Summary
A Concise Overview of the scan result of url https://www.tiktok.com/@gehrla/video/7680962504574405910
- Document
- HTML
- 16
- StyleSheets
- 7
- Scripts
- 238
- Font
- 6
- Images
- 4
- Links
- 0
- JavaScript Variables
- 79
- Console log messages
- 0
- Network
- Requests
- 369
- Bytes Transferred
- 7.42MB
- Bytes Total
- 22.62MB
- DNS Record
- CNAME Record
- 6
- A Record
- 9
- Technology
- PaaS
- 1
- Payment processors
- 1
- Web servers
- 1
- Reverse proxies
- 1
- Security
- 2
- CDN
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
hCaptcha | hCaptcha is an anti-bot solution that protects user privacy and rewards websites. | Type: headers Name: content-security-policy Regex: (?:\.|\/\/)hcaptcha\.com |
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Web servers | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
| CDN | ||
Amazon S3 | Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface. | Type: headers Name: server Regex: s3[^ ]{0,250}amazonaws\.com |
| Payment processors | ||
PayPal | PayPal is an online payments system that supports online money transfers and serves as an electronic alternative to traditional paper methods like checks and money orders. | Type: headers Name: content-security-policy Regex: \.paypal\.com |
| PaaS | ||
Amazon Web Services | Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality. | Dependent on Amazon S3 |
| Reverse proxies | ||
Nginx | Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache. | Type: headers Name: server Regex: nginx(?:\/([\d.]{1,250}))? |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 1 msGood
- requestTime
- 91 msGood
- dom
- 4040 msPoor
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api8.akamai.net. | no |
| A | a2047.api8.akamai.net | 2.16.16.150 | no |
| A | a2047.api8.akamai.net | 2.16.16.152 | no |
| A | a2047.api8.akamai.net | 2.16.16.156 | no |
| A | a2047.api8.akamai.net | 2.16.16.149 | no |
| A | a2047.api8.akamai.net | 2.16.16.154 | no |
| A | a2047.api8.akamai.net | 2.16.16.153 | no |
| A | a2047.api8.akamai.net | 2.16.16.147 | no |
| A | a2047.api8.akamai.net | 2.16.16.146 | no |
| A | a2047.api8.akamai.net | 2.16.16.148 | no |
| CNAME | www.tiktok.com | www.tiktok.com.edgesuite.net. | no |
| CNAME | www.tiktok.com.edgesuite.net | shared-global-api-spread.bytewlb.akadns.net. | no |
| CNAME | shared-global-api-spread.bytewlb.akadns.net | a2047.api3.akamai.net. | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
www.tiktok.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
sf16-website-login.neutral.tiktokcdn-eu.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
p16-common-sign.tiktokcdn-eu.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
libraweb-ttp2.tiktokw.eu | 9/2/2026 | 9/3/2027 | 1 year 1 day |
mcs16-normal-no1a.tiktokw.eu | 9/2/2026 | 9/3/2027 | 1 year 1 day |
v16-webapp-prime.tiktok.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
sf16-website-login.neutral.ttwstatic.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
mcs-ie2.tiktokw.eu | 9/2/2026 | 9/3/2027 | 1 year 1 day |
mon-i18n.tiktokv.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
v16-webapp.tiktokcdn-eu.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
mon.tiktokv.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
webcast.tiktok.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
v19-webapp.tiktokcdn-eu.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
v19-webapp-prime.tiktok.com | 9/2/2026 | 9/3/2027 | 1 year 1 day |
mon16-normal-no1a.tiktokv.eu | 9/2/2026 | 9/3/2027 | 1 year 1 day |
webmssdk16-normal-no1a.tiktokw.eu | 9/2/2026 | 9/3/2027 | 1 year 1 day |
starling-ttp2.tiktokv.eu | 9/2/2026 | 9/3/2027 | 1 year 1 day |
