Check DNS, Urls + Redirects, Certificates and Content of your Website


 

 

O

 

old / weak connection

 

Checked:
19.04.2026 12:01:40

 

Older results

 

 

1. IP-Addresses

HostTypeIP-Addressis auth.∑ Queries∑ Timeout
tiktok.com
A
23.200.24.72
Berlin/State of Berlin/Germany (DE) - Akamai International B.V.
Hostname: a23-200-24-72.deploy.static.akamaitechnologies.com
yes
1
0

A
23.200.24.99
Berlin/State of Berlin/Germany (DE) - Akamai International B.V.
Hostname: a23-200-24-99.deploy.static.akamaitechnologies.com
yes
1
0

A
23.200.24.122
Berlin/State of Berlin/Germany (DE) - Akamai International B.V.
Hostname: a23-200-24-122.deploy.static.akamaitechnologies.com
yes
1
0

AAAA

yes


www.tiktok.com
CNAME
www.tiktok.com.edgesuite.net
yes
1
0

CNAME
shared-global-api-spread.bytewlb.akadns.net
yes


tiktok.com
A
95.100.248.17
Berlin/State of Berlin/Germany (DE) - Akamai Technologies
No Hostname found
no



A
95.100.248.31
Berlin/State of Berlin/Germany (DE) - Akamai Technologies
No Hostname found
no


www.tiktok.com
A
95.100.248.71
Berlin/State of Berlin/Germany (DE) - Akamai Technologies
No Hostname found
no



A
95.100.248.73
Berlin/State of Berlin/Germany (DE) - Akamai Technologies
No Hostname found
no



A
95.100.248.74
Berlin/State of Berlin/Germany (DE) - Akamai Technologies
No Hostname found
no



A
95.100.248.75
Berlin/State of Berlin/Germany (DE) - Akamai Technologies
No Hostname found
no



A
95.100.248.81
Berlin/State of Berlin/Germany (DE) - Akamai Technologies
No Hostname found
no



A
95.100.248.86
Berlin/State of Berlin/DE
No Hostname found
no



A
95.100.248.88
Berlin/State of Berlin/DE
No Hostname found
no



A
95.100.248.89
Berlin/State of Berlin/DE
No Hostname found
no



A
95.100.248.93
Berlin/State of Berlin/DE
No Hostname found
no


*.tiktok.com
A
Name Error
yes



AAAA
Name Error
yes



CNAME
Name Error
yes


 

2. DNSSEC

Zone (*)DNSSEC - Informations


Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 54393, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2026, 00:00:00 +, Signature-Inception: 11.04.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: com

com
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=






1 RRSIG RR to validate DS RR found






RRSIG-Owner com., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 02.05.2026, 05:00:00 +, Signature-Inception: 19.04.2026, 04:00:00 +, KeyTag 54393, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 54393 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 19718, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 27677, Flags 256






Public Key with Algorithm 13, KeyTag 35511, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner com., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 02.05.2026, 14:02:35 +, Signature-Inception: 17.04.2026, 13:57:35 +, KeyTag 19718, Signer-Name: com






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 19718 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 19718, DigestType 2 and Digest "isuwzSj0ElCoCkkTiUJNNBUi2Uaw2gwCkfLT13HXgFo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: tiktok.com

tiktok.com
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "bnd4ekce0m8uu5v6fdugl0q4nbg30ntq" between the hashed NSEC3-owner "bnd4eb3tkkmv5ecpec7ijt372ijq5v6h" and the hashed NextOwner "bnd4jl7e2qdk8k4b90bd70dav4qs45qr". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner bnd4eb3tkkmv5ecpec7ijt372ijq5v6h.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 26.04.2026, 01:47:02 +, Signature-Inception: 19.04.2026, 00:37:02 +, KeyTag 27677, Signer-Name: com






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "ck0pojmg874ljref7efn8430qvit8bsm" as Owner. That's the Hash of "com" with the NextHashedOwnerName "ck0q3udg8cekkae7rukpgct1dvssh8ll". So that domain name is the Closest Encloser of "tiktok.com". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner ck0pojmg874ljref7efn8430qvit8bsm.com., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 24.04.2026, 00:26:41 +, Signature-Inception: 16.04.2026, 23:16:41 +, KeyTag 27677, Signer-Name: com






0 DNSKEY RR found









Zone: www.tiktok.com

www.tiktok.com
0 DS RR in the parent zone found



Zone: (root)

(root)
1 DS RR published






DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest 4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=






Status: Valid because published






3 DNSKEY RR found






Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 38696, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 8, KeyTag 54393, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner (root), Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2026, 00:00:00 +, Signature-Inception: 11.04.2026, 00:00:00 +, KeyTag 20326, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: net

net
1 DS RR in the parent zone found






DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=






1 RRSIG RR to validate DS RR found






RRSIG-Owner net., Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 02.05.2026, 05:00:00 +, Signature-Inception: 19.04.2026, 04:00:00 +, KeyTag 54393, Signer-Name: (root)






Status: Good - Algorithmus 8 and DNSKEY with KeyTag 54393 used to validate the DS RRSet in the parent zone






3 DNSKEY RR found






Public Key with Algorithm 13, KeyTag 1560, Flags 256






Public Key with Algorithm 13, KeyTag 37331, Flags 257 (SEP = Secure Entry Point)






Public Key with Algorithm 13, KeyTag 44109, Flags 256






1 RRSIG RR to validate DNSKEY RR found






RRSIG-Owner net., Algorithm: 13, 1 Labels, original TTL: 86400 sec, Signature-expiration: 02.05.2026, 14:10:35 +, Signature-Inception: 17.04.2026, 14:05:35 +, KeyTag 37331, Signer-Name: net






Status: Good - Algorithmus 13 and DNSKEY with KeyTag 37331 used to validate the DNSKEY RRSet






Status: Valid Chain of trust. Parent-DS with Algorithm 13, KeyTag 37331, DigestType 2 and Digest "LwvsLW95370dCP0ho6+S0OOaS57x4/QRH/8oJJDaRTs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone



Zone: edgesuite.net

edgesuite.net
0 DS RR in the parent zone found






DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed query name "b5jlejrq6ofj80h5u7q4o81i7nvel95j" between the hashed NSEC3-owner "b5jjd28mfhk2qeo58rnoojnf8s5loi6t" and the hashed NextOwner "b5jlj08h2hp07depkrj85j6007rejmpe". So the parent zone confirmes the not-existence of a DS RR.
Bitmap: NS, DS, RRSIG Validated: RRSIG-Owner b5jjd28mfhk2qeo58rnoojnf8s5loi6t.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 24.04.2026, 03:17:20 +, Signature-Inception: 17.04.2026, 02:07:20 +, KeyTag 1560, Signer-Name: net






DS-Query in the parent zone sends valid NSEC3 RR with the Hash "a1rt98bs5qgc9nfi51s9hci47uljg6jh" as Owner. That's the Hash of "net" with the NextHashedOwnerName "a1rtlnpgulogn7b9a62shje1u3ttp8dr". So that domain name is the Closest Encloser of "edgesuite.net". Opt-Out: True.
Bitmap: NS, SOA, RRSIG, DNSKEY, NSEC3PARAM Validated: RRSIG-Owner a1rt98bs5qgc9nfi51s9hci47uljg6jh.net., Algorithm: 13, 2 Labels, original TTL: 900 sec, Signature-expiration: 24.04.2026, 03:25:08 +, Signature-Inception: 17.04.2026, 02:15:08 +, KeyTag 1560, Signer-Name: net






0 DNSKEY RR found









Zone: com.edgesuite.net

com.edgesuite.net
0 DS RR in the parent zone found



Zone: tiktok.com.edgesuite.net

tiktok.com.edgesuite.net
0 DS RR in the parent zone found






0 DNSKEY RR found









Zone: www.tiktok.com.edgesuite.net

www.tiktok.com.edgesuite.net
0 DS RR in the parent zone found

 

3. Name Servers

DomainNameserverNS-IP
tiktok.com
  a12-66.akam.net
184.26.160.66
Frankfurt am Main/Hesse/Germany (DE) - Akamai International B.V.


 
2600:1480:f000::42
Newark/New Jersey/United States (US) - Akamai International B.V.


  a13-67.akam.net
2.22.230.67
Madrid/Spain (ES) - Akamai Technologies


 
2600:1480:800::43
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  a18-64.akam.net
95.101.36.64
Cambridge/Massachusetts/US


 
2600:1480:4800::40
Newark/New Jersey/United States (US) - Akamai International B.V.


  a1-97.akam.net
193.108.91.97
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


 
2600:1401:2::61
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  a6-65.akam.net
23.211.133.65
Paris/Île-de-France/France (FR) - Akamai International B.V.


 
2600:1401:1::41
Newark/New Jersey/United States (US) - Akamai International B.V.


  a9-66.akam.net
184.85.248.66
Toronto/Ontario/Canada (CA) - Akamai International B.V.


 
2a02:26f0:117::42
Cambridge/Massachusetts/United States (US) - Akamai International B.V

com
  a.gtld-servers.net


  b.gtld-servers.net


  c.gtld-servers.net


  d.gtld-servers.net


  e.gtld-servers.net


  f.gtld-servers.net


  g.gtld-servers.net


  h.gtld-servers.net


  i.gtld-servers.net


  j.gtld-servers.net


  k.gtld-servers.net


  l.gtld-servers.net


  m.gtld-servers.net


tiktok.com.edgesuite.net
  ns1-2.akamai.com

edgesuite.net
  a11-64.akam.net
84.53.139.64
San Jose/California/United States (US) - Akamai Technologies


 
2600:1480:1::40
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  a1-2.akam.net
193.108.91.2
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


 
2600:1401:2::2
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  a12-64.akam.net
184.26.160.64
Frankfurt am Main/Hesse/Germany (DE) - Akamai International B.V.


 
2600:1480:f000::40
Newark/New Jersey/United States (US) - Akamai International B.V.


  a13-64.akam.net
2.22.230.64
Madrid/Spain (ES) - Akamai Technologies


 
2600:1480:800::40
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  a14-67.akam.net
184.26.161.67
El Segundo/California/United States (US) - Akamai International B.V.


 
2600:1480:1800::43
Newark/New Jersey/United States (US) - Akamai International B.V.


  a18-64.akam.net
95.101.36.64
Cambridge/Massachusetts/US


 
2600:1480:4800::40
Newark/New Jersey/United States (US) - Akamai International B.V.


  a24-64.akam.net
2.16.130.64
New York/United States (US) - Akamai Technologies


 
2600:1480:9800::40
New York/United States (US) - Akamai International B.V.


  a28-64.akam.net
95.100.173.64
Slough/England/United Kingdom (GB) - Akamai Technologies


 
2600:1480:d800::40
Newark/New Jersey/United States (US) - Akamai International B.V.


  a3-64.akam.net
96.7.49.64
Cambridge/Massachusetts/US


 
2600:1408:1c::40
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  a5-64.akam.net
95.100.168.64
Milan/Lombardy/Italy (IT) - Akamai Technologies


 
2600:1480:b000::40
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  a6-64.akam.net
23.211.133.64
Paris/Île-de-France/France (FR) - Akamai International B.V.


 
2600:1401:1::40
Newark/New Jersey/United States (US) - Akamai International B.V.


  a9-64.akam.net
184.85.248.64
Toronto/Ontario/Canada (CA) - Akamai International B.V.


 
2a02:26f0:117::40
Cambridge/Massachusetts/United States (US) - Akamai International B.V


  a9-65.akam.net
184.85.248.65
Toronto/Ontario/Canada (CA) - Akamai International B.V.


 
2a02:26f0:117::41
Cambridge/Massachusetts/United States (US) - Akamai International B.V


  adns3.akam.net
184.26.161.67
El Segundo/California/United States (US) - Akamai International B.V.


  ns1-2.akam.net
193.108.91.2
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


 
2600:1401:2::2
Cambridge/Massachusetts/United States (US) - Akamai International B.V.


  ns1-2.akamai.com


  usw6.akam.net
23.61.199.64
Cambridge/Massachusetts/United States (US) - Akamai International B.V.

net
  a.gtld-servers.net


  b.gtld-servers.net


  c.gtld-servers.net


  d.gtld-servers.net


  e.gtld-servers.net


  f.gtld-servers.net


  g.gtld-servers.net


  h.gtld-servers.net


  i.gtld-servers.net


  j.gtld-servers.net


  k.gtld-servers.net


  l.gtld-servers.net


  m.gtld-servers.net

 

4. SOA-Entries


Domain:com
Zone-Name:com
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1776592882
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:13


Domain:tiktok.com
Zone-Name:tiktok.com
Primary:a9-66.akam.net
Mail:hostmaster.akamai.com
Serial:1554957858
Refresh:43200
Retry:7200
Expire:604800
TTL:7200
num Entries:12



Domain:net
Zone-Name:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1776592882
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:5


Domain:net
Zone-Name:net
Primary:a.gtld-servers.net
Mail:nstld.verisign-grs.com
Serial:1776592897
Refresh:1800
Retry:900
Expire:604800
TTL:900
num Entries:8


Domain:edgesuite.net
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


Domain:edgesuite.net
Zone-Name:edgesuite.net
Primary:ns1-2.akamai.com
Mail:hostmaster.akamai.com
Serial:1579854639
Refresh:900
Retry:300
Expire:604800
TTL:180
num Entries:30


Domain:tiktok.com.edgesuite.net
Zone-Name:
Primary:
Mail:
Serial:
Refresh:
Retry:
Expire:
TTL:
num Entries:1


5. Screenshots

Startaddress: https://www.tiktok.com/ja-JP/, address used: https://www.tiktok.com/ja-JP/, Screenshot created 2026-04-19 12:10:12 +00:0

 

Mobil (412px x 732px)

 

767 milliseconds

 

Screenshot mobile - https://www.tiktok.com/ja-JP/
Mobil + Landscape (732px x 412px)

 

750 milliseconds

 

Screenshot mobile landscape - https://www.tiktok.com/ja-JP/
Screen (1280px x 1680px)

 

962 milliseconds

 

Screenshot Desktop - https://www.tiktok.com/ja-JP/

 

Mobile- and other Chrome-Checks


widthheight
visual Viewport404717
content Size492732

 

Fatal: Horizontal scrollbar detected. Content-size width is greater then visual Viewport width.

 

6. Url-Checks


:

:
DomainnameHttp-StatusredirectSec.G
• http://tiktok.com/ja-JP/
23.200.24.72
301
http://www.tiktok.com/ja-JP/

0.017
D
Server: AkamaiGHost
Location: http://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:04 GMT
X-Cache: TCP_MISS from a23-199-65-72.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 2b92ccd9
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:04 GMT

• http://tiktok.com/ja-JP/
23.200.24.99
301
http://www.tiktok.com/ja-JP/

0.023
D
Server: AkamaiGHost
Location: http://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:04 GMT
X-Cache: TCP_MISS from a23-199-65-99.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 2bc2065f
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:04 GMT

• http://tiktok.com/ja-JP/
23.200.24.122
301
http://www.tiktok.com/ja-JP/

0.017
D
Server: AkamaiGHost
Location: http://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:04 GMT
X-Cache: TCP_MISS from a23-199-65-122.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=0
X-Akamai-Request-ID: 233ed5c6
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:04 GMT

• http://tiktok.com/ja-JP/
95.100.248.17
301
http://www.tiktok.com/ja-JP/

0.026
D
Server: AkamaiGHost
Location: http://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:04 GMT
X-Cache: TCP_MISS from a2-23-230-17.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 972247b
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:04 GMT

• http://tiktok.com/ja-JP/
95.100.248.31
301
http://www.tiktok.com/ja-JP/

0.043
D
Server: AkamaiGHost
Location: http://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:04 GMT
X-Cache: TCP_MISS from a2-23-230-31.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: a116451
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:04 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.71
301
https://www.tiktok.com/ja-JP/

0.016
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-103.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 7d2913c9
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.73
301
https://www.tiktok.com/ja-JP/

0.017
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-105.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 7244e907
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.74
301
https://www.tiktok.com/ja-JP/

0.017
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-106.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 711419e2
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.75
301
https://www.tiktok.com/ja-JP/

0.016
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-107.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: b152911a
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.81
301
https://www.tiktok.com/ja-JP/

0.016
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-113.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 583ff10a
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.86
301
https://www.tiktok.com/ja-JP/

0.017
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-118.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 6f2fecd5
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.88
301
https://www.tiktok.com/ja-JP/

0.017
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-120.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 51090d49
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.89
301
https://www.tiktok.com/ja-JP/

0.016
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-121.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 6688e885
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• http://www.tiktok.com/ja-JP/
95.100.248.93
301
https://www.tiktok.com/ja-JP/

0.016
A
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a2-22-52-125.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 95cdf1d3
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• https://tiktok.com/ja-JP/
23.200.24.72
301
https://www.tiktok.com/ja-JP/

1.877
B
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:08 GMT
X-Cache: TCP_MISS from a23-199-65-99.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=0
X-Akamai-Request-ID: 2bc20c98
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:08 GMT

• https://tiktok.com/ja-JP/
23.200.24.99
301
https://www.tiktok.com/ja-JP/

1.830
B
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:10 GMT
X-Cache: TCP_MISS from a23-199-65-88.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 32843c44
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:10 GMT

• https://tiktok.com/ja-JP/
23.200.24.122
301
https://www.tiktok.com/ja-JP/

1.846
B
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:05 GMT
X-Cache: TCP_MISS from a23-199-65-72.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=0
X-Akamai-Request-ID: 2b92cdcf
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:05 GMT

• https://tiktok.com/ja-JP/
95.100.248.17
301
https://www.tiktok.com/ja-JP/

1.984
B
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:13 GMT
X-Cache: TCP_MISS from a2-23-230-10.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 1834f49
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:13 GMT

• https://tiktok.com/ja-JP/
95.100.248.31
301
https://www.tiktok.com/ja-JP/

1.944
B
Server: AkamaiGHost
Location: https://www.tiktok.com/ja-JP/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:16 GMT
X-Cache: TCP_MISS from a2-23-230-44.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 6eb437f
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:16 GMT

• https://www.tiktok.com/ja-JP/
95.100.248.71 br used - 83051 / 352729 - 76.45 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 134.53 %
Other inline scripts (∑/total): 7/243603
2.283
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 112.82
X-Bytefaas-Request-Id: 2026041910041976C3D565DDA094566FAB
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 2026041910041976C3D565DDA094566FAB
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
Server-Timing: inner; dur=116,cdn-cache; desc=MISS, edge; dur=0, origin; dur=208
x-tt-trace-host: 01027e1989e9fee1605b7ec913d575b84c688c708de11caa612aa76d1c61538fabd59830aad1dcbb7c57250ad586115a85fb3c82271ec00358365aa6537c17d74fcad23375a3d66878cbd1aed35c9da6a4206552600720e8d54177d4d993b11f5d16a31d7536a6eff2d432830f99b374b82ce8bf6c86be3f30377f1260bd2aceb0b4e5f740e2d9eac6b805597d6396cdb4
x-tt-trace-id: 00-26041910041976C3D565DDA094566FAB-16DA11E7593D670E-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:19 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-102.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7CxwW2UvaczF0h9wJYpfApmUrvyo2NTHf6-u7hYxz1bho%7C1776593059%7C2b81370efbd2c36b7d4aaeb066bd2581e7adbfc58974a10abf60b1f814a44632; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:19 GMT; HttpOnly; Secure,tt_csrf_token=HOYesjCk-FAXA3_HHMLIVwYXipHTJoxXIUsY; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=LaDro0YaJvNAJCXluHt1ng==; path=/; expires=Fri, 16 Oct 2026 10:04:19 GMT; domain=.tiktok.com; secure; httponly
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
X-Origin-Response-Time: 208,2.22.52.102
X-Akamai-Request-ID: 87f3163d
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:19 GMT
Content-Length: 83051

• https://www.tiktok.com/ja-JP/
95.100.248.73 br used - 83117 / 352868 - 76.45 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 134.51 %
Other inline scripts (∑/total): 7/243742
2.246
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 128.20
X-Bytefaas-Request-Id: 20260419100423AC826975D724C8500AA4
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 20260419100423AC826975D724C8500AA4
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e78678cc1bc49a8d30d12babf8a19cd66b170a6203f68d6a8293af9c0d8d4de84847f459e7f470dbe6cc6fa9a4f86eef9ffdc61f9ddb753347f5f5d4606bff6ef56a9fb30266a34046b332e1299a943c6fd9dc00f5fb7112842d5be32cb20b4fc5de07509e348710b9604e50e978850cabaead7931e9cccba203831dd42a19e408
x-tt-trace-id: 00-260419100423AC826975D724C8500AA4-7DA1C7BF811FBC4D-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
X-Origin-Response-Time: 214,23.33.119.212
X-Akamai-Request-ID: 142f4c05.510add70
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:23 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-120.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7CNh_rstMBdtz3vx770tzfH04uoB3qbw1njOpfN0X7rGo%7C1776593063%7Cfa2bd1f832ee8a28a94dd4dfd52350a66789bace2786a959c86ab08ee0820c5b; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:23 GMT; HttpOnly; Secure,tt_csrf_token=OtwbgJdN-leWJqg8ntJ8QI1H-E0J9thQdsKg; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=9iIwP7p1Dg7vZv9x1rC0ng==; path=/; expires=Fri, 16 Oct 2026 10:04:23 GMT; domain=.tiktok.com; secure; httponly
X-Cache-Remote: TCP_MISS from a23-33-119-212.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=27, origin; dur=214,inner; dur=130
X-Parent-Response-Time: 241,2.22.52.120
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:23 GMT
Content-Length: 83117

• https://www.tiktok.com/ja-JP/
95.100.248.74 br used - 82961 / 352726 - 76.48 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 134.53 %
Other inline scripts (∑/total): 7/243600
2.287
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 102.04
X-Bytefaas-Request-Id: 202604191004260941224AB0E0B14978A0
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 202604191004260941224AB0E0B14978A0
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e75618d31939f2ac0e4d37c503ea12a337c6562a9f8cec15c0c7f274a2e814588787f9be01dc159c1f6d5cd85ec8e39b3a8d3ee281025ba17db157bf37c193c32bfdca51cc5631eb022a1da95a3900e82f4774cc8d4477519b4f1f1c55df4440b53b962a84dabc4e957ed9278d83176dfacf5ead97138bc33915e291b7fef592f8
x-tt-trace-id: 00-2604191004260941224AB0E0B14978A0-31AF79CE54C5A174-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
X-Origin-Response-Time: 222,23.36.77.76
X-Akamai-Request-ID: 467ea7e.4e101794
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:26 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-104.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7Ct8l4KqL_woVWByMaJ2XwOQFJzAmBvjiaArKKk3UDNFc%7C1776593066%7Cb0af991b879de7d789bec2bdfb929136c28934f6791c8a4bca60cb0ef801d6e4; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:26 GMT; HttpOnly; Secure,tt_csrf_token=dHXmtpBs-Vg87HcSeE8CBOdySmLSiwcgivwA; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=9n/a2sk90KNPOzZzCf+Nlg==; path=/; expires=Fri, 16 Oct 2026 10:04:26 GMT; domain=.tiktok.com; secure; httponly
X-Cache-Remote: TCP_MISS from a23-36-77-76.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=19, origin; dur=222,inner; dur=105
X-Parent-Response-Time: 240,2.22.52.104
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:26 GMT
Content-Length: 82961

• https://www.tiktok.com/ja-JP/
95.100.248.75 br used - 83008 / 352682 - 76.46 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 134.54 %
Other inline scripts (∑/total): 7/243556
2.287
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 103.43
X-Bytefaas-Request-Id: 20260419100430A3E627CBD6DBC352FD28
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 20260419100430A3E627CBD6DBC352FD28
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
Server-Timing: inner; dur=106,cdn-cache; desc=MISS, edge; dur=1, origin; dur=250
x-tt-trace-host: 01027e1989e9fee1605b7ec913d575b84c688c708de11caa612aa76d1c61538fab661603a7ec872c35852a618dc2f7b365238b81814c0aee7138ecb016cb5fcee4d7992f746448ba8133f587e850de3040ea690da26f28f00cf695216a5244829ed46adb37b23e8502ebf31d99ed34a822689ae5d133d7b881b9cd3aa038231a364a2044114cfc06423cd029ba9a520ca5
x-tt-trace-id: 00-260419100430A3E627CBD6DBC352FD28-2350F973505EB4D4-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:30 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-110.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7CfHspFT-rp0337fNgIvlxmAeetDCYLUowUkBnJD_Yyzo%7C1776593070%7C8aa67e65fc02c053f743980598cdbdf0121ec052e91483755890f128cbfc711f; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:30 GMT; HttpOnly; Secure,tt_csrf_token=vJCQ19fc-_ZGJ2Nc8RXm2aWFQ3xvVKgLkAGI; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=on9d8/YBf11tFQ4AvhYXTA==; path=/; expires=Fri, 16 Oct 2026 10:04:30 GMT; domain=.tiktok.com; secure; httponly
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
X-Origin-Response-Time: 251,2.22.52.110
X-Akamai-Request-ID: 856fab7b
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:30 GMT
Content-Length: 83008

• https://www.tiktok.com/ja-JP/
95.100.248.81 br used - 77456 / 323171 - 76.03 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 138.92 %
Other inline scripts (∑/total): 6/214103
2.247
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 141.97
X-Bytefaas-Request-Id: 2026041910043380576FCED5083D494540
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 2026041910043380576FCED5083D494540
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e75e438fa7ac7e4faf2b52932034f06b3130c8b0ff1f3c61231a89ae181647ffd23b65184d5e566131f2d84ae2709c8d67577c81646cf8ad9c21adce0a223aec6d586d5473d23446ab4988424cd4d13145e29af83e65ed0e0b5cfbb0cfc81cfd1a767efa96627731c77ed2290f5b0762380b93974ac70d855fbfc7b56d8c9c50e9
x-tt-trace-id: 00-26041910043380576FCED5083D494540-3001F03B70D031C2-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
X-Origin-Response-Time: 195,23.36.77.85
X-Akamai-Request-ID: 84d7fbe.89f607dc
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:33 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-108.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7Cg5PCmSXlhlx1ct3fssnFgeKsdUjQ0yF9n4kLJRe_i24%7C1776593073%7Cbae84bc4f7389d09a3485e0ec9206af79831a074d3cc0e2b77c347f86942d7d9; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:33 GMT; HttpOnly; Secure,tt_csrf_token=lTtX24dj-6YmpsWEwNM6QmwOu9sDC8e5NCZs; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=zISFH3VZ1EluD/KNqqCVkw==; path=/; expires=Fri, 16 Oct 2026 10:04:33 GMT; domain=.tiktok.com; secure; httponly
X-Cache-Remote: TCP_MISS from a23-36-77-85.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=18, origin; dur=195,inner; dur=144
X-Parent-Response-Time: 213,2.22.52.108
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:33 GMT
Content-Length: 77456

• https://www.tiktok.com/ja-JP/
95.100.248.86 br used - 83128 / 352804 - 76.44 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 134.52 %
Other inline scripts (∑/total): 7/243678
2.487
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 171.42
X-Bytefaas-Request-Id: 2026041910043746E21D3E677DDB49F16F
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 2026041910043746E21D3E677DDB49F16F
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e76e1e88f884759807eeb4ff5ee8034aa93ea2a09073a307dd353af25dfbc25199d59816d0b30b25c5c97f76e2c3f479d4848cb7788578dda81572510183408bd86ce12ad28579aa10fb136e727bb66e2b560b87c9cd8ff4a151534293c86a86f19861279b271415986e6254b11678a19e80800795e0b514f04edac7a4994f3f42
x-tt-trace-id: 00-26041910043746E21D3E677DDB49F16F-13C315762D6AF312-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
X-Origin-Response-Time: 362,2.23.173.76
X-Akamai-Request-ID: 16d6533f.93933ccc
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:37 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-115.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7C7huZcZYIqkJpOHwPkr-xiX2yDAGv2ARFyOCvQYhazSc%7C1776593077%7Ca6c4684bdd633442c30fb8d565c720d6c49c076858f5f835f6e8375481987570; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:37 GMT; HttpOnly; Secure,tt_csrf_token=dm2qGnii-hepPRnVAetJGuqCavr67XXvXECc; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=E0vr+wPVMiHTtExBBAD6WQ==; path=/; expires=Fri, 16 Oct 2026 10:04:37 GMT; domain=.tiktok.com; secure; httponly
X-Cache-Remote: TCP_MISS from a2-23-173-76.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=15, origin; dur=361,inner; dur=182
X-Parent-Response-Time: 376,2.22.52.115
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:37 GMT
Content-Length: 83128

• https://www.tiktok.com/ja-JP/
95.100.248.88 br used - 83239 / 352835 - 76.41 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 134.52 %
Other inline scripts (∑/total): 7/243709
2.373
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 198.49
X-Bytefaas-Request-Id: 20260419100440D8D20B8F42E8A6454416
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 20260419100440D8D20B8F42E8A6454416
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e73c73d970b439106dab54d83acf6a37e1a07cf7f1ff7eaaa4926ac804aa1f62171ff0fe2602f831e25cef611ec9bf9504ed5b07cf1066f3abec88f08a10f7261f5c7d319c9e32fac2bfbcf8dedca326176edf518b46ea848ef46717cc724f4d45098b5cb7642562836bba27b3d61049274a1d2614634fa3ec3cb2f02abbec0bc9567a2c9ebdfd731e20dbce8aff966421
x-tt-trace-id: 00-260419100440D8D20B8F42E8A6454416-03F3C95B767A62E1-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
X-Origin-Response-Time: 279,23.193.116.77
X-Akamai-Request-ID: 19c3f34d.7119cbbf
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:41 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-106.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7CTSGroZONk4MHYFMwBvV_fR6TfYT-he-U5SjyATwfmtU%7C1776593081%7C83f8a3f2c266aeabc8e8057457e762dd3adf98b1a55faafe4f7f046fcc9778af; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:41 GMT; HttpOnly; Secure,tt_csrf_token=TBzQK522-AGYKlqVzGCUkaE-O3wA5GOxB3ns; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=iu/tQiWww0E/w3NgAQ+H/w==; path=/; expires=Fri, 16 Oct 2026 10:04:41 GMT; domain=.tiktok.com; secure; httponly
X-Cache-Remote: TCP_MISS from a23-193-116-77.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=10, origin; dur=279,inner; dur=201
X-Parent-Response-Time: 289,2.22.52.106
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:41 GMT
Content-Length: 83239

• https://www.tiktok.com/ja-JP/
95.100.248.89 br used - 77410 / 323240 - 76.05 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 138.91 %
Other inline scripts (∑/total): 6/214172
2.350
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 109.07
X-Bytefaas-Request-Id: 20260419100444567373B9CF274A4BB9A6
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 20260419100444567373B9CF274A4BB9A6
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e70502c868c4afc9a7ebecc2c199a490865c0c1df514476b653f6b6825bff656bbc6009632b53f0bac07b7a0873ddf88eb917c174df7a39e8c2fadc300fc2c60a330bdee63b8a371e86d37b4d3f18648d1a90969afdd1db424253091c591dbc93590bf254fa3cd511401e4a52e1c26d6eb3fa8e7e653ff2681c888f268aa8748f2e7ed409708020d31a492707b989e48d8
x-tt-trace-id: 00-260419100444567373B9CF274A4BB9A6-34D0E3ED56326FAC-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
X-Origin-Response-Time: 192,2.19.98.75
X-Akamai-Request-ID: 5c9a3314.8c5c5c51
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:44 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-100.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7COWJ0NRHwu3kpeTMwu3N9bTatNhcasMUJH--59PPSy9I%7C1776593084%7C08127fe62cecf0bd91fe2bc32f35d358be54347e63ab14bef33c8076cca9433c; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:44 GMT; HttpOnly; Secure,tt_csrf_token=CQGbIWRv-8zRN8fOf4xjsQAe7flIoxDoBY2E; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=9Qh1ayxwoQ21axWWP4jfpg==; path=/; expires=Fri, 16 Oct 2026 10:04:44 GMT; domain=.tiktok.com; secure; httponly
X-Cache-Remote: TCP_MISS from a2-19-98-75.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=23, origin; dur=192,inner; dur=111
X-Parent-Response-Time: 215,2.22.52.100
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:44 GMT
Content-Length: 77410

• https://www.tiktok.com/ja-JP/
95.100.248.93 br used - 83149 / 352761 - 76.43 %
Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 1/2481
200

Html is minified: 134.53 %
Other inline scripts (∑/total): 7/243635
2.300
I
Server: nginx
Feature-Policy: microphone 'none'; geolocation 'none'
Referrer-Policy: strict-origin-when-cross-origin
Strict-Transport-Security: max-age=31536000; includeSubdomains
X-Bytefaas-Execution-Duration: 110.96
X-Bytefaas-Request-Id: 20260419100448349A8FFAD9FC4B52749F
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Gw-Dst-Psm: serverless.tiktok.desktop
X-Powered-By: Goofy Node
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 20260419100448349A8FFAD9FC4B52749F
X-XSS-Protection: 1; mode=block
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
Server-Timing: inner; dur=113,cdn-cache; desc=MISS, edge; dur=1, origin; dur=224
x-tt-trace-host: 01027e1989e9fee1605b7ec913d575b84c688c708de11caa612aa76d1c61538fabd59830aad1dcbb7c57250ad586115a8508abba72f62635ca757274aa2c1f218074767701e1641a7c011f1c94646fa4db8a5ee9713b5924893d49a2d709e8880641f59aac451578a762e7ba6829b25baacaa8af8db1923dae8c023866b7b9ca21649ac7036f668424f5ce3a707e1ae95a
x-tt-trace-id: 00-260419100448349A8FFAD9FC4B52749F-19688DB00D774243-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:48 GMT
Transfer-Encoding: chunked
X-Cache: TCP_MISS from a2-22-52-102.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive,Transfer-Encoding
Set-Cookie: ttwid=1%7CEX0HjJtaXAcP02WUHEEc7i6R5RiqpBlBzCWNQxfBXck%7C1776593088%7Cf238b85950fc2583db63ea3ea9bd1a68764e14132171f4fdf42b91a0164a1776; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:48 GMT; HttpOnly; Secure,tt_csrf_token=oHfte4QU-M4705aKOU0JpXNQ92v00vpUyoWI; path=/; domain=.tiktok.com; samesite=lax; secure; httponly,tt_chain_token=QFhU0oeKaMCBER0vE+Fghw==; path=/; expires=Fri, 16 Oct 2026 10:04:48 GMT; domain=.tiktok.com; secure; httponly
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
X-Origin-Response-Time: 224,2.22.52.102
X-Akamai-Request-ID: 87f6fc0e
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:04:48 GMT
Content-Length: 83149

• http://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
23.200.24.72
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.827
D
Visible Content:
Server: AkamaiGHost
Location: http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:53 GMT
X-Cache: TCP_MISS from a23-199-65-72.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 2b92ccdf
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:53 GMT

• http://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
23.200.24.99
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.547
D
Visible Content:
Server: AkamaiGHost
Location: http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:53 GMT
X-Cache: TCP_MISS from a23-199-65-99.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 2bc20660
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:53 GMT

• http://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
23.200.24.122
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.540
D
Visible Content:
Server: AkamaiGHost
Location: http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:52 GMT
X-Cache: TCP_MISS from a23-199-65-122.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 233ed5cc
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:52 GMT

• http://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.17
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.610
D
Visible Content:
Server: AkamaiGHost
Location: http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:54 GMT
X-Cache: TCP_MISS from a2-23-230-17.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 9722484
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:54 GMT

• http://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.31
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.590
D
Visible Content:
Server: AkamaiGHost
Location: http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:54 GMT
X-Cache: TCP_MISS from a2-23-230-31.deploy.akamaitechnologies.com (AkamaiGHost/22.4.5.1-9ac4f7794220c9cdbe74f55d0b8e8d0f) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
Server-Timing: cdn-cache; desc=MISS, edge; dur=1, origin; dur=0
X-Akamai-Request-ID: a11645b
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:54 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.71
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.016
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-103.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=1, origin; dur=0
X-Akamai-Request-ID: 7d29142f
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.73
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.014
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-105.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 7244e94f
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.74
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.013
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-106.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 71141a54
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.75
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.013
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-107.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=1, origin; dur=0
X-Akamai-Request-ID: b1529154
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.81
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.013
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-113.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 583ff15d
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.86
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.013
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-118.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=1, origin; dur=0
X-Akamai-Request-ID: 6f2fed0f
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.88
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.013
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-120.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 51090d84
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.89
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.014
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-121.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 6688e8e4
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
95.100.248.93
301
https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

0.014
A
Visible Content:
Server: AkamaiGHost
Location: https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:04:55 GMT
X-Cache: TCP_MISS from a2-22-52-125.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=hit;type=dyn
Server-Timing: cdn-cache; desc=HIT, edge; dur=0, origin; dur=0
X-Akamai-Request-ID: 95cdf219
Content-Length: 0
Expires: Sun, 19 Apr 2026 10:04:55 GMT

• https://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

Inline-JavaScript (∑/total): 0/0 Inline-CSS (∑/total): 0/0
302
https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Html is minified: 111.48 %
Other inline scripts (∑/total): 0/0
2.184
A
Visible Content:
Server: nginx
Location: https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Proxy-Status: 0000201404033102
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
Server-Timing: inner; dur=14,cdn-cache; desc=MISS, edge; dur=0, origin; dur=128
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e7871f658f2a64072565ba71c081eb0b4377a03bc095878e38ff21afaa0cbc78f5750bf4ef3d33d0724706d56d3e60dd08cf0717947e78445495e57f83f33bd473ee97b3b1317e0bd425ff4125f6cf052ccd38ce18525ce83a68e4d15cb3da73de978afe4da3c3ba224684ee0340d4b484
x-tt-trace-id: 00-260419100530140FD5A9FC43F350826C-6BE25B8643A1C249-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
X-TT-LOGID: 20260419100530140FD5A9FC43F350826C
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Strict-Transport-Security: max-age=31536000; includeSubDomains
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:05:30 GMT
X-Cache: TCP_MISS from a2-22-52-107.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
X-Origin-Response-Time: 128,2.22.52.107
X-Akamai-Request-ID: b15bb6de
Content-Type: text/html
Content-Length: 136
Expires: Sun, 19 Apr 2026 10:05:30 GMT

• https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
br used - 4638 / 32207 - 85.60 %
Inline-JavaScript (∑/total): 1/190 Inline-CSS (∑/total): 7/24724
200

Html is minified: 453.81 %
Other inline scripts (∑/total): 1/593
2.026

Visible Content:
Server: nginx
Server-Timing: inner; dur=11,bd-gf-microfe;dur=0.005504,bd-gf-file-total;dur=0.29764,bd-gf-total;dur=1.674656,bd-hdd-sched;dur=0.003,bd-hdd-exec;dur=4.167,cdn-cache; desc=MISS, edge; dur=0, origin; dur=79
X-Bytefaas-Gateway-Duration: 5.20
X-Bytefaas-Request-Id: 186bfe81-c49e-439d-98fd-7cf3d6658cf8
X-Content-Type-Options: nosniff
X-Dns-Prefetch-Control: off
X-Ggw-Config-Version: 675489
X-Powered-By: Goofy Deploy
X-Pumbaa-Web-Avail: 1
X-Tt-Logid: 20260419100533E4A7226162236E4FB957
X-XSS-Protection: 0
To-Env:
X-Janus-Info: qsEMWGCARrHNx4VLnRopurHKoF9Pu_MckcQArN70HoS2O3tvUF19IE7Wp62PJtArLgrd_bzdwvwObMiAlM6v24iSGuY1uhFZKxfvXUHUxcLg3CcN8xcRlw-iZ1AQ9Vr_YvKRoNUdNw9FL6OzZDALW_lXhHjeYrohzO0ZXMhuLDjyLYydh6UNsGwASaKUvjIM-CmLwDGlkKLzydtSseda80KYUpiVqmsvKlGZVzHJDIToC4cTsumiE7ojQUuZGdhSQIzr1WkpFzQSf_cK2d_X45oeywr0NtQ=
Access-Control-Expose-Headers: x-tt-traceflag,x-tt-logid
x-tt-trace-host: 015cdcce44ef6c734cc05892710b3c32e7871f658f2a64072565ba71c081eb0b43e32789f05d6b1ac311005e10f6b29d5afd959f401c1ca84bd60e3d367ca88f32d7460d28fdf198c33317327565e50c560acb173b4ad7a54bb14ac478cf280b6408c29b6a89df199e4a508e2d0fdf8b7f63473c3f5e5f528cacc1ba47acbcfbdf
x-tt-trace-id: 00-260419100533E4A7226162236E4FB957-7DBDF9512227D34A-00
reporting-endpoints: csp-endpoint="https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab"
Content-Security-Policy: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
Cache-Control: no-store, no-cache, max-age=0
Pragma: no-cache
Date: Sun, 19 Apr 2026 10:05:33 GMT
X-Cache: TCP_MISS from a2-22-52-107.deploy.akamaitechnologies.com (AkamaiGHost/22.5.0-aaef44c942a33f2d231f7120051a5b09) (-)
Connection: keep-alive
x-tt-trace-tag: id=16;cdn-cache=miss;type=dyn
X-Origin-Response-Time: 79,2.22.52.107
X-Akamai-Request-ID: b15bbad4
Content-Type: text/html; charset=utf-8
Content-Encoding: br
Expires: Sun, 19 Apr 2026 10:05:33 GMT
Content-Length: 4638

• https://23.200.24.72/ja-JP/
23.200.24.72
-103


0.030
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

• https://23.200.24.99/ja-JP/
23.200.24.99
-103


0.026
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

• https://23.200.24.122/ja-JP/
23.200.24.122
-103


0.024
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

• https://95.100.248.17/ja-JP/
95.100.248.17
-103


0.020
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

• https://95.100.248.31/ja-JP/
95.100.248.31
-103


0.023
P
SecureConnectionError (3, 0x80131501). The SSL connection could not be established, see inner exception. Authentication failed because the remote party sent a TLS alert: 'InternalError' (FF: SSL_ERROR_INTERNAL_ERROR_ALERT)

• https://95.100.248.71/ja-JP/
95.100.248.71
400

Html is minified: 101.42 %
3.093
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:04:56 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:04:56 GMT

• https://95.100.248.73/ja-JP/
95.100.248.73
400

Html is minified: 101.42 %
2.850
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:00 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:00 GMT

• https://95.100.248.74/ja-JP/
95.100.248.74
400

Html is minified: 101.42 %
2.897
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:04 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:04 GMT

• https://95.100.248.75/ja-JP/
95.100.248.75
400

Html is minified: 101.42 %
2.854
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:07 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:07 GMT

• https://95.100.248.81/ja-JP/
95.100.248.81
400

Html is minified: 101.42 %
2.870
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:11 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:11 GMT

• https://95.100.248.86/ja-JP/
95.100.248.86
400

Html is minified: 101.42 %
2.873
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:15 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:15 GMT

• https://95.100.248.88/ja-JP/
95.100.248.88
400

Html is minified: 101.42 %
2.880
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:19 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:19 GMT

• https://95.100.248.89/ja-JP/
95.100.248.89
400

Html is minified: 101.42 %
2.863
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:23 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:23 GMT

• https://95.100.248.93/ja-JP/
95.100.248.93
400

Html is minified: 101.42 %
2.880
N
Bad Request
Certificate error: RemoteCertificateNameMismatch
Server: AkamaiGHost
Mime-Version: 1.0
Date: Sun, 19 Apr 2026 10:05:26 GMT
Connection: close
Content-Type: text/html
Content-Length: 357
Expires: Sun, 19 Apr 2026 10:05:26 GMT

 

7. Comments


1. General Results, most used to calculate the result

Aname "tiktok.com" is domain, public suffix is ".com", top-level-domain is ".com", top-level-domain-type is "generic", tld-manager is "VeriSign Global Registry Services", num .com-domains preloaded: 108094 (complete: 276475)
AGood: All ip addresses are public addresses
AGood: Minimal 2 ip addresses per domain name found: tiktok.com has 3 different ip addresses (authoritative).
Warning: No ipv6 address found. Ipv6 is the future with a lot of new features. So every domain name should have an ipv6 address. See https://en.wikipedia.org/wiki/IPv6: tiktok.com has no ipv6 address.
AGood: No asked Authoritative Name Server had a timeout
Ahttps://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
302
https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Correct redirect https to https
AGood: destination is https
AGood - only one version with Http-Status 200
AGood: one preferred version: www is preferred
AGood: No cookie sent via http.
AGood: every cookie sent via https is marked as secure
AExcellent: Domain is in the Google-Preload-List
AExcellent: Domain is in the Mozilla/Firefox-Preload-List
HSTS-Preload-Status: Removed. Check https://hstspreload.org/ to learn some basics about the Google-Preload-List.
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.71
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.73
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.74
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.75
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.81
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.86
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.88
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.89
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Ahttp://www.tiktok.com/ja-JP/ 95.100.248.93
301
https://www.tiktok.com/ja-JP/
Correct redirect http - https with the same domain name
Bhttps://tiktok.com/ja-JP/ 23.200.24.72
301

Missing HSTS-Header
Bhttps://tiktok.com/ja-JP/ 23.200.24.99
301

Missing HSTS-Header
Bhttps://tiktok.com/ja-JP/ 23.200.24.122
301

Missing HSTS-Header
Bhttps://tiktok.com/ja-JP/ 95.100.248.17
301

Missing HSTS-Header
Bhttps://tiktok.com/ja-JP/ 95.100.248.31
301

Missing HSTS-Header
Bhttps://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Missing HSTS-Header
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.71
200
ttwid=1%7CxwW2UvaczF0h9wJYpfApmUrvyo2NTHf6-u7hYxz1bho%7C1776593059%7C2b81370efbd2c36b7d4aaeb066bd2581e7adbfc58974a10abf60b1f814a44632; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:19 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.71
200
tt_chain_token=LaDro0YaJvNAJCXluHt1ng==; path=/; expires=Fri, 16 Oct 2026 10:04:19 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.73
200
ttwid=1%7CNh_rstMBdtz3vx770tzfH04uoB3qbw1njOpfN0X7rGo%7C1776593063%7Cfa2bd1f832ee8a28a94dd4dfd52350a66789bace2786a959c86ab08ee0820c5b; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:23 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.73
200
tt_chain_token=9iIwP7p1Dg7vZv9x1rC0ng==; path=/; expires=Fri, 16 Oct 2026 10:04:23 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.74
200
ttwid=1%7Ct8l4KqL_woVWByMaJ2XwOQFJzAmBvjiaArKKk3UDNFc%7C1776593066%7Cb0af991b879de7d789bec2bdfb929136c28934f6791c8a4bca60cb0ef801d6e4; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:26 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.74
200
tt_chain_token=9n/a2sk90KNPOzZzCf+Nlg==; path=/; expires=Fri, 16 Oct 2026 10:04:26 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.75
200
ttwid=1%7CfHspFT-rp0337fNgIvlxmAeetDCYLUowUkBnJD_Yyzo%7C1776593070%7C8aa67e65fc02c053f743980598cdbdf0121ec052e91483755890f128cbfc711f; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:30 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.75
200
tt_chain_token=on9d8/YBf11tFQ4AvhYXTA==; path=/; expires=Fri, 16 Oct 2026 10:04:30 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.81
200
ttwid=1%7Cg5PCmSXlhlx1ct3fssnFgeKsdUjQ0yF9n4kLJRe_i24%7C1776593073%7Cbae84bc4f7389d09a3485e0ec9206af79831a074d3cc0e2b77c347f86942d7d9; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:33 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.81
200
tt_chain_token=zISFH3VZ1EluD/KNqqCVkw==; path=/; expires=Fri, 16 Oct 2026 10:04:33 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.86
200
ttwid=1%7C7huZcZYIqkJpOHwPkr-xiX2yDAGv2ARFyOCvQYhazSc%7C1776593077%7Ca6c4684bdd633442c30fb8d565c720d6c49c076858f5f835f6e8375481987570; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:37 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.86
200
tt_chain_token=E0vr+wPVMiHTtExBBAD6WQ==; path=/; expires=Fri, 16 Oct 2026 10:04:37 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.88
200
ttwid=1%7CTSGroZONk4MHYFMwBvV_fR6TfYT-he-U5SjyATwfmtU%7C1776593081%7C83f8a3f2c266aeabc8e8057457e762dd3adf98b1a55faafe4f7f046fcc9778af; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:41 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.88
200
tt_chain_token=iu/tQiWww0E/w3NgAQ+H/w==; path=/; expires=Fri, 16 Oct 2026 10:04:41 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.89
200
ttwid=1%7COWJ0NRHwu3kpeTMwu3N9bTatNhcasMUJH--59PPSy9I%7C1776593084%7C08127fe62cecf0bd91fe2bc32f35d358be54347e63ab14bef33c8076cca9433c; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:44 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.89
200
tt_chain_token=9Qh1ayxwoQ21axWWP4jfpg==; path=/; expires=Fri, 16 Oct 2026 10:04:44 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.93
200
ttwid=1%7CEX0HjJtaXAcP02WUHEEc7i6R5RiqpBlBzCWNQxfBXck%7C1776593088%7Cf238b85950fc2583db63ea3ea9bd1a68764e14132171f4fdf42b91a0164a1776; Domain=.tiktok.com; Path=/; Expires=Wed, 14 Apr 2027 10:04:48 GMT; HttpOnly; Secure
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Bhttps://www.tiktok.com/ja-JP/ 95.100.248.93
200
tt_chain_token=QFhU0oeKaMCBER0vE+Fghw==; path=/; expires=Fri, 16 Oct 2026 10:04:48 GMT; domain=.tiktok.com; secure; httponly
Cookie without a SameSite-Attribute. Possible values are: Strict/Lax/None. Cookie may not work as expected, if "None" is wanted, but browsers use "Lax" as default value.
Dhttp://tiktok.com/ja-JP/ 23.200.24.72
301
http://www.tiktok.com/ja-JP/
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/ja-JP/ 23.200.24.99
301
http://www.tiktok.com/ja-JP/
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/ja-JP/ 23.200.24.122
301
http://www.tiktok.com/ja-JP/
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/ja-JP/ 95.100.248.17
301
http://www.tiktok.com/ja-JP/
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/ja-JP/ 95.100.248.31
301
http://www.tiktok.com/ja-JP/
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.200.24.72
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.200.24.99
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 23.200.24.122
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 95.100.248.17
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Dhttp://tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 95.100.248.31
301
http://www.tiktok.com/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
Wrong redirect one domain http to other domain http. First redirect to https without changing the domain, so no new dns query is required. So the server can send the HSTS header. That's fundamental using HSTS (Http Strict Transport Security). First step: Add correct redirects http ⇒ https. Perhaps in your port 80 vHost something like "RewriteEngine on" + "RewriteRule ^ https://%{SERVER_NAME}%{REQUEST_URI} [END,QSA,R=permanent]" (two rows, without the "). Don't add this in your port 443 vHost, that would create a loop. Then recheck your domain, should be Grade C. There is the rule to select one https version as preferred version.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.71
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.73
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.74
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.75
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.81
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.86
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.88
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.89
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Ihttps://www.tiktok.com/ja-JP/ 95.100.248.93
200

Content problems or problems with resources included - http links, files doesn't exist, different Content-Type definitions. Check the Html-Content - Part.
Mhttps://95.100.248.71/ja-JP/ 95.100.248.71
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.73/ja-JP/ 95.100.248.73
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.74/ja-JP/ 95.100.248.74
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.75/ja-JP/ 95.100.248.75
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.81/ja-JP/ 95.100.248.81
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.86/ja-JP/ 95.100.248.86
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.88/ja-JP/ 95.100.248.88
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.89/ja-JP/ 95.100.248.89
400

Misconfiguration - main pages should never send http status 400 - 499
Mhttps://95.100.248.93/ja-JP/ 95.100.248.93
400

Misconfiguration - main pages should never send http status 400 - 499
Nhttps://95.100.248.71/ja-JP/ 95.100.248.71
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.73/ja-JP/ 95.100.248.73
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.74/ja-JP/ 95.100.248.74
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.75/ja-JP/ 95.100.248.75
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.81/ja-JP/ 95.100.248.81
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.86/ja-JP/ 95.100.248.86
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.88/ja-JP/ 95.100.248.88
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.89/ja-JP/ 95.100.248.89
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Nhttps://95.100.248.93/ja-JP/ 95.100.248.93
400

Error - Certificate isn't trusted, RemoteCertificateNameMismatch
Otiktok.com / 23.200.24.72 / 443


Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 6 Cipher Suites without Forward Secrecy found
Otiktok.com / 23.200.24.99 / 443


Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 6 Cipher Suites without Forward Secrecy found
Otiktok.com / 23.200.24.122 / 443


Old connection: Cipher Suites without Forward Secrecy (FS) found. Remove all of these Cipher Suites, use only Cipher Suites with Forward Secrecy: Starting with ECDHE- or DHE - the last "E" says: "ephemeral". Or use Tls.1.3, then all Cipher Suites use FS. 6 Cipher Suites without Forward Secrecy found
AGood: More then one ip address per domain name found, checking all ip addresses the same http status and the same certificate found: Domain tiktok.com, 3 ip addresses.
Info: Checking the ip addresses of that domain name not exact one certificate found. So it's impossible to check if that domain requires Server Name Indication (SNI).: Domain tiktok.com, 3 ip addresses.
BNo _mta-sts TXT record found (mta-sts: Mail Transfer Agent Strict Transport Security - see RFC 8461). Read the result of server-daten.de (Url-Checks, Comments, Connections and DomainServiceRecords) to see a complete definition. Domainname: _mta-sts.tiktok.com

2. Header-Checks

Awww.tiktok.com 95.100.248.71
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.73
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.74
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.75
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.81
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.86
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.88
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.89
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Awww.tiktok.com 95.100.248.93
Content-Security-Policy
Ok: Header without syntax errors found: report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab; report-to csp-endpoint; upgrade-insecure-requests; default-src 'self' 'unsafe-eval' 'unsafe-inline' blob: bytedance: data: wss://*.tiktok.com wss://*.tiktokv.com wss://*.tiktokv.eu wss://tiktok.com wss://tiktokv.com *.adsco.re *.adsintegrity.net *.akamaized.net *.amazonaws.com *.arkoselabs.com *.billetlugen.dk *.bing.com *.bitssec.com *.bytedapm.com *.bytedgame.com *.bytehwm-row.com *.byteicdn.com *.byteintl.com *.byteintl.net *.byteintlapi.com *.byteintlstatic.com *.bytelemon.com *.byteoversea.com *.byteoversea.net *.bytevcloudapi.com *.capcut.com *.cloudflare.com *.ctfassets.net *.doubleclick.net *.entradas.com *.evbuc.com *.eventim.de *.facebook.com *.facebook.net *.fbsbx.com *.fcdnstatic-intl.com *.fdmstatic.com *.g-p-static.com *.gauthmath.com *.giphy.com *.goofy-cdn.com *.goofy.app *.google.com *.googleapis.com *.googletagmanager.com *.gstatic.com *.hsforms.com *.hsforms.net *.ibytedtos.com *.ibyteimg.com *.isnssdk.com *.jumio.ai *.kakao.com *.lemon8-app.com *.lemon8cdn.com *.licdn.com *.linkedin.com *.midtrans.com *.muscdn.com *.musical.ly *.oecstatic.com *.omise.co *.pangle-ads.com *.paypal.com *.pipopay.com *.pipopay.eu *.pipopayment.com *.pipopayment.eu *.pipopayment.us *.redditstatic.com *.resso.me *.sgsnssdk.com *.soundon.global *.tableau.com *.tenor.com *.tiktok-row.net *.tiktok.com *.tiktok.ru *.tiktok.vn *.tiktokapis.com *.tiktokcdn-eu.com *.tiktokcdn-in.com *.tiktokcdn-us.com *.tiktokcdn.com *.tiktokcreativeone.com *.tiktokeu-cdn.com *.tiktokforbusinessoutbound.com *.tiktokglobalshop.com *.tiktokmusic.me *.tiktokshop.com *.tiktokshops.eu *.tiktokstaticb.com *.tiktokus.info *.tiktokv.com *.tiktokv.eu *.tiktokv.us *.tiktokvapp.eu *.tiktokw.eu *.tiktokw.us *.topbuzzcdn.com *.ttlivecdn.com *.ttlstatic.com *.ttwstatic.com *.vimeo.com *.vodupload.com *.yahoo.co.jp *.yhgfb-static.com *.youtube-nocookie.com *.zhiliaoapp.com accounts.google.com api.music.apple.com code.jquery.com facebook.com google.com i.ticketweb.com images.universe.com interactives.ap.org media.ticketmaster.eu newassets.hcaptcha.com play.itunes.apple.com res.cloudinary.com s1.ticketm.net static-label.frontgatetickets.com static.captchami.com t.co tikitoks.com tiktok.captchami.com tiktok.com tiktok.ua tiktok.vn tiktokfollowersfree.com tiktokv.com tx41v.arkoselabs.com unpkg.com v16-webapp-prime.tiktok.com vimeo.com web-app.goidentitas.id webcast.tiktok.com sf-website-login-bak.tiktokcdn-eu.com; script-src 'inline-speculation-rules' 'report-sample' 'unsafe-eval' 'wasm-unsafe-eval' accounts.google.com apis.google.com c.paypal.com cdn.ampproject.org cdnjs.cloudflare.com client-api.arkoselabs.com code.jquery.com connect.facebook.net developers.kakao.com googleads.g.doubleclick.net interactives.ap.org js-cdn.music.apple.com/musickit/v3/musickit.js js.hcaptcha.com js.hsforms.net lf16-cdn-tos.tiktokcdn-us.com/obj/static-tx/bric-captcha/core-captcha/ pay.google.com recaptcha.google.com s20.tiktokcdn.com s3.amazonaws.com sf16-website-login.neutral.tiktokcdn-eu.com sf16-website-login.neutral.ttwstatic.com sf16-website.neutral.tiktokcdn-eu.com sf16-website.neutral.ttwstatic.com sf16m-website-login.neutral.ttwstatic.com ssl.bing.com static.captchami.com tiktok.captchami.com tx41v.arkoselabs.com unpkg.com vimeo.com www.google.com www.googleadservices.com www.googleapis.com www.googletagmanager.com www.gstatic.com www.vimeo.com sf-website-login-bak.tiktokcdn-eu.com appleid.cdn-apple.com; worker-src www.tiktok.com/business/sw.js www.tiktok.com/coin/sw.js www.tiktok.com/creator/worker/ www.tiktok.com/embed/sw.js www.tiktok.com/firebase-messaging-sw.js www.tiktok.com/help/sw.js www.tiktok.com/legal/report/verification/uploader-oversea-crc32.js www.tiktok.com/live/creator-networks/pdf.worker.min.js www.tiktok.com/live/static/player-worker/ www.tiktok.com/risk-appeal-ocr/BlinkCardWasmSDK.worker.min.js www.tiktok.com/series/worker/ www.tiktok.com/sw.js www.tiktok.com/tiktokstudio/static/worker/ www.tiktok.com/tiktokstudio/sw.js www.tiktok.com/web-static-js/ www.tiktok.com/webapp-desktop/static/worker/
B

Info: Header-Element is deprecated. report-uri https://mon-i18n.tiktokv.com/monitor_browser/collect/batch/security/?bid=tiktok_pns&ev_type=csp&p=puNDx15QTnuGFi8i4dC8S&v=10&s=350&b=oab
F

Bad: default-src with "*" or a scheme found. That allows too much, don't use such a definition.
F

Bad: default-src with 'unsafe-inline' or 'unsave-eval'. That's dangerous, don't use it.
E

Bad: No form-action directive found. Use one to limit the form - action - destinations. form-action is a navigation-directive, so default-src isn't used.
E

Bad: No frame-ancestors directive found. Use one to limit the pages allowed to use this page in frame / iframe / object / embed / applet. frame-ancestors is a navigation-directive, so default-src isn't used.
E

Bad: No base-uri directive found. Use one to limit the URLs which can be used in a document's <base> element. Because it's a document directive, default-src isn't used, so an own directive is required.
E

Critical: No object-src defined, the default-src used as fallback allows too much. object / embed / applet shouldn't be able to load these resources.
F

Critical: script-src with 'unsafe-inline' or 'unsafe-eval' and without a nonce found. That's dangerous, don't use it. If you really need one of these unsafe directives, add a nonce.
A

Good: script-src without * and a scheme found.
A

Good: script-src without data: schema found. Why is this important? The data: schema allows hidden code injection. Insert <script src='data:application/javascript;base64,YWxlcnQoJ1hTUycpOw=='></script> in your page and see what happens.
F

Dangerous: No frame-src defined, but the default-src used as fallback allows the data: schema. That allows hidden code injection. Insert <iframe src="data:text/html;charset=utf-8;base64,PCFET0NUWVBFIGh0bWw+PGh0bWw+PGJvZHk+PHA+YmVmb3JlPHNjcmlwdCB0eXBlPSJ0ZXh0L2phdmFzY3JpcHQiPmFsZXJ0KCdYU1MnKTwvc2NyaXB0PjxwPmFmdGVyPC9ib2R5PjwvaHRtbD4="></iframe> in your page and see what happens.
C

Info: default-src and some other fetch directives have the same list of values. Remove the other fetch directive, default-src is used as fallback. Directives to remove: csp-endpoint
A
X-Content-Type-Options
Ok: Header without syntax errors found: nosniff
A
Referrer-Policy
Ok: Header without syntax errors found: strict-origin-when-cross-origin
A
X-Frame-Options
Ok: Header without syntax errors found: SAMEORIGIN
B

Info: Header is deprecated. May not longer work in modern browsers. SAMEORIGIN. Better solution: Use a Content-Security-Policy Header with a frame-ancestors directive. DENY - use 'none', SAMEORIGIN - use 'self'. If you want to allow some domains to frame your page, add these urls.
A
Feature-Policy
Ok: Header without syntax errors found: microphone 'none'; geolocation 'none'
B

Info: Header is deprecated. May not longer work in modern browsers. microphone 'none'; geolocation 'none'
A
X-Xss-Protection
Ok: Header without syntax errors found: 1; mode=block
B

Info: Header is deprecated. May not longer work in modern browsers. 1; mode=block
Fwww.tiktok.com 95.100.248.71
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.71
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.71
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.71
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.73
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.73
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.73
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.73
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.74
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.74
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.74
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.74
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.75
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.75
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.75
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.75
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.81
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.81
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.81
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.81
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.86
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.86
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.86
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.86
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.88
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.88
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.88
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.88
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.89
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.89
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.89
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.89
Cross-Origin-Resource-Policy
Info: Missing Header
Fwww.tiktok.com 95.100.248.93
Permissions-Policy
Critical: Missing Header:
Bwww.tiktok.com 95.100.248.93
Cross-Origin-Embedder-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.93
Cross-Origin-Opener-Policy
Info: Missing Header
Bwww.tiktok.com 95.100.248.93
Cross-Origin-Resource-Policy
Info: Missing Header

3. DNS- and NameServer - Checks

AInfo:: 19 Root-climbing DNS Queries required to find all IPv4- and IPv6-Addresses of 6 Name Servers.
AInfo:: 19 Queries complete, 19 with IPv6, 0 with IPv4.
AGood: All DNS Queries done via IPv6.
Ok (4 - 8):: An average of 3.2 queries per domain name server required to find all ip addresses of all name servers.
AInfo:: 6 different Name Servers found: a12-66.akam.net, a13-67.akam.net, a18-64.akam.net, a1-97.akam.net, a6-65.akam.net, a9-66.akam.net, 6 Name Servers included in Delegation: a1-97.akam.net, a12-66.akam.net, a13-67.akam.net, a18-64.akam.net, a6-65.akam.net, a9-66.akam.net, 6 Name Servers included in 1 Zone definitions: a1-97.akam.net, a12-66.akam.net, a13-67.akam.net, a18-64.akam.net, a6-65.akam.net, a9-66.akam.net, 1 Name Servers listed in SOA.Primary: a9-66.akam.net.
AGood: Only one SOA.Primary Name Server found.: a9-66.akam.net.
AGood: SOA.Primary Name Server included in the delegation set.: a9-66.akam.net.
AGood: Consistency between delegation and zone. The set of NS records served by the authoritative name servers must match those proposed for the delegation in the parent zone. Ordered list of name servers: a1-97.akam.net, a12-66.akam.net, a13-67.akam.net, a18-64.akam.net, a6-65.akam.net, a9-66.akam.net
AGood: All Name Server Domain Names have a Public Suffix.
AGood: All Name Server Domain Names ending with a Public Suffix have minimal one IPv4- or IPv6 address.
AGood: All Name Server ip addresses are public.
AGood: Minimal 2 different name servers (public suffix and public ip address) found: 6 different Name Servers found
AGood: All name servers have ipv4- and ipv6-addresses.: 6 different Name Servers found
Warning: All Name Servers have the same Top Level Domain / Public Suffix. If there is a problem with that Top Level Domain, your domain may be affected. Better: Use Name Servers with different top level domains.: 6 Name Servers, 1 Top Level Domain: net
Warning: All Name Servers have the same domain name. If there is a problem with that domain name (or with the name servers of that domain name), your domain may be affected. Better: Use Name Servers with different domain names / different top level domains.: Only one domain name used: akam.net
AGood: Name servers with different Country locations found: 6 Name Servers, 5 Countries: CA, DE, ES, FR, US
AInfo: Ipv4-Subnet-list: 6 Name Servers, 5 different subnets (first Byte): 184., 193., 2., 23., 95., 6 different subnets (first two Bytes): 184.26., 184.85., 193.108., 2.22., 23.211., 95.101., 6 different subnets (first three Bytes): 184.26.160., 184.85.248., 193.108.91., 2.22.230., 23.211.133., 95.101.36.
AGood: Name Server IPv4-addresses from different subnet found:
AInfo: IPv6-Subnet-list: 6 Name Servers with IPv6, 2 different subnets (first block): 2600:, 2a02:, 3 different subnets (first two blocks): 2600:1401:, 2600:1480:, 2a02:26f0:, 6 different subnets (first three blocks): 2600:1401:0001:, 2600:1401:0002:, 2600:1480:0800:, 2600:1480:4800:, 2600:1480:f000:, 2a02:26f0:0117:, 6 different subnets (first four blocks): 2600:1401:0001:0000:, 2600:1401:0002:0000:, 2600:1480:0800:0000:, 2600:1480:4800:0000:, 2600:1480:f000:0000:, 2a02:26f0:0117:0000:
AGood: Name Server IPv6 addresses from different subnets found.
AGood: Nameserver supports TCP connections: 12 good Nameserver
AGood: Nameserver supports Echo Capitalization: 12 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 12 good Nameserver
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate. Read https://en.wikipedia.org/wiki/DNS_Certification_Authority_Authorization to learn some basics about the idea of CAA. Your name server must support such an entry. Not all dns providers support CAA entries.

4. Content- and Performance-critical Checks

https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Not existing ACME-file, but Server sends 200, not 404 or redirect. May be a problem creating a Letsencrypt certificate. Checking /.well-known/acme-challenge/random-filename - a http status 404 - Not Found - is expected. If your server sends content and a http status 200, the validation file (87 bytes, token, dot and the hash of the public part of the account key) may be invisible, so Letsencrypt can't validate your domain. If it is an application that sends this content, perhaps create an exception, so /.well-known/acme-challenge sends raw files. Or create a redirect to another domain and / or port 443, but your Letsencrypt client must support such a solution. Certbot: Use webroot as authenticator - https://certbot.eff.org/docs/using.html Trouble creating a certificate? Use https://community.letsencrypt.org/ to ask.
AGood: Every https result with status 200 and greater 1024 Bytes is compressed (gzip, deflate, br checked).
https://www.tiktok.com/ja-JP/ 95.100.248.71
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.73
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.74
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.75
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.81
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.86
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.88
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.89
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.93
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Https + http status 200 + Inline CSS / JavaScript found. Don't use inline CSS / JavaScript. These are compiled and re-used ressources, save these with a long Cache-Control max-age - header.
https://www.tiktok.com/ja-JP/ 95.100.248.71
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.73
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.74
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.75
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.81
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.86
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.88
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.89
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/ja-JP/ 95.100.248.93
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
200

Warning: Https result with status 200 found, Html-Content is too big. Should be max. 110 %. May contain inline CSS / JavaScript, too much comments or white space. Re-used ressources - create files with a long Cache-Control max-age header. Remove comments and white space.
AGood: Every https connection via port 443 supports the http/2 protocol via ALPN.
AGood: Some script Elements (type text/javascript) with a src-Attribute have a defer / async - Attribute. So loading and executing these JavaScripts doesn't block parsing and rendering the Html-Output.
https://www.tiktok.com/ja-JP/ 95.100.248.71
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.73
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.74
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.75
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.81
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.86
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.88
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.89
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
https://www.tiktok.com/ja-JP/ 95.100.248.93
200

Critical: Some script Elements (type text/javascript) with a src-Attribute don't have a defer / async - Attribute. Loading and executing these JavaScripts blocks parsing and rendering the Html-Output. That's bad if your site is large or the connection is slow / mobile usage. Use "async" if the js file has only functions (so nothing is executed after parsing the file) or is independend. Use "defer" if the order of the scripts is important. All "defer" scripts are executed before the DOMContentLoaded event is fired. Check https://developer.mozilla.org/en-US/docs/Web/HTML/Element/script to see some details.: 1 script elements without defer/async.
AGood: All CSS / JavaScript files are sent compressed (gzip, deflate, br checked). That reduces the content of the files. 730 external CSS / JavaScript files found
AGood: All CSS / JavaScript files are sent with a long Cache-Control header (minimum 7 days). So the browser can re-use these files, no download is required. 387 external CSS / JavaScript files with long Cache-Control max-age found
AGood: All checked attribute values are enclosed in quotation marks (" or ').
AInfo: No img element found, no alt attribute checked
AGood: Domainname is not on the "Specially Designated Nationals And Blocked Persons List" (SDN). That's an US-list of individuals and companies owned or controlled by, or acting for or on behalf of, targeted countries. It also lists individuals, groups, and entities, such as terrorists and narcotics traffickers designated under programs that are not country-specific. Collectively, such individuals and companies are called "Specially Designated Nationals" or "SDNs." Their assets are blocked and U.S. persons are generally prohibited from dealing with them. So if a domain name is on that list, it's impossible to create a Letsencrypt certificate with that domain name. Check the list manual - https://www.treasury.gov/resource-center/sanctions/sdn-list/pages/default.aspx
AInfo: Different Server-Headers found
ADuration: 520106 milliseconds, 520.106 seconds

 

8. Connections

DomainIPPortCert.ProtocolKeyExchangeStrengthCipherStrengthHashAlgorithmOCSP stapling
Domain/KeyExchangeIP/StrengthPort/CipherCert./StrengthProtocol/HashAlgorithmOCSP stapling
tiktok.com
23.200.24.72
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
tiktok.com
23.200.24.72
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


tiktok.com
23.200.24.99
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

tiktok.com
23.200.24.99
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


tiktok.com
23.200.24.122
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

tiktok.com
23.200.24.122
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


tiktok.com
95.100.248.17
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

tiktok.com
95.100.248.17
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


tiktok.com
95.100.248.31
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

tiktok.com
95.100.248.31
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.71
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.71
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.73
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.73
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.74
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.74
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.75
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.75
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.81
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.81
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.86
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.86
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.88
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.88
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.89
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.89
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
95.100.248.93
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
95.100.248.93
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
SNI required
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
www.tiktok.com
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
www.tiktok.com
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain - incomplete

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


www.tiktok.com
www.tiktok.com
443
ok
Tls12
ECDH Ephermal
256
Aes256
256
Sha384
supported
ok

www.tiktok.com
www.tiktok.com
443
ok
Tls12

ECDH Ephermal
256
Aes256
256
Sha384
supported
ok
http/2 via ALPN supported 
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
http/2 via ALPN supported
Tls.1.2
no Tls.1.1
no Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=*.www.tiktok.com


2CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US


95.100.248.71
95.100.248.71
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.71
95.100.248.71
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.73
95.100.248.73
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.73
95.100.248.73
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.74
95.100.248.74
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.74
95.100.248.74
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.75
95.100.248.75
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.75
95.100.248.75
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.81
95.100.248.81
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.81
95.100.248.81
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.86
95.100.248.86
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.86
95.100.248.86
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.88
95.100.248.88
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.88
95.100.248.88
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.89
95.100.248.89
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.89
95.100.248.89
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US


95.100.248.93
95.100.248.93
443
name does not match
Tls12
ECDH Ephermal
256
Aes128
128
Sha256
supported
ok

95.100.248.93
95.100.248.93
443
name does not match
Tls12

ECDH Ephermal
256
Aes128
128
Sha256
supported
ok
no http/2 via ALPN 
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
no http/2 via ALPN
Cert sent without SNI
Tls.1.2
Tls.1.1
Tls.1.0
no Ssl3
no Ssl2
Chain (complete)

1CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, C=US, ST=Massachusetts


2CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US

 

9. Certificates

1.
1.
CN=*.tiktok.com
16.06.2025
16.06.2026
84 days expired
*.tiktok.com, tiktok.com - 2 entries
1.
1.
CN=*.tiktok.com
16.06.2025

16.06.2026
84 days expired


*.tiktok.com, tiktok.com - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:027F1F8B1695619E9C87ADF2F7FE7A33
Thumbprint:2FB289BD94E653E1C454EDEF76CD56E7F766DF7A
SHA256 / Certificate:AQm04aMqq36o/+x0vm3H3gLJDGO8xMFQodGw/1eUkkk=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):74cb956b7502828b41f472234848c7912b6d3dc918d80e243d31780c6e16789a
SHA256 hex / Subject Public Key Information (SPKI):74cb956b7502828b41f472234848c7912b6d3dc918d80e243d31780c6e16789a (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://status.rapidssl.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




2.
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017
02.11.2027
expires in 420 days


2.
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017

02.11.2027
expires in 420 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:0DED78965349B368D41F7EE3E1EED1EB
Thumbprint:4C4780EAB1A3627794DC0F285E5947D7D8D86370
SHA256 / Certificate:/BbVMgO9kYfWnMmdLaVRB2tNyymBQNZ1H3oBKWbJn90=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):701b5488efa6c1d80c7cd784a7fa8ab841ecc119f69c7a7614350a562fda4c3c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4147 days


3.
CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4147 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:055556BCF25EA43535C3A40FD5AB4572
Thumbprint:7E04DE896A3E666D00E687D33FFAD93BE83D349E
SHA256 / Certificate:Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b94c198300cec5c057ad0727b70bbe91816992256439a7b32f4598119dda9c97
SHA256 hex / Subject Public Key Information (SPKI):b94c198300cec5c057ad0727b70bbe91816992256439a7b32f4598119dda9c97
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




2.
1.
CN=*.www.tiktok.com
13.10.2025
13.10.2026
expires in 35 days
*.www.tiktok.com, www.tiktok.com - 2 entries
2.
1.
CN=*.www.tiktok.com
13.10.2025

13.10.2026
expires in 35 days


*.www.tiktok.com, www.tiktok.com - 2 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:03DA2BA55EB93F68912948D11F7BD2F5
Thumbprint:810D6AF3560B707E1067F3585A6BB99C9117A0DF
SHA256 / Certificate:86Oh7IYixIWWiLT7BRsRuPagMRrdMBbc3mtE+05yupA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):d3542bff87e6b45854f2decdd669c999da2fc278c37ecf3eb0f0863bdc91c458
SHA256 hex / Subject Public Key Information (SPKI):d3542bff87e6b45854f2decdd669c999da2fc278c37ecf3eb0f0863bdc91c458 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Good: Key isn't compromised
OCSP - Url:http://status.rapidssl.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017
02.11.2027
expires in 420 days


2.
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
02.11.2017

02.11.2027
expires in 420 days




KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA256
Serial Number:0DED78965349B368D41F7EE3E1EED1EB
Thumbprint:4C4780EAB1A3627794DC0F285E5947D7D8D86370
SHA256 / Certificate:/BbVMgO9kYfWnMmdLaVRB2tNyymBQNZ1H3oBKWbJn90=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):701b5488efa6c1d80c7cd784a7fa8ab841ecc119f69c7a7614350a562fda4c3c
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4147 days


3.
CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4147 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:055556BCF25EA43535C3A40FD5AB4572
Thumbprint:7E04DE896A3E666D00E687D33FFAD93BE83D349E
SHA256 / Certificate:Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b94c198300cec5c057ad0727b70bbe91816992256439a7b32f4598119dda9c97
SHA256 hex / Subject Public Key Information (SPKI):b94c198300cec5c057ad0727b70bbe91816992256439a7b32f4598119dda9c97
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




3.
1.
CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, S=Massachusetts, C=US
22.12.2025
23.12.2026
expires in 106 days
a248.e.akamai.net, *.akamaized.net, *.akamaized-staging.net, *.akamaihd.net, *.akamaihd-staging.net - 5 entries
3.
1.
CN=a248.e.akamai.net, O="Akamai Technologies, Inc.", L=Cambridge, S=Massachusetts, C=US
22.12.2025

23.12.2026
expires in 106 days


a248.e.akamai.net, *.akamaized.net, *.akamaized-staging.net, *.akamaihd.net, *.akamaihd-staging.net - 5 entries

KeyalgorithmEC Public Key (256 bit, prime256v1)
Signatur:ECDSA SHA384
Serial Number:0373AB420F54941B555742D9AC890626
Thumbprint:80B29FCE36F71B99CDBB7138B2107D022D478AF9
SHA256 / Certificate:eSznF7ZlyooK7fn3o7povRW3v4HaNU4sfcSGm/nyLmI=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):4a23f058d7ca609b6558cf3fbfb89f540e731d01662857bbb44babb6a80e8fd4
SHA256 hex / Subject Public Key Information (SPKI):4a23f058d7ca609b6558cf3fbfb89f540e731d01662857bbb44babb6a80e8fd4 (is buggy, ignore the result)
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:yes
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1)




2.
CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US
14.04.2021
14.04.2031
expires in 1679 days


2.
CN=DigiCert Global G3 TLS ECC SHA384 2020 CA1, O=DigiCert Inc, C=US
14.04.2021

14.04.2031
expires in 1679 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:0B00E92D4D6D731FCA3059C7CB1E1886
Thumbprint:9577F91FE86C27D9912129730E8166373FC2EEB8
SHA256 / Certificate:BYfWvSgZWHq5D7WWSApXk72fdQaj6s5z9eqzZgF/4lk=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):a814636663a69123492f4a7bd337a4ee8752233aacfe6b91e0993dc58c823fe1
SHA256 hex / Subject Public Key Information (SPKI):
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:http://ocsp.digicert.com
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:Serverauthentifizierung (1.3.6.1.5.5.7.3.1), Clientauthentifizierung (1.3.6.1.5.5.7.3.2)




3.
CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013
15.01.2038
expires in 4147 days


3.
CN=DigiCert Global Root G3, OU=www.digicert.com, O=DigiCert Inc, C=US
01.08.2013

15.01.2038
expires in 4147 days




KeyalgorithmEC Public Key (384 bit, secp384r1)
Signatur:ECDSA SHA384
Serial Number:055556BCF25EA43535C3A40FD5AB4572
Thumbprint:7E04DE896A3E666D00E687D33FFAD93BE83D349E
SHA256 / Certificate:Ma1mSPgQQTjHOPOepDIBMzk+OhjMAilu+Xwqye9nMdA=
SHA256 hex / Cert (DANE * 0 1):e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA256 hex / PublicKey (DANE * 1 1):b94c198300cec5c057ad0727b70bbe91816992256439a7b32f4598119dda9c97
SHA256 hex / Subject Public Key Information (SPKI):b94c198300cec5c057ad0727b70bbe91816992256439a7b32f4598119dda9c97
SPKI checked via https://v1.pwnedkeys.com/spki-hash:Check unknown. No result 404 / 200
OCSP - Url:
OCSP - must staple:no
Certificate Transparency:no
Enhanced Key Usage:




 

10. Last Certificates - Certificate Transparency Log Check

1. Source CertSpotter - active certificates (one check per day)

Issuerlast 7 daysactivenum Certs
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
16
48
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
0
0
14
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
4
11
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
0
0
7
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
0
4
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
0
3
CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US
0
0
1
CN=GeoTrust Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
0
0
1

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
15858331178
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-07-15 00:00:00
2027-01-29 23:59:59
*.tiktok.com, tiktok.com - 2 entries


14972939963
leaf cert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-05-19 00:00:00
2026-12-03 23:59:59
*.tiktok.com, tiktok.com - 2 entries


14972271205
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-05-19 00:00:00
2026-12-03 23:59:59
*.tiktok.com, tiktok.com - 2 entries


14325433845
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-03-31 00:00:00
2026-10-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13951035419
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-02-26 00:00:00
2026-09-12 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13512258722
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-21 00:00:00
2027-01-20 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13504551036
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-20 00:00:00
2027-02-20 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13503791032
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-20 00:00:00
2027-02-20 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


13493364848
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-19 00:00:00
2027-01-18 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


13493424346
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-19 00:00:00
2027-01-18 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13494337684
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-19 00:00:00
2027-01-18 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13493428853
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-19 00:00:00
2027-01-18 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13481849222
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-18 00:00:00
2027-01-17 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13473274933
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-17 00:00:00
2027-01-16 23:59:59
*.tiktok.com, tiktok.com - 2 entries


13350144371
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2026-01-07 00:00:00
2027-02-07 23:59:59
*.tiktok.com, tiktok.com - 2 entries


12896562369
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-11-28 00:00:00
2026-11-27 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


12505852714
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-10-30 00:00:00
2026-10-29 23:59:59
*.tiktok.com, tiktok.com - 2 entries


12259808011
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-10-13 00:00:00
2026-10-12 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


11537266064
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-08-18 00:00:00
2026-09-18 23:59:59
*.tiktok.com, tiktok.com - 2 entries


11505452499
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-08-15 00:00:00
2026-09-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


11117058513
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-07-14 00:00:00
2026-08-14 23:59:59
*.tiktok.com, tiktok.com - 2 entries


10773778362
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-16 00:00:00
2026-06-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


10774376095
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-16 00:00:00
2026-06-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


10773739391
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-16 00:00:00
2026-06-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


10774345379
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-16 00:00:00
2026-06-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


10113211425
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-15 00:00:00
2026-04-14 23:59:59
*.tiktok.com, tiktok.com - 2 entries


10057718505
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-10 00:00:00
2026-05-11 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


10028385532
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-07 00:00:00
2026-05-08 23:59:59
*.tiktok.com, tiktok.com - 2 entries


9974556365
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-02 00:00:00
2026-05-03 23:59:59
*.tiktok.com, tiktok.com - 2 entries


9899703534
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-25 00:00:00
2026-03-24 23:59:59
*.tiktok.com, tiktok.com - 2 entries


9862035288
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-21 00:00:00
2026-03-20 23:59:59
*.tiktok.com, tiktok.com - 2 entries


9862115716
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-21 00:00:00
2026-03-20 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


9842793098
precert
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-19 00:00:00
2026-03-18 23:59:59
*.tiktok.com, tiktok.com - 2 entries


9224233765
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 13:30:12
2026-02-16 13:30:11
*.tiktok.com, tiktok.com - 2 entries


9223099442
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 10:23:22
2026-02-16 10:23:21
*.tiktok.com, tiktok.com - 2 entries


9222749991
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 09:30:11
2026-02-16 09:30:10
*.www.tiktok.com, www.tiktok.com - 2 entries


9221886527
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 07:24:07
2026-02-16 07:24:06
*.www.tiktok.com, www.tiktok.com - 2 entries


9214911655
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-14 14:00:09
2026-02-15 14:00:08
*.tiktok.com, tiktok.com - 2 entries


9212168287
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-14 07:03:06
2026-02-15 07:03:05
*.www.tiktok.com, www.tiktok.com - 2 entries


9210988709
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-14 03:51:28
2026-02-15 03:51:27
*.tiktok.com, tiktok.com - 2 entries


9039960342
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-12-26 00:00:00
2025-12-26 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


8752020951
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-11-25 00:00:00
2025-11-24 23:59:59
*.tiktok.com, tiktok.com - 2 entries


8644433808
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-11-12 00:00:00
2025-12-13 23:59:59
*.tiktok.com, tiktok.com - 2 entries


8631286726
leaf cert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-11-11 00:00:00
2025-11-10 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


8042095818
leaf cert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-08-27 00:00:00
2025-08-26 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7879202399
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-08-06 00:00:00
2025-08-05 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7712349599
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-15 00:00:00
2025-07-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7712422365
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-15 00:00:00
2025-07-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7712409566
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-15 00:00:00
2025-07-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7712338609
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-15 00:00:00
2025-07-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7572100944
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-06-24 00:00:00
2025-07-25 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7354494359
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-05-21 00:00:00
2025-05-20 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7250110983
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-05-03 00:00:00
2025-06-03 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7215677312
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-28 00:00:00
2025-05-29 23:59:59
*.tiktok.com, tiktok.com - 2 entries


7213898915
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-28 00:00:00
2025-04-28 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


7215574814
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-28 00:00:00
2025-05-29 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


7151714894
precert
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-18 00:00:00
2025-04-17 23:59:59
*.tiktok.com, tiktok.com - 2 entries


6826335514
precert
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-02-26 00:00:00
2025-03-28 23:59:59
*.tiktok.com, tiktok.com - 2 entries


6590019685
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-01-19 00:00:00
2025-01-18 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


6414683564
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-12-22 00:00:00
2025-01-21 23:59:59
*.tiktok.com, tiktok.com - 2 entries


6238074377
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-11-23 00:00:00
2024-12-23 23:59:59
*.tiktok.com, tiktok.com - 2 entries


6154387777
leaf cert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-11-09 00:00:00
2024-12-09 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


6147649490
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-11-08 00:00:00
2024-11-07 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


6137822347
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-11-06 00:00:00
2024-12-06 23:59:59
*.www.tiktok.com, www.tiktok.com - 2 entries


6102032387
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-10-31 00:00:00
2024-11-30 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5741035789
leaf cert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-08-25 00:00:00
2024-09-24 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5618651349
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-08-02 00:00:00
2024-09-01 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5543116794
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-18 00:00:00
2024-08-17 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5524826305
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-07-14 00:00:00
2024-08-13 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5524806399
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-07-14 00:00:00
2024-08-13 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5524846560
precert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-14 00:00:00
2024-08-13 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5524835026
precert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-14 00:00:00
2024-08-13 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5472034222
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-03 00:00:00
2024-08-02 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5458357360
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-06-30 00:00:00
2024-07-30 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5414048017
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-06-21 00:00:00
2024-07-21 23:59:59
*.tiktok.com, tiktok.com - 2 entries


5375070238
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-06-13 00:00:00
2024-06-11 23:59:59
*.tiktok.com, tiktok.com - 2 entries


4939190541
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-03-13 00:00:00
2024-04-12 23:59:59
*.tiktok.com, tiktok.com - 2 entries


4939173776
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-03-13 00:00:00
2024-04-12 23:59:59
*.tiktok.com, tiktok.com - 2 entries


4581433417
precert
CN=GeoTrust Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-12-22 00:00:00
2023-12-21 23:59:59
*.bytedance.com, *.feishu.cn, *.larksuite.com, *.tiktok.com, bytedance.com, feishu.cn, larksuite.com, tiktok.com - 8 entries


4552536258
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-12-15 00:00:00
2024-01-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


4552520443
precert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2022-12-15 00:00:00
2024-01-15 23:59:59
*.tiktok.com, tiktok.com - 2 entries


4449509951
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-11-21 00:00:00
2023-12-22 23:59:59
*.tiktok.com, tiktok.com - 2 entries


4088653324
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-08-22 00:00:00
2023-09-22 23:59:59
*.tiktok.com, tiktok.com - 2 entries


3977894752
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-07-23 00:00:00
2023-08-23 23:59:59
*.tiktok.com, tiktok.com - 2 entries


3977942856
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-07-23 00:00:00
2023-08-23 23:59:59
*.tiktok.com, tiktok.com - 2 entries


3959448693
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-07-18 00:00:00
2023-07-17 23:59:59
*.tiktok.com, tiktok.com - 2 entries


3897485386
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-06-30 00:00:00
2023-07-31 23:59:59
*.tiktok.com, tiktok.com - 2 entries


3873142979
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-06-23 00:00:00
2023-07-24 23:59:59
*.tiktok.com, tiktok.com - 2 entries


3501776634
precert
CN=RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1, O=DigiCert Inc, C=US
2022-03-10 00:00:00
2023-04-10 23:59:59
*.tiktok.com, tiktok.com - 2 entries


 

2. Source crt.sh - old and new certificates, sometimes very slow - only certificates with "not after" > of the last months are listed

Issuerlast 7 daysactivenum Certs
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
3
32
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
0
0
9
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
0
7
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
0
0
7
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
0
0
4
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
0
0
3
CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1, O="DigiCert, Inc.", C=US
0
0
1
CN=GeoTrust Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
0
0
1

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
22097946000
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-10-29 23:00:00
2026-10-29 22:59:59
*.tiktok.com, tiktok.com
2 entries


20399349579
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-08-17 22:00:00
2026-09-18 21:59:59
*.tiktok.com, tiktok.com
2 entries


20355113214
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-08-14 22:00:00
2026-09-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


19662768300
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-07-13 22:00:00
2026-08-14 21:59:59
*.tiktok.com, tiktok.com
2 entries


19050491882
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-15 22:00:00
2026-06-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


19049425546
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-15 22:00:00
2026-06-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


19050463230
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-15 22:00:00
2026-06-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


19511014184
leaf cert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-06-15 22:00:00
2026-06-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


18680897317
leaf cert
CN=DigiCert Verified Mark RSA4096 SHA256 2021 CA1, O="DigiCert, Inc.", C=US
2025-05-22 22:00:00
2026-05-22 21:59:59
tiktok.com
1 entries


17857058388
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-14 22:00:00
2026-04-14 21:59:59
*.tiktok.com, tiktok.com
2 entries


17753486164
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-09 22:00:00
2026-05-11 21:59:59
*.www.tiktok.com, www.tiktok.com
2 entries


17690252161
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-06 22:00:00
2026-05-08 21:59:59
*.tiktok.com, tiktok.com
2 entries


17572993648
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-04-01 22:00:00
2026-05-03 21:59:59
*.tiktok.com, tiktok.com
2 entries


17386868956
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-24 23:00:00
2026-03-24 22:59:59
*.tiktok.com, tiktok.com
2 entries


17285282209
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-20 23:00:00
2026-03-20 22:59:59
*.tiktok.com, tiktok.com
2 entries


17285488628
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-20 23:00:00
2026-03-20 22:59:59
*.www.tiktok.com, www.tiktok.com
2 entries


17234945248
precert
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2025-03-18 23:00:00
2026-03-18 22:59:59
*.tiktok.com, tiktok.com
2 entries


16242825134
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 12:30:12
2026-02-16 12:30:11
*.tiktok.com, tiktok.com
2 entries


16240006628
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 09:23:22
2026-02-16 09:23:21
*.tiktok.com, tiktok.com
2 entries


16239199158
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 08:30:11
2026-02-16 08:30:10
*.www.tiktok.com, www.tiktok.com
2 entries


16237326245
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-15 06:24:07
2026-02-16 06:24:06
*.www.tiktok.com, www.tiktok.com
2 entries


16221501522
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-14 13:00:09
2026-02-15 13:00:08
*.tiktok.com, tiktok.com
2 entries


16215143127
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-14 06:03:06
2026-02-15 06:03:05
*.www.tiktok.com, www.tiktok.com
2 entries


16212039145
precert
CN=GlobalSign GCC R3 DV TLS CA 2020, O=GlobalSign nv-sa, C=BE
2025-01-14 02:51:28
2026-02-15 02:51:27
*.tiktok.com, tiktok.com
2 entries


15889360277
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-12-25 23:00:00
2025-12-26 22:59:59
*.www.tiktok.com, www.tiktok.com
2 entries


15489435017
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-11-24 23:00:00
2025-11-24 22:59:59
*.tiktok.com, tiktok.com
2 entries


15327413173
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-11-11 23:00:00
2025-12-13 22:59:59
*.tiktok.com, tiktok.com
2 entries


16216655473
leaf cert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-11-10 23:00:00
2025-11-10 22:59:59
*.www.tiktok.com, www.tiktok.com
2 entries


15045066481
leaf cert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-08-26 22:00:00
2025-08-26 21:59:59
*.tiktok.com, tiktok.com
2 entries


14013522246
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-08-05 22:00:00
2025-08-05 21:59:59
*.tiktok.com, tiktok.com
2 entries


13742852418
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-14 22:00:00
2025-07-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


13742992834
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-14 22:00:00
2025-07-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


15061587855
leaf cert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-14 22:00:00
2025-07-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


15123029669
leaf cert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-07-14 22:00:00
2025-07-15 21:59:59
*.tiktok.com, tiktok.com
2 entries


13506085202
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-06-23 22:00:00
2025-07-25 21:59:59
*.tiktok.com, tiktok.com
2 entries


13123776454
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-05-20 22:00:00
2025-05-20 21:59:59
*.tiktok.com, tiktok.com
2 entries


12941568119
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-05-02 22:00:00
2025-06-03 21:59:59
*.tiktok.com, tiktok.com
2 entries


12881498005
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-27 22:00:00
2025-05-29 21:59:59
*.tiktok.com, tiktok.com
2 entries


12878341385
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-27 22:00:00
2025-04-28 21:59:59
*.www.tiktok.com, www.tiktok.com
2 entries


12881321939
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-27 22:00:00
2025-05-29 21:59:59
*.www.tiktok.com, www.tiktok.com
2 entries


12767431388
precert
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-04-17 22:00:00
2025-04-17 21:59:59
*.tiktok.com, tiktok.com
2 entries


12199026551
precert
CN=GeoTrust TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2024-02-25 23:00:00
2025-03-28 22:59:59
*.tiktok.com, tiktok.com
2 entries


11410031142
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-12-21 23:00:00
2025-01-21 22:59:59
*.tiktok.com, tiktok.com
2 entries


11190931617
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-11-22 23:00:00
2024-12-23 22:59:59
*.tiktok.com, tiktok.com
2 entries


12878342567
leaf cert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-11-08 23:00:00
2024-12-09 22:59:59
*.www.tiktok.com, www.tiktok.com
2 entries


10951065034
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-10-30 23:00:00
2024-11-30 22:59:59
*.tiktok.com, tiktok.com
2 entries


10567340260
leaf cert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-08-24 22:00:00
2024-09-24 21:59:59
*.tiktok.com, tiktok.com
2 entries


10041802389
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-08-01 22:00:00
2024-09-01 21:59:59
*.tiktok.com, tiktok.com
2 entries


9930340055
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-17 22:00:00
2024-08-17 21:59:59
*.tiktok.com, tiktok.com
2 entries


9900423527
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-07-13 22:00:00
2024-08-13 21:59:59
*.tiktok.com, tiktok.com
2 entries


9900446047
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-07-13 22:00:00
2024-08-13 21:59:59
*.tiktok.com, tiktok.com
2 entries


11014794059
leaf cert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-13 22:00:00
2024-08-13 21:59:59
*.tiktok.com, tiktok.com
2 entries


11203255864
leaf cert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-13 22:00:00
2024-08-13 21:59:59
*.tiktok.com, tiktok.com
2 entries


9814784640
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-07-02 22:00:00
2024-08-02 21:59:59
*.tiktok.com, tiktok.com
2 entries


9790940466
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2023-06-29 22:00:00
2024-07-30 21:59:59
*.tiktok.com, tiktok.com
2 entries


9707759098
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-06-20 22:00:00
2024-07-21 21:59:59
*.tiktok.com, tiktok.com
2 entries


9640518902
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-06-12 22:00:00
2024-06-11 21:59:59
*.tiktok.com, tiktok.com
2 entries


8873423537
precert
CN=RapidSSL TLS ECC CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-03-12 23:00:00
2024-04-12 21:59:59
*.tiktok.com, tiktok.com
2 entries


8872453514
precert
CN=RapidSSL TLS RSA CA G1, OU=www.digicert.com, O=DigiCert Inc, C=US
2023-03-12 23:00:00
2024-04-12 21:59:59
*.tiktok.com, tiktok.com
2 entries


8258787524
precert
CN=GeoTrust Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-12-21 23:00:00
2023-12-21 22:59:59
*.bytedance.com, *.feishu.cn, *.larksuite.com, *.tiktok.com, bytedance.com, feishu.cn, larksuite.com, tiktok.com
8 entries


8205269002
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-12-14 23:00:00
2024-01-15 22:59:59
*.tiktok.com, tiktok.com
2 entries


8205239512
precert
CN=RapidSSL ECC CA 2018, OU=www.digicert.com, O=DigiCert Inc, C=US
2022-12-14 23:00:00
2024-01-15 22:59:59
*.tiktok.com, tiktok.com
2 entries


8026084206
precert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-11-20 23:00:00
2023-12-22 22:59:59
*.tiktok.com, tiktok.com
2 entries


9040712520
leaf cert
CN=RapidSSL Global TLS RSA4096 SHA256 2022 CA1, O="DigiCert, Inc.", C=US
2022-08-21 22:00:00
2023-09-22 21:59:59
*.tiktok.com, tiktok.com
2 entries


 

11. Html-Content - Entries

Summary


Subresource Integrity (SRI)
DomainnameHtmlElementrel/property∑ size∑ problems∑ int.∑ ext.∑ Origin poss.∑ SRI ParseErrors∑ SRI valid∑ SRI missing
https://www.tiktok.com/ja-JP/
95.100.248.71
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,461 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.73
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,461 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.74
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,461 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.75
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,461 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.81
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,402 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.86
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,461 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.88
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,461 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.89
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,402 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/ja-JP/
95.100.248.93
link
other
41
1,292,020 Bytes
39
0
39
39
0
0
-39

meta
other
3

0


0
0
0


script

40
1,329,461 Bytes
40
0
40
40
0
0
-40
https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
meta
apple
3

0


0
0
0


meta
other
3

0


0
0
0


script

27
1,709,864 Bytes
27
0
27
27
0
0
-27

 

Details (currently limited to 500 rows - some problems with spam users)

DomainnameHtml-Elementname/equiv/ property/relhref/src/contentHttpStatusmsgStatus
https://www.tiktok.com/ja-JP/
95.100.248.71
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37441/159322 Bytes






ETag: f1eec929-41ed-4b70-afa8-ebd58c88cff4

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=
sha384-ej9MCzfFBu2pFOD0nwDF9BdwG6LV+K10CkkqTy8xy7090/LnCcQgka9ypCxpKh6q
sha512-xPtvzP0/FOtv8IjZ/FxdyoD7bnizHi5vh2RW81IetEEseZppL1bjysACELufd6lrn5ghCrOPIt7XT6emPnbW5A==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js" crossorigin="anonymous" integrity="sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.73
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37441/159322 Bytes






ETag: f1eec929-41ed-4b70-afa8-ebd58c88cff4

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=
sha384-ej9MCzfFBu2pFOD0nwDF9BdwG6LV+K10CkkqTy8xy7090/LnCcQgka9ypCxpKh6q
sha512-xPtvzP0/FOtv8IjZ/FxdyoD7bnizHi5vh2RW81IetEEseZppL1bjysACELufd6lrn5ghCrOPIt7XT6emPnbW5A==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js" crossorigin="anonymous" integrity="sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.74
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37441/159322 Bytes






ETag: f1eec929-41ed-4b70-afa8-ebd58c88cff4

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=
sha384-ej9MCzfFBu2pFOD0nwDF9BdwG6LV+K10CkkqTy8xy7090/LnCcQgka9ypCxpKh6q
sha512-xPtvzP0/FOtv8IjZ/FxdyoD7bnizHi5vh2RW81IetEEseZppL1bjysACELufd6lrn5ghCrOPIt7XT6emPnbW5A==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js" crossorigin="anonymous" integrity="sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.75
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37441/159322 Bytes






ETag: f1eec929-41ed-4b70-afa8-ebd58c88cff4

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=
sha384-ej9MCzfFBu2pFOD0nwDF9BdwG6LV+K10CkkqTy8xy7090/LnCcQgka9ypCxpKh6q
sha512-xPtvzP0/FOtv8IjZ/FxdyoD7bnizHi5vh2RW81IetEEseZppL1bjysACELufd6lrn5ghCrOPIt7XT6emPnbW5A==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js" crossorigin="anonymous" integrity="sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.81
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.943/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37382/159108 Bytes






ETag: d49b6505-3a5e-4b6c-9be3-72b5c5859a98

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzNQikCuaR6QcdRy3ZnFc2xANaxn2eUrGnkaECBgYkY=
sha384-tjvmYF+wDmUM0MpPKSGwaz6inm7r1habZ4WLvtacjMZVENRs3NcDYwxtnev0q+9n
sha512-lUDfq6CigW5R5g/u+h9u2FrTET8KU4pstfzWFhBKZlpORXE8H0p9eNw+NR6QNXKUULZHYxqH15MQCek6eqhpfw==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.943/index.js" crossorigin="anonymous" integrity="sha256-HzNQikCuaR6QcdRy3ZnFc2xANaxn2eUrGnkaECBgYkY=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.86
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37441/159322 Bytes






ETag: f1eec929-41ed-4b70-afa8-ebd58c88cff4

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=
sha384-ej9MCzfFBu2pFOD0nwDF9BdwG6LV+K10CkkqTy8xy7090/LnCcQgka9ypCxpKh6q
sha512-xPtvzP0/FOtv8IjZ/FxdyoD7bnizHi5vh2RW81IetEEseZppL1bjysACELufd6lrn5ghCrOPIt7XT6emPnbW5A==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js" crossorigin="anonymous" integrity="sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.88
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37441/159322 Bytes






ETag: f1eec929-41ed-4b70-afa8-ebd58c88cff4

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=
sha384-ej9MCzfFBu2pFOD0nwDF9BdwG6LV+K10CkkqTy8xy7090/LnCcQgka9ypCxpKh6q
sha512-xPtvzP0/FOtv8IjZ/FxdyoD7bnizHi5vh2RW81IetEEseZppL1bjysACELufd6lrn5ghCrOPIt7XT6emPnbW5A==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js" crossorigin="anonymous" integrity="sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.89
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.943/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37382/159108 Bytes






ETag: d49b6505-3a5e-4b6c-9be3-72b5c5859a98

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzNQikCuaR6QcdRy3ZnFc2xANaxn2eUrGnkaECBgYkY=
sha384-tjvmYF+wDmUM0MpPKSGwaz6inm7r1habZ4WLvtacjMZVENRs3NcDYwxtnev0q+9n
sha512-lUDfq6CigW5R5g/u+h9u2FrTET8KU4pstfzWFhBKZlpORXE8H0p9eNw+NR6QNXKUULZHYxqH15MQCek6eqhpfw==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.943/index.js" crossorigin="anonymous" integrity="sha256-HzNQikCuaR6QcdRy3ZnFc2xANaxn2eUrGnkaECBgYkY=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


95.100.248.93
link
manifest
/manifest.json


1
ok















link
preconnect
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu


1
ok















link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



link
preload
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<link rel="preload" href="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



link
preload
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<link rel="preload" href="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />



meta
charset
UTF-8


1
ok















meta
pumbaa-ctx
login=0,ftc=0


1
ok















meta
viewport
width=device-width, initial-scale=1.0


1
ok















script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 34038/125089 Bytes






ETag: 672e8fe1-5afc-47b5-9ba0-f53abcf80c3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=
sha384-WUZG6OV0eMeH0Yc3u7ope2Wxv8c7CFxxPgfiP5tJ7WwdJAzESVIECB6nJ9tiWRAW
sha512-8tjsQnlb/h2K6YIpVcxq2m+bZU+Wem3phpSFFYxpsRR2ckEaf8qYW6URCVMfBjMpnG3AD18ykARcB2XC0cIRQg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/foryou-prefetch.378f1b91.js" crossorigin="anonymous" integrity="sha256-ufSIbXQVmF6p6wOYqIOuDibV1Y3lHvZwNE38X+XmOjo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 130073/419486 Bytes






ETag: bfcc3c3b-8009-479b-9004-e08573466fc0

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=
sha384-+vsuJQbxBN1LLfmucix3k2MM6HKJymcgJLOsiDnFrCsybGqaX239ihS4FbP5d6fO
sha512-91XroBIcfYchmE27IF9D7cJaVdiVlPiQEiPXTwEBvAOHexQtpyh/MOPrtMI50Yv3C0dPJaDEkluUbeK5MFnXmA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/90055.64c3515b.js" crossorigin="anonymous" integrity="sha256-6PIP+fqmgCSghIKMZ/Pny+dszHP7O83nWyxuZ0NMnRo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11201/37032 Bytes






ETag: fc9d0fbe-b5ec-4cea-93ce-3abe5199d559

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=
sha384-c84ZlkY8kLcNWbkNK152bEExLi4fSslFZlyf6NwnvIn+XA4TlSklrvAPkoV2zbRk
sha512-JOemgj8BDWgRIXw9lUuMF0vMTYJ//rnAriaPnyPpGHnn37hXgU0gZjw3aCd9Y23HkAl08gVt4uty3pEIB3z5ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/10183.3525e891.js" crossorigin="anonymous" integrity="sha256-o5AjxKouSHZJvvsVSmYkzWEffJ7jXIzlEhzng7DOfN4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 22512/94479 Bytes






ETag: c970a3d2-ed63-4f03-bd2d-efbc56e0a18f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=
sha384-d83rvApTnmkGMdd/fzeRPsjYx9VZFpSJQ5L77ADpwXqOwoMiVSSdQMUjUJWwHEu6
sha512-jezAjdOrKLB1oZGfIatdjmhPYWaGrKx1Wv3nSEUImYQbUXh7Rf6kcC/D13DgR5MDC4ttZlFAe2cagOxQ+0FF6Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/14934.be42c359.js" crossorigin="anonymous" integrity="sha256-L17Ij0li8BUmsWp0TV+dRSbIPCgh3zzSnj3R2D/VUNw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 28338/95900 Bytes






ETag: 48475245-4b89-46df-9421-5487519dbc87

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=
sha384-UJyBX/dyKalvOjUL5z3JaNa+9ATQFSjpQx92bbwDJ2se0GbsDVzUy3o9guuuEchG
sha512-iV14cvpRwXx5dfBZdUS6Wfu7k26BC+bkMoK7ddDn5CkZpAqMwMAM8YLJEYgpXq97nZHLh62dF+WH3uf9pxgjDQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/15236.92dbbdc8.js" crossorigin="anonymous" integrity="sha256-TY4cBZaZW6R3R97P0r8NzDzNiwBgQ4ZHr0VBB+pnwOM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5679/18028 Bytes






ETag: 8b77b34f-511e-4b12-92fc-cbf0e2c0ec3e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=
sha384-7wrnKqrQgusxDPAsyHWR6lt31yhdc00XH8U3d3HmX3phE1geqvcLykpcxj7tiUI0
sha512-Fcbx1w7Br5cMOx3vk/rswvufaDx0ewQnsV3B7BoImCpaBB+h0FWAIYE4JTMvS69b8yy/tOVgPGSSHN/ldFsudQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/20853.3e9007dd.js" crossorigin="anonymous" integrity="sha256-VYPVBj0rqVLSfZer5bKOlT1DiShVncVUrig+rrylkDA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7943/29557 Bytes






ETag: 56754d32-1315-46de-ae88-f008af5b74c5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=
sha384-NAZdTMu5NeC1CzH5+We3p2Kdd8W53zlOmU4bt8MBkOpGENOtOArfTTrV2BcCOf+N
sha512-2X7IMEVxxgrGbTyv69Py3l3RkRARRG+WRAT/9/CXaO1xL1uT2UK0ZDraJSgvRieKww+RUlPjCquPwptAk5ms+w==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25031.dfb03c1b.js" crossorigin="anonymous" integrity="sha256-xbaJqbt8kTJGK4f9rhHkQdBAqD5VvvNuHRq99SnWNOw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 12376/38841 Bytes






ETag: b4b43730-d9ab-4675-a057-dd13a5c1a5a7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=
sha384-4etvoQ3QEgmX+qhTGgcQxbke5AHhqxXQzdWjeIz4Bi8jTVl7+Qf70oLcj3u22e5k
sha512-vaex+2bL7L8qOMeplCmglXi1qK3fPL+2TppNFGPsKx6gbffpFrcgDIxV5OAan8wrroEvl7QTNCoaJoQFCaGQlw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/25767.e567eba2.js" crossorigin="anonymous" integrity="sha256-iScAa+8BMddNeiwJ9rGAiA1zi4vQvV4qbAK2t18fS34=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5630/15019 Bytes






ETag: 1e52ea50-3446-4f69-98eb-af1a25aabb1b

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=
sha384-H389A53HyIrmL2QWzjdbBDXPYVVXEFcctkQfJltl1r/aLanxqNdVjTSGELV9QnpT
sha512-lHVWw9CpVZIdiLngQlvOkdslIYygTU58V8iBKnolYC+nDVYK+j1uQ8arRoOjNOHAvCRF5rP63y2oAfwdRR44Tw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/38255.020ad1a6.js" crossorigin="anonymous" integrity="sha256-N+A2+VCETvatKGPBzg+PDjlQZ2FXQWjdlPj4vZjjvns=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5833/19135 Bytes






ETag: 858809fe-7051-4a09-9598-2d85a7ad4d3d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=
sha384-hwSMMSNDePPOoSYn9mZ6d4HxvE95gMr/c9Y8cRd/5KJY8mEjRHaQGGzAj9yrn6CM
sha512-iLIsDcesos892lID5pSs1S6xYwei+DagyL8UcHtzloL9zeApif4kKWdn6+17UcDynPl8I2Fej2CUPWP/hOT3Pg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/4231.158af0f4.js" crossorigin="anonymous" integrity="sha256-V/ihsvVcoJvg2YWQx9u1vk3ABGhq6HPl+Rmss1wt+yo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 222835/823957 Bytes






ETag: fca3988c-378c-4777-8354-95bc0f35664d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=
sha384-5xAU6InBKBA456IrxTeKZAHbQFTrvqLmghVD/UFSUA4J/yoQzxQ96flzaXFPcgEB
sha512-cOMjlNVfdpJGyheUEqk2SAAKhzbLuE33MhIcFxhDbnJMRiwNfq6zJDGVWCCVz2lu+tYbVR6waeDszVZjok6Pxg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/54846.b091fa8b.js" crossorigin="anonymous" integrity="sha256-oSKLX/7a0dOIV6XRO15mwAkvP/pygWpVr3Ex5ftdYx4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6508/27049 Bytes






ETag: c90dbabc-98b7-46f2-8355-715e2481b641

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=
sha384-1Ov35KQG3MRPgIsjSzyzQpWoU/1+m9hJZDk2m2fQQ3I7KE9Ff/vJmODmDt9CCWqv
sha512-Pf98alTb0ZT6iq1BhlxzhjzjnDixB7Y1ut9KuPNQ+sU9vXWnwAHVywVJYlyQ+PIaruMPmUuCHDFEUR168K+GDg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/64842.1c2a0ee1.js" crossorigin="anonymous" integrity="sha256-f8Ccy64Z5IdeU678c8SpBew8NMdz/mRIq6ANSlq52/o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5646/18662 Bytes






ETag: 3fe0b19a-edc7-4074-ac7c-9339c6ef548e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=
sha384-c6V6myBXNqkxMxROXj2nG90ZHI4Rep9Mp3qwjaVDjDHHMu6KXvB1UFmKM+aLgvnk
sha512-12k51Blsb6igiTgTqDdwm3GH/gGvgpq+BXpcDoBAVLX5sNVvNFlJrFbRSBzQuY9Zg/FulbFWC5yG0ws2f7bCuQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/71589.d50d2ed9.js" crossorigin="anonymous" integrity="sha256-ApoL4opJPuMvlnncbOCKbBdBw3ut1tNsXCgrkAu4ppM=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37121/135043 Bytes






ETag: 1972fb83-6cc7-4326-9abd-2c56d2b72896

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=
sha384-P56z1Do13a8UNDdXPOX27T/JIIyOElYGrM3Jf4kZMuFtz7C2sGSWsy1D0ZHKbCg7
sha512-s6YhHZQH4O1zCPDzOLt+bkMT1uIt2rrUKGeauZxBKyjm8FhXgC7z/ZJM31EQ+cFoIquhpQXIlnEJChv6nF9hAg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/77340.1017adbb.js" crossorigin="anonymous" integrity="sha256-CWbBUlG7+WkT+l29bK4hZ8IzKzQayip7d75+Hsect9o=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8194/27770 Bytes






ETag: cae98042-9e7b-4de2-96b8-c2fc46d68834

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=
sha384-RN9Qw6s6wVpehKt0M9U/++lbH8KV50rKHMTmh0TQpitLAQjYycBp7czdh8jPMzz2
sha512-a58G+96LgGSCBJQ+9epQdiKuxB/QSItTInRllIA1FB1m6P1QOaX2plt3Hf7El4cukM6sy5x+cEkojSc6HGfG9Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/82203.1942fb7f.js" crossorigin="anonymous" integrity="sha256-YDxyQU80DNguZdyx+YEDjmZsVQGDqcKFv5old0Ivr3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5901/21016 Bytes






ETag: df010651-e620-44cb-b672-701e709b26c1

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=
sha384-itVTwR2EAI0KM9bbzEln670D21Zc1353vVbHTKfLgyzZshP1ffTArebymfXcGEzG
sha512-822X7T2OD+uciS4ZjqG1reICmJc4AQnCqzH14pdmWv0q2W3adZw8V17D20QOl9dNNe3bK3yBnhEKyoA/jWXCRA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/8290.0e415647.js" crossorigin="anonymous" integrity="sha256-HzVsjjQAkJt/RLPPZrver2LieeWvWk/xqgmNSKCagJw=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8223/26767 Bytes






ETag: 2d3ae787-bb8e-483c-82e7-ea3a1676300c

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=
sha384-SSZO4MYk0J0cd0I8R8LhVzV8vYNbsfdXbnnBfsg/Qm/weu7iTnTiaH9Z9t/pDQNH
sha512-sJ+rAvCLjisDu/Wd6Uw4y41uRtHmm2U6XK5+IffxEnJjls2G1LrriKmDyqXMH7LwgXGn91FAoqtpmb1AOG/F3g==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/85134.43efe094.js" crossorigin="anonymous" integrity="sha256-Ri+qRXgpDz19bKgqA+Z9Y2T24fquThK8CayZpJqK0vY=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5700/24372 Bytes






ETag: e9a11033-cfae-41a7-bff3-a31386c35090

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=
sha384-wCiYgTFx+rIaW/G7ADKhnA2IS2KMWyBAyVp/MZpp+cHacE6WOexlZ2p9F0DFFs36
sha512-SgUbYdRd88yopmszE1mXnQ0y1nG+WeMLaBfWZLgj415LDGygjv/p/LS+NgkwQcIZqG97p6PoaA254hGBVu2/ow==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/90481.bc4c5b14.js" crossorigin="anonymous" integrity="sha256-LqX9uswcJGS3FfUtGWD4TUD1hNt63SLpO7zGv7Mr5g0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4700/17570 Bytes






ETag: 2b77b942-1f7d-4dd0-8824-c9ec16a4d9a3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=
sha384-zc+wQF4pH+icv+JUWJHKYXT+7tbrnwSenAkDlImjwaCp33cCgJri872iSaY3v5Pc
sha512-5JsS+D8MbazKCmij4KfYQR7lGrpKhy8H4icVWHeCzhNOyK993On/CZ9i3SJZ0uq9flE/bMQGrHtnxmRz5lcunA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92269.6e405c48.js" crossorigin="anonymous" integrity="sha256-h4Rt4rWXha/5gqV8/7Vk7tRcFGVIiRMXMkYFozctCJ0=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8314/29098 Bytes






ETag: 27f5063a-bff7-4846-aa07-2a6d09bd8d5f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=
sha384-vN32iW51SWKSfW7GCxxk8SDihPYgUMQwZvCMcBIUfc7VZFNXUQ0NIPj9oKTf9lm/
sha512-JNxvqj8MUf0zrhtzEDIj8J38MFsIvnmif4fzj1h8lra/lJIW7YzRXANQz4piuaN7cnMUuqFjsQq9q9WQ9ZfBxw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/92835.aa4bfa6d.js" crossorigin="anonymous" integrity="sha256-u6d+lSOIwQcHss8DBM2WDijPwPvLD0Q1o4JXJunlPEg=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9587/29804 Bytes






ETag: bcd3bb74-af10-4b97-a206-d9bd3e800a83

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=
sha384-hoEHtT3X+3VwzRdbH3kTg3uTqMeJ6G058iwpD6J8DwpfbaiYD2BzKhGayZ0JxpDS
sha512-OcDY9UW3G1GYa6YTwoXTtKqErwdd8wrtL1o8luIsRdJoaPmlrEpPFxQsPzSKkw4R9EjFFSXAtsJcacXxhX5TDA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93518.5b274781.js" crossorigin="anonymous" integrity="sha256-C3wwnmbpARou9KP469nCuAP4K51LdX+/ZUreVVcvmO4=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 13465/45788 Bytes






ETag: eeff194a-42ed-4b43-8898-c227e4fba8ea

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=
sha384-Og+ylSu87CSwAHOLTVWHKTKJ3D8z9WmGpEl5gXSEkqrHVcpkPpsCFtOpi+ntoyw3
sha512-FqkgApxkPPvX1S/2pMPTdYaxCJd5UchyPuxezf8+gKtk1ZE3ZM/NbUPZ5/fmspdIRaF3mIbpHTnbEbzVoMRhJA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/93639.cd083627.js" crossorigin="anonymous" integrity="sha256-kcL97+j59PLfsTO/qrvW+djpmeJEDaUcGDOlm9Fkn+w=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 6350/17206 Bytes






ETag: 18d028d1-8f1b-46a1-8156-23e1ad22666d

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=
sha384-6GmJNqzTsC8kzXLEU+2v/SOW7N2fotrj2ZJ6jOBo9nsifGc1Q5KmsvMWKEJiv2DJ
sha512-wGvVQ2dIQSj4fFf3kvYXPAOWMLqDvAyxeoM7b7j59AAvt+aWgY0J1U+DGDyJRRL9Yfxg7L/ISJ2ky0nKbPAspw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/97004.973142f4.js" crossorigin="anonymous" integrity="sha256-QT+JVP8OinswHvrLczm0pnHRD88Oc+uaTCTbMGPQvoQ=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 29988/79846 Bytes






ETag: 5c75648e-c1ad-41fe-8f58-c25f25c4d0b7

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=
sha384-lA5xc93U8x82YFiUA1eIAWPz8o71oeyzttsYna6gjMHTMNhv2UsTtrJIsV7p/1KN
sha512-UgaFOOe3OROcDefCzVwNefE86rIo9GfSVL1KGvJIrZxqqPY1pvGHTlJxClECP3hF50/6LO+DQ5rpvgWG1KD8dg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/async/foryou.islands.94012052.js" crossorigin="anonymous" integrity="sha256-rtrW137S2ib6k8u8acGtHI7wA4BDeQD3wBBGGZlVTJk=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49024/235851 Bytes






ETag: 805ec359-dbbc-48d1-8666-887388c900eb

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=
sha384-aXELO9X9/9EsgK3G5dz/4tV6JeoDzivPAn8YFBRJUhYd0wMY2Sfn9udJSblTEpWj
sha512-u47FP/n9mDqrPeP9E3Wd9I1iueVda0rtHHxm1upo3/R2gHI6uThGNuPEUgb5ieL6giAputKhWnmPGc2OVh7o8Q==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/atom.init.a8cee343.js" crossorigin="anonymous" integrity="sha256-DCtX4GIO9KN4R9DpDsM3i6J6pThWt1Ry8jWKdax6HIU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 84958/351982 Bytes






ETag: ea930357-2e1d-41d0-a77d-9c6d14e37c75

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=
sha384-CVaxuk/fpyYOJ4rzcMcfFyWAPRlzCURfH8u8yXjCelIcNwDelsqV3ahj2SnbYByQ
sha512-evHfm6tANdx5PGcanYSgYDLTpaceqz7PMnHEmr0uJ5tCpqKVPqKN3tgFXK532MgvzKqtrENAcU+cZfBg5ZhhvQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.common.lib.e76d475f.js" crossorigin="anonymous" integrity="sha256-XtEtvlhMUmhJONZS8GQnksuHKOAy/8fd6ybyEgQn1hc=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49307/197966 Bytes






ETag: 0bd37ad3-18ee-4b8c-9d90-6b297b69a965

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=
sha384-pWm4EtQNLAg7M2Vbi3+lIcS4IWzIN0FyUc+MZ7EWdHlI4JVSDU6ggLZoKePz3Z/Z
sha512-9Xno1f7U1AJLGO5HXtD+P+NofcDFIrbSVWBzxi6w2JhtkQ2u6kq8tdNa3Xvk0r0cdLOfebDJ588Q2aTMd9uKIQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/biz.shared.init.64b4f576.js" crossorigin="anonymous" integrity="sha256-/sJxPtaaQgvPDYV/adkGxyrWc8Lqwtnhd2YzO9BVuko=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9101/19986 Bytes






ETag: 69c57787-67e9-42c5-b92c-0217fd182283

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=
sha384-e814uacBfnLY/ifviUpjjgVhczlYJVRAZRpd1owfg9wH3dudkYCQUV19o9B/HVV4
sha512-G3RAjmoESjLdDvmjLmch5X07oBPLQNwY7txSSimTKuhzSKD9ag+S7qXfx9E5EQe0N+M5R6B3xiUp+bOXwBgLJQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/builder-runtime.d81228f3.js" crossorigin="anonymous" integrity="sha256-KoipjwEYtU98V/2kvoQiFgi06Roo3dXXNLv9mpH/z0A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 100143/382805 Bytes






ETag: 4cea115c-5a08-4ea7-b45e-92444c774b86

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=
sha384-0MGgxUNrNt6CYRVmq73E3oArcvLyAOv//cvX0NzRoIEMiWuiYGXZyCw8whmwWCiW
sha512-c55mP2luKVX0jod5cbXVugN09DABUFJu/7u6laHkyxviX9rZ+czihcGfmh1FuWxTM2OmHedNi+WCaGK4zUjqZg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/cache.tux.934f5a3e.js" crossorigin="anonymous" integrity="sha256-TyzdpPTectBfgcV8p82EpbeZChuekKS1Bkb94hzc4rI=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9623/25485 Bytes






ETag: d165d06b-0f7d-4bf3-8dad-10309f7898f5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=
sha384-QwEmyJuk4nURFQ3T3fW7ZmZ+VUld+5TLThBbJDZ/5HKg6pIytncoN/Nj8VuCMDNU
sha512-futNSptHhv7FrorLzCbLXZzIBAzoIwOoCLZEigJQPPODZPdpgEZBAM5YKPcoAZzvtKIjEGjn6CLZGLEvxNguuw==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/emotion.init.a2a45726.js" crossorigin="anonymous" integrity="sha256-2BqfheSvi8rgZ3/YkiG79GILZl+a/4S1RNU61zXyspA=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 26032/88873 Bytes






ETag: 4aa27ce5-5da5-41cb-a818-d781941961a5

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=
sha384-Cv9Q+UhMbKhO81mpZw9GWTCBX4GPabAH25+SH/Cbi7/PcEazfrOmagpf1G2mlrI/
sha512-o3Ua4ZL5Ub3k3bn3tLGLjowMmvOdlzjBU1q4UI+W7D/ut6Ve/lkIVheDncLLsrW3IYkQRfEaywVLRCAqRiaKRg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/i18n.a515ce47.js" crossorigin="anonymous" integrity="sha256-IhafQb3FUEg9kVfnMg1crqCUL4ZSJfg47scRpUf0r9k=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 57618/223414 Bytes






ETag: f7e061eb-21e1-4589-95b1-051f6e4abc4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=
sha384-MYybLL2UQEUDY1zTpnecYjIJA5BYN66lA9s+6iC49cWu28/zzXPKZcJVkzpsTIFj
sha512-VfvQK6NdGGp72MucMmNlLKPtnLMmsYFtGSyBt+rNPHrAg/1Qow/qd57aYh78clFEH4kyScK+xIIIkeS8xD/6iA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-dp-byted-tea-sdk-oversea.7e89fb32.js" crossorigin