110229&ug_launch_category=referral&ugbiz_name=Unknown&use_new_link_policy=1&user_id=7706244772390110229&utm_campaign=client_share&utm_source=copy
- Document
- HTML
- 2
- StyleSheets
- 1
- Scripts
- 13
- Font
- 3
- Images
- 2
- Links
- 0
- JavaScript Variables
- 34
- Console log messages
- 0
- Network
- Requests
- 34
- Bytes Transferred
- 917.25KB
- Bytes Total
- 3.17MB
- DNS Record
- CNAME Record
- 6
- A Record
- 9
- Technology
- PaaS
- 1
- Payment processors
- 1
- Web servers
- 1
- Reverse proxies
- 1
- Security
- 2
- CDN
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
0object1objectonpagerevealobjecteventundefinedonbeforetoggleobjectoncommandobjectonscrollendobjectonanimationcancelobjectcrashReportobjectdocumentPictureInPictureobjectfetchLaterfunctionviewportobjectonpageswapobjectfenceobjectonscrollsnapchangeobjectonscrollsnapchangingobjectongamepadconnectedobjectongamepaddisconnectedobjectconfigobjectslardarClientstringSlardarClientfunction__PNS_RUNTIME__object__PUMBAA_RUN_FLAG__numberwebpackChunkLoader_[name]objectregeneratorRuntimeobjecttuxComponentsVersionstringLogPluginObjectobjectJSBridgeobjectNative2JSBridgeobjectToutiaoJSBridgeobjectPagefunctiondefaultundefined__SLARDAR_REGISTRY__objectTEAVisualEditorobject
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
hCaptcha | hCaptcha is an anti-bot solution that protects user privacy and rewards websites. | Type: headers Name: content-security-policy Regex: (?:\.|\/\/)hcaptcha\.com |
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Web servers | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
| CDN | ||
 Amazon S3 | Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. | Type: headers Name: server Regex: s3[^ ]{0,250}amazonaws\.com |
| Payment processors | ||
PayPal | PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders. | Type: headers Name: content-security-policy Regex: \.paypal\.com |
| PaaS | ||
 Amazon Web Services | Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | Dependent on Amazon S3 |
| Reverse proxies | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 1 msGood
- requestTime
- 174 msGood
- dom
- 1485 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api1.akamai.net. | no |
| A | a2047.api1.akamai.net | 23.44.201.232 | no |
| A | a2047.api1.akamai.net | 23.44.201.229 | no |
| A | a2047.api1.akamai.net | 23.44.201.250 | no |
| A | a2047.api1.akamai.net | 23.44.201.231 | no |
| A | a2047.api1.akamai.net | 23.44.201.247 | no |
| A | a2047.api1.akamai.net | 23.44.201.243 | no |
| A | a2047.api1.akamai.net | 23.44.201.246 | no |
| A | a2047.api1.akamai.net | 23.44.201.241 | no |
| A | a2047.api1.akamai.net | 23.44.201.242 | no |
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api9.akamai.net. | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
www.tiktok.com | 11/9/2026 | 11/10/2027 | 1 year 1 day |
lf16-tiktok-web.tiktokcdn-us.com | 11/9/2026 | 11/10/2027 | 1 year 1 day |
lf16-cdn-tos.tiktokcdn-us.com | 11/9/2026 | 11/10/2027 | 1 year 1 day |
mcs.tiktokv.us | 11/9/2026 | 11/10/2027 | 1 year 1 day |
mon16-normal-useast5.tiktokv.us | 11/9/2026 | 11/10/2027 | 1 year 1 day |
libraweb.tiktokw.us | 11/9/2026 | 11/10/2027 | 1 year 1 day |
p16-ug-incentive-va.tiktokcdn.com | 11/9/2026 | 11/10/2027 | 1 year 1 day |
sf16-website-login.neutral.ttwstatic.com | 11/9/2026 | 11/10/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Access-Control-Expose-Headers | x-tt-traceflag,x-tt-logid |
| Cache-Control | max-age=0, no-cache, no-store |
| Connection | keep-alive Transfer-Encoding |
| Content-Encoding | br |
| Content-Security-Policy | report-uri https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=bfonieMCwPoPfrLdKt5ct3&v=3&s=493&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok-usts.com *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokglobalshop.us *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.us *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttcdn-us.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com; connect-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: http://localhost:* https://localhost:* wss://im-ws.tiktok.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-usts.com *.tiktok.com/passport/ *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.us *.tiktokglobalshopv.us *.tiktokmusic.me *.tiktokshops.us *.tiktokstaticb.com *.tiktokus.info *.tiktokv-us.com *.tiktokv.us *.tiktokw.eu/passport/ *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.us.tiktok.com *.us.tiktokv.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com affiliate-us.tiktok.com analytics.tiktok.com api.music.apple.com code.jquery.com effecthouse.tiktok.com facebook.com google.com i.ticketweb.com im-api.tiktok.com im-image.tiktokv.com im-ws.tiktok.com image-va.tiktok.com images.universe.com interactives.ap.org livecenter.tiktok.com login-eu.www.tiktok.com login-no1a.www.tiktok.com login-row.www.tiktok.com login-us.www.tiktok.com media.ticketmaster.eu newassets.hcaptcha.com newsroom.tiktok.com p0-pu-private-useast8.tiktok.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net scm-us.tiktok.com seller-us.tiktok.com shop.tiktok.com starling-i18n.tiktokv.com/check_and_get_text/ starling-sg.tiktokv.com/check_and_get_text/ starling-va.tiktokv.com/check_and_get_text/ static-label.frontgatetickets.com static.captchami.com support.tiktok.com t.co t.tiktok.com tikitoks.com tiktok.captchami.com tiktokfollowersfree.com tv.tiktok.com tx41v.arkoselabs.com unpkg.com us.tiktok.com v16-webapp-prime.tiktok.com v16-webapp.tiktok.com v19-webapp-prime.tiktok.com vas-alisg16.tiktokv.com vas-maliva16.tiktokv.com vas-useast2a.tiktokv.com vas-va.tiktokv.com vcs-sg.tiktokv.com vcs-va.byteoversea.com vcs-va.tiktokv.com verification-i18n.tiktok.com verification-sg.tiktok.com verification-va.byteoversea.com verification-va.tiktok.com verification.tiktokw.eu verification16-normal-no1a.tiktokw.eu verify-sg.byteoversea.com vimeo.com web-i18n.tiktok.com/passport/ web-sg.tiktok.com/passport/ web-va.tiktok.com/passport/ webapp-sg.tiktok.com webapp-va.tiktok.com www.tiktok.com; script-src 'report-sample' 'unsafe-eval' 'inline-speculation-rules' 'wasm-unsafe-eval' *.tiktokcdn-us.com accounts.google.com apis.google.com billshark-cdn.s3.amazonaws.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.braintreegateway.com js.hcaptcha.com js.hsforms.net recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/bric-captcha-ttweb/core-captcha/ static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.facebook.net www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com lf16-tiktok-web.tiktokcdn-us.com/obj/tiktok-web-tx/obj/waf-aiso/; worker-src www.tiktok.com/business/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ |
| Content-Type | text/html; charset=utf-8 |
| Date | Tue, 10 Nov 2026 15:43:06 GMT |
| Expires | Tue, 10 Nov 2026 15:43:06 GMT |
| Pragma | no-cache |
| Server | nginx |
| Server-Timing | cdn-cache; desc=MISS, edge; dur=48, origin; dur=51 inner; dur=47 |
| Transfer-Encoding | chunked |
| X-Akamai-Request-ID | 710cbfb3.20246dd |
| X-Cache | TCP_MISS from a23-198-14-5.deploy.akamaitechnologies.com (AkamaiGHost/22.7.1-d04eda59fc1d0839d0412c36284b9f37) (-) |
| X-Cache-Remote | TCP_MISS from a23-54-205-235.deploy.akamaitechnologies.com (AkamaiGHost/22.7.0-c18a5259117e1d1b2cb0ace70ccfa9bb) (-) |
| X-Origin-Response-Time | 51,23.54.205.235 |
| X-Parent-Response-Time | 93,23.198.14.5 |
| reporting-endpoints | csp-endpoint="https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=bfonieMCwPoPfrLdKt5ct3&v=3&s=493&b=oab" |
| tt-gateway-flag | v2 |
| tt-idc-switch | 10000@20261110080313 |
| x-bytefaas-enable-stream | true |
| x-bytefaas-execution-duration | 35.77 |
| x-bytefaas-request-id | 20261110154306D54932F1537D4712BC20 |
| x-gw-dst-psm | tiktok.ug.incentive_share |
| x-powered-by | Goofy Node |
| x-pumbaa-web-avail | 1 |
| x-tt-logid | 20261110154306D54932F1537D4712BC20 |
| x-tt-trace-host | 0197da3a6f774444e12ee18610539a3f84f7ebe8a2cb5fd7c006209be11d7a2557c575543ed2701d9aec56ab88259483129a9d857687b14422f837f777a64068549ea946da7b3c604b2d088179db0cbaa1d35c11fd935bc32802574fc6c1de808f6001b4b09df5a32e94df1194dbc3e668 |
| x-tt-trace-id | 00-261110154306D54932F1537D4712BC20-63B0D6FC3B3BC1F5-00 |
| x-tt-trace-tag | id=16;cdn-cache=miss;type=dyn |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| ttwid | 1%7CoYEowUDBKiaq9VhKAFJUAsTMkUe9ouFAGkhb_d4yfYY%7C1794325386%7C2621da0a37b6226182b451277bbd49f6520fff39d3c90d582fe279fcac27d8c5 | .tiktok.com/ | 11/5/2027, 3:43:06 PM | no | yes |
| _tea_utm_cache_1340 | {%22utm_source%22:%22copy%22%2C%22utm_campaign%22:%22client_share%22} | .www.tiktok.com/ | 11/17/2026, 3:43:06 PM | no | no |