urlquery.net
WEBSITE ANALYSIS REPORT

http://gwigzlb.com

public
Report tags
Submit tags
Request review

Domain graph

Hostnames and connections captured in this scan

CallsLoads fromRedirects toEmbeds
Loading domain graph…

Network requests

Click any request row to expand it in place. Multiple transactions can remain open.

UTC · milliseconds
Reset
Captured HTTP requests; click any summary row or use its hostname button to expand transaction details.
Timestamp (UTC)MethodStatusHost / pathTypeSizeDurationSignals
GET301document0 B43 ms—
GET200document358.8 KB275 ms—

Transaction #321

Request / response

URL

Navigation request GET HTTPS
https://www.tiktok.com/explore

IP / ASN

United States 23.214.96.74

AS35994 · AKAMAI-AS

Requested by
Not recorded

HTTP headers

Request headers

GET /explore HTTP/1.1
Host: www.tiktok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.9
Accept-Encoding: gzip, deflate, br, zstd
Sec-GPC: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Priority: u=0, i
Pragma: no-cache
Cache-Control: no-cache

Response headers

HTTP/2 200 
server: nginx
content-type: text/html; charset=utf-8
feature-policy: microphone 'none'; geolocation 'none'
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=31536000; includeSubdomains
tt-gateway-flag: v2
x-bytefaas-execution-duration: 137.07
x-bytefaas-request-id: 2026100811064468B912BB1CDDDA2859E9
x-content-type-options: nosniff
x-download-options: noopen
x-frame-options: SAMEORIGIN
x-gw-dst-psm: serverless.tiktok.desktop
x-powered-by: Goofy Node
x-pumbaa-web-avail: 1
x-tt-logid: 2026100811064468B912BB1CDDDA2859E9
x-xss-protection: 1; mode=block
access-control-expose-headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 01a4cc430180ad9be9e8bde30ccd3e74c4f068aa742b9c8562bacf20f25dc8baf7a38e2242e8b7f458facd737a9f553e67191c3f7be720af23c11be06e4906f2296d4877635db2cdae647a11994e80b2f4f48dba38e406e9f2a80804c7833713480f878f52bf6cfa1106f9716a8a814b29bfc8411793969c2e3ed5f71451cf6e5e
x-tt-trace-id: 00-26100811064468B912BB1CDDDA2859E9-6A57041C26399F26-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=11&s=350&b=oab"
content-security-policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=11&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com snssdk1233://* snssdk1180://*; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
content-encoding: br
expires: Thu, 08 Oct 2026 11:06:45 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 08 Oct 2026 11:06:45 GMT
x-cache: TCP_MISS from a23-213-134-91.deploy.akamaitechnologies.com (AkamaiGHost/22.6.4-f482a3e3664c9c221e0e3f27d57156e9) (-)
set-cookie: ttwid=1%7CRexefRYy7_kBLTdEefvL1Ny1mhwdULxM63HNK5BdYXo%7C1791457604%7C9c341e136bc5b498f7c8685825e5bddac77fc49e78ba1e4e23b1f169c2c6cca9; Domain=.tiktok.com; Path=/; Expires=Sun, 03 Oct 2027 11:06:44 GMT; HttpOnly; Secure
tt_csrf_token=FNZeZwcM-sBXDWNDYP2wDMfUKEdHVjhoVFaI; path=/; domain=.tiktok.com; samesite=lax; secure; httponly
tt_chain_token=5ys0h1PgWEHPdfwLO8AScQ==; path=/; expires=Tue, 06 Apr 2027 11:06:45 GMT; domain=.tiktok.com; secure; httponly
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
server-timing: inner; dur=148, cdn-cache; desc=MISS, edge; dur=0, origin; dur=243
x-origin-response-time: 243,23.213.134.91
x-akamai-request-id: 9ac71494
X-Firefox-Spdy: h2

GET200script159.3 KB31 ms—
GET200script1.3 KB39 ms—
GET200script85.4 KB35 ms—
GET200script332.6 KB36 ms—
GET200script26.6 KB34 ms—
GET200script39.9 KB28 ms—
GET200script256.3 KB33 ms—
GET200script31.0 KB9 ms—
GET200script195.2 KB10 ms—
GET200script222.3 KB11 ms—
GET200script24.9 KB10 ms—
GET200script108.5 KB11 ms—
GET200script399.8 KB7 ms—
GET200script59.0 KB8 ms—
GET200script19.6 KB9 ms—
GET200script8.4 KB4 ms—
GET200script57.7 KB4 ms—
GET200script249.0 KB6 ms—
GET200script349.4 KB5 ms—
GET200script87.4 KB6 ms—
GET200script615.0 KB6 ms—
GET200script446.7 KB5 ms—
GET200script73.7 KB3 ms—
GET200script17.0 KB5 ms—
GET200script122.7 KB11 ms—
GET200script17.6 KB10 ms—
GET200script1.05 MB11 ms—
GET200script84.4 KB9 ms—
GET200script27.9 KB3 ms—
GET200script116.3 KB3 ms—
GET200script106.8 KB2 ms—
GET200script27.1 KB3 ms—
GET200script27.8 KB2 ms—
GET200script22.2 KB3 ms—
GET200script37.3 KB4 ms—
GET200script26.4 KB3 ms—
GET200script15.9 KB3 ms—
GET200script23.1 KB2 ms—
GET200script20.6 KB2 ms—
GET200script20.3 KB3 ms—
GET200script130.8 KB3 ms—
GET200script13.2 KB2 ms—
GET200script20.8 KB2 ms—
GET200script20.0 KB4 ms—
GET200script34.6 KB3 ms—
GET200script16.7 KB3 ms—
GET200script32.2 KB2 ms—
GET200script4.2 KB3 ms—
Loading evidence…
WORKSPACE SETTINGS

Display preferences

Saved on this device.

SuccessInfoWarningDangerCriticalUnknown

Security colors remain independent of your accent.

Go to…

Recent scans ↵ Search reports /Search hosts ↵

No matching commands.

Ctrl/⌘ K Commands · Esc Close

LOCAL DEMONSTRATION

Notifications

No live event connection.

No notifications yet. Preview an event below.

Full request body

Full screenshot

Full browser screenshot