Summary
A Concise Overview of the scan result of url https://www.tiktok.com/@yesma059/photo/7698306173958769942?_r=1&_t=ZN-9Aiu7JCLkBy
- Document
- HTML
- 2
- StyleSheets
- 5
- Scripts
- 94
- Font
- 1
- Images
- 1
- Links
- 0
- JavaScript Variables
- 45
- Console log messages
- 0
- Network
- Requests
- 134
- Bytes Transferred
- 2.67MB
- Bytes Total
- 8.74MB
- DNS Record
- CNAME Record
- 6
- A Record
- 9
- Technology
- PaaS
- 1
- Payment processors
- 1
- Web servers
- 1
- Reverse proxies
- 1
- Security
- 2
- CDN
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
hCaptcha | hCaptcha is an anti-bot solution that protects user privacy and rewards websites. | Type: headers Name: content-security-policy Regex: (?:\.|\/\/)hcaptcha\.com |
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Web servers | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
| CDN | ||
Amazon S3 | Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. | Type: headers Name: server Regex: s3[^ ]{0,250}amazonaws\.com |
| Payment processors | ||
PayPal | PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders. | Type: headers Name: content-security-policy Regex: \.paypal\.com |
| PaaS | ||
Amazon Web Services | Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | Dependent on Amazon S3 |
| Reverse proxies | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 40 msGood
- requestTime
- 208 msGood
- dom
- 2137 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api8.akamai.net. | no |
| A | a2047.api8.akamai.net | 23.207.210.95 | no |
| A | a2047.api8.akamai.net | 23.207.210.94 | no |
| A | a2047.api8.akamai.net | 23.207.210.77 | no |
| A | a2047.api8.akamai.net | 23.207.210.92 | no |
| A | a2047.api8.akamai.net | 23.207.210.91 | no |
| A | a2047.api8.akamai.net | 23.207.210.96 | no |
| A | a2047.api8.akamai.net | 23.207.210.74 | no |
| A | a2047.api8.akamai.net | 23.207.210.93 | no |
| A | a2047.api8.akamai.net | 23.207.210.78 | no |
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api7.akamai.net. | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
www.tiktok.com | 10/19/2026 | 10/20/2027 | 1 year 1 day |
lf16-tiktok-web.tiktokcdn-us.com | 10/19/2026 | 10/20/2027 | 1 year 1 day |
lf16-cdn-tos.tiktokcdn-us.com | 10/19/2026 | 10/20/2027 | 1 year 1 day |
libraweb.tiktokw.us | 10/19/2026 | 10/20/2027 | 1 year 1 day |
mcs.tiktokw.us | 10/19/2026 | 10/20/2027 | 1 year 1 day |
mcs.tiktokv.us | 10/19/2026 | 10/20/2027 | 1 year 1 day |
mon16-normal-useast5.tiktokv.us | 10/19/2026 | 10/20/2027 | 1 year 1 day |
sf16-website-login.neutral.ttwstatic.com | 10/19/2026 | 10/20/2027 | 1 year 1 day |
webcast.us.tiktok.com | 10/19/2026 | 10/20/2027 | 1 year 1 day |
mssdk.tiktokw.us | 10/19/2026 | 10/20/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Access-Control-Expose-Headers | x-tt-traceflag,x-tt-logid |
| Cache-Control | max-age=0, no-cache, no-store |
| Connection | keep-alive Transfer-Encoding |
| Content-Encoding | br |
| Content-Security-Policy | report-uri https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=7qSeM8cmzi4GPGC6JsU1aj&v=2&s=421&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok-usts.com *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokglobalshop.us *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.us *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttcdn-us.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com; connect-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: http://localhost:* https://localhost:* wss://im-ws.tiktok.com *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.braintree-api.com *.braintreegateway.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleadservices.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-usts.com *.tiktok.com/passport/ *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.us *.tiktokglobalshopv.us *.tiktokmusic.me *.tiktokshops.us *.tiktokstaticb.com *.tiktokus.info *.tiktokv-us.com *.tiktokv.us *.tiktokw.eu/passport/ *.tiktokw.us *.topbuzzcdn.com *.ttcdn-us.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.us.tiktok.com *.us.tiktokv.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com affiliate-us.tiktok.com analytics.tiktok.com api.music.apple.com code.jquery.com effecthouse.tiktok.com facebook.com google.com i.ticketweb.com im-api.tiktok.com im-image.tiktokv.com im-ws.tiktok.com image-va.tiktok.com images.universe.com interactives.ap.org livecenter.tiktok.com login-eu.www.tiktok.com login-no1a.www.tiktok.com login-row.www.tiktok.com login-us.www.tiktok.com media.ticketmaster.eu newassets.hcaptcha.com newsroom.tiktok.com p0-pu-private-useast8.tiktok.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net scm-us.tiktok.com seller-us.tiktok.com shop.tiktok.com starling-i18n.tiktokv.com/check_and_get_text/ starling-sg.tiktokv.com/check_and_get_text/ starling-va.tiktokv.com/check_and_get_text/ static-label.frontgatetickets.com static.captchami.com support.tiktok.com t.co t.tiktok.com tikitoks.com tiktok.captchami.com tiktokfollowersfree.com tv.tiktok.com tx41v.arkoselabs.com unpkg.com us.tiktok.com v16-webapp-prime.tiktok.com v16-webapp.tiktok.com v19-webapp-prime.tiktok.com vas-alisg16.tiktokv.com vas-maliva16.tiktokv.com vas-useast2a.tiktokv.com vas-va.tiktokv.com vcs-sg.tiktokv.com vcs-va.byteoversea.com vcs-va.tiktokv.com verification-i18n.tiktok.com verification-sg.tiktok.com verification-va.byteoversea.com verification-va.tiktok.com verification.tiktokw.eu verification16-normal-no1a.tiktokw.eu verify-sg.byteoversea.com video-tcs-sg.tiktok.com video-tcs-va.tiktok.com vimeo.com web-i18n.tiktok.com/passport/ web-sg.tiktok.com/passport/ web-va.tiktok.com/passport/ webapp-sg.tiktok.com webapp-va.tiktok.com www.tiktok.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' *.tiktokcdn-us.com accounts.google.com apis.google.com billshark-cdn.s3.amazonaws.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.braintreegateway.com js.hcaptcha.com js.hsforms.net recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/bric-captcha-ttweb/core-captcha/ static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.facebook.net www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com lf-tiktok-web-bak.tiktokcdn-us.com lf16-tiktok-web.tiktokcdn-us.com/obj/tiktok-web-tx/obj/waf-aiso/; worker-src www.tiktok.com/business/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ |
| Content-Type | text/html; charset=utf-8 |
| Date | Tue, 20 Oct 2026 21:48:41 GMT |
| Expires | Tue, 20 Oct 2026 21:48:41 GMT |
| Pragma | no-cache |
| Server | nginx |
| Server-Timing | cdn-cache; desc=MISS, edge; dur=63, origin; dur=229 inner; dur=221 |
| Transfer-Encoding | chunked |
| X-Akamai-Request-ID | 3a78a4f6.843f716 |
| X-Cache | TCP_MISS from a184-28-82-203.deploy.akamaitechnologies.com (AkamaiGHost/22.6.5-c7f42c2259a85671864b176aefb368af) (-) |
| X-Cache-Remote | TCP_MISS from a23-48-249-37.deploy.akamaitechnologies.com (AkamaiGHost/22.6.5-c7f42c2259a85671864b176aefb368af) (-) |
| X-Origin-Response-Time | 229,23.48.249.37 |
| X-Parent-Response-Time | 292,184.28.82.203 |
| feature-policy | microphone 'none'; geolocation 'none' |
| referrer-policy | strict-origin-when-cross-origin |
| reporting-endpoints | csp-endpoint="https://mon16-normal-useast5.tiktokv.us/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=7qSeM8cmzi4GPGC6JsU1aj&v=2&s=421&b=oab" |
| strict-transport-security | max-age=31536000; includeSubdomains |
| tt-gateway-flag | v2 |
| x-bytefaas-execution-duration | 192.14 |
| x-bytefaas-request-id | 20261020214841386CB4D97B6C6055AEBD |
| x-content-type-options | nosniff |
| x-download-options | noopen |
| x-frame-options | SAMEORIGIN |
| x-gw-dst-psm | serverless.tiktok.desktop |
| x-powered-by | Goofy Node |
| x-pumbaa-web-avail | 1 |
| x-tt-logid | 20261020214841386CB4D97B6C6055AEBD |
| x-tt-trace-host | 01ae3acf3fa2e599c829a197a347b0ff71392864e1ff623b2f92988f3c415625529dac09d102f2eeceea5fdb1331443c228a85d64a5fae9f07850d62cab145e93d2f73463406948076288187a939148e6645e6e2e2c89e88b45fe5763a45ea7ddd2c6af0095e8f51688584131e7d979d45 |
| x-tt-trace-id | 00-261020214841386CB4D97B6C6055AEBD-691C5C22410410FB-00 |
| x-tt-trace-tag | id=16;cdn-cache=miss;type=dyn |
| x-xss-protection | 1; mode=block |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| tt_csrf_token | [tt_csrf_token redacted] | .tiktok.com/ | 12/31/1969, 11:59:59 PM | yes | yes |
| tt_chain_token | [tt_chain_token redacted] | .tiktok.com/ | 4/18/2027, 9:48:41 PM | yes | yes |
| tiktok_webapp_theme_source | auto | .www.tiktok.com/ | 8/16/2027, 9:48:42 PM | yes | no |
| tiktok_webapp_theme | dark | .www.tiktok.com/ | 8/16/2027, 9:48:42 PM | yes | no |
| ttwid | 1%7CstXAMULowYDE1LKUr2ylYO1z-6rAm_9_3yFNWUiZtiM%7C1792532923%7Cf60ca465ca4c12a4df18b6d41f1b1234073be258fb59b7b5154ad5575db326f7 | .tiktok.com/ | 10/20/2027, 9:48:43 PM | yes | yes |