mon16-normal-useastred.tiktokv.eu | 9/2/2026 | 9/3/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Access-Control-Expose-Headers | x-tt-traceflag,x-tt-logid |
| Cache-Control | max-age=0, no-cache, no-store |
| Connection | keep-alive Transfer-Encoding |
| Content-Encoding | br |
| Content-Security-Policy | report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=r9uhAe2913VU9Gwx8Z9uCG&v=3&s=370&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com api-verification.tiktokshops.eu api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; frame-src *.kakao.com *.tiktok.com access.line.me accounts.google.com api.twitter.com appleid.apple.com assets.braintreegateway.com client-api.arkoselabs.com h.online-metrix.net lf16-web.tiktokcdn.com newassets.hcaptcha.com recaptcha.google.com tx41v.arkoselabs.com www.facebook.com www.google.com; script-src 'report-sample' 'unsafe-eval' 'inline-speculation-rules' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/ |
| Content-Type | text/html; charset=utf-8 |
| Date | Thu, 03 Sep 2026 03:47:41 GMT |
| Expires | Thu, 03 Sep 2026 03:47:41 GMT |
| Pragma | no-cache |
| Server | nginx |
| Server-Timing | inner; dur=213 cdn-cache; desc=MISS, edge; dur=0, origin; dur=288 |
| Transfer-Encoding | chunked |
| X-Akamai-Request-ID | 103b6500 |
| X-Cache | TCP_MISS from a2-16-173-113.deploy.akamaitechnologies.com (AkamaiGHost/22.6.2-039cf934921f24e45063a41240aca161) (-) |
| X-Origin-Response-Time | 288,2.16.173.113 |
| feature-policy | microphone 'none'; geolocation 'none' |
| referrer-policy | strict-origin-when-cross-origin |
| reporting-endpoints | csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=r9uhAe2913VU9Gwx8Z9uCG&v=3&s=370&b=oab" |
| strict-transport-security | max-age=31536000; includeSubdomains |
| tt-gateway-flag | v2 |
| x-bytefaas-execution-duration | 202.43 |
| x-bytefaas-request-id | 20260903034741375EDD57BE41855D5572 |
| x-content-type-options | nosniff |
| x-download-options | noopen |
| x-frame-options | SAMEORIGIN |
| x-gw-dst-psm | serverless.tiktok.desktop |
| x-powered-by | Goofy Node |
| x-pumbaa-web-avail | 1 |
| x-tt-logid | 20260903034741375EDD57BE41855D5572 |
| x-tt-trace-host | 012b0eee1bdca9369d314ba09c8338b201bad322555515f387ec657a60249ae8ddc4da5c900750522fd36220d0b02503753b2deb76c1afb38141fdfda6cc4e0d2cca87ebba8560ffd080349625643f9b25899d293d0647a5c62a146aa3c9b01bdbc2e52206d9a1223b1dbbb34eec9bca8a7d4d6f4e467eb1e0845df2b6c5b6af32deec0ae1b6b4445db21154c56c168591 |
| x-tt-trace-id | 00-260903034741375EDD57BE41855D5572-4E12CACA35230F1B-00 |
| x-tt-trace-tag | id=16;cdn-cache=miss;type=dyn |
| x-xss-protection | 1; mode=block |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| gd_random | eyJwZXJjZW50IjowLjUzNjkxMTc1MjI3NzU2OTYsIm1hdGNoIjpmYWxzZX0=.2+H0ZvSzj5MVqYL6led9fdjYWT3gMPmruJC3ludQIlY= | www.tiktok.com/404 | 9/10/2026, 3:47:45 AM | no | yes |
| tt_csrf_token | [tt_csrf_token redacted] | .tiktok.com/ | 12/31/1969, 11:59:59 PM | yes | yes |
| tt_chain_token | [tt_chain_token redacted] | .tiktok.com/ | 3/2/2027, 3:47:41 AM | yes | yes |
| x-web-secsdk-uid | 8a11f761-9f7f-4bb4-a4e1-aa4743a613d2 | www.tiktok.com/ | 12/31/1969, 11:59:59 PM | no | no |
| tiktok_webapp_theme_source | auto | .www.tiktok.com/ | 6/30/2027, 3:47:42 AM | yes | no |
| tiktok_webapp_theme | dark | .www.tiktok.com/ | 6/30/2027, 3:47:42 AM | yes | no |
| ttwid | 1%7CqVUtMXcGwBbV3F_NhqVlENIJF_V0ccoROwOm9BmVqNo%7C1788407262%7Cbbe5c8f4ae71446e5d0498bd1b71cba35584b8acaaad6a353a1fc23a96ccac52 | .tiktok.com/ | 9/3/2027, 3:47:42 AM | yes | yes |
| msToken | [msToken redacted] | www.tiktok.com/ | 12/2/2026, 3:47:43 AM | no | no |
| delay_guest_mode_vid | 8 | .www.tiktok.com/ | 6/30/2027, 3:47:44 AM | yes | no |
| msToken | [msToken redacted] | .tiktok.com/ | 9/13/2026, 3:47:45 AM | yes | no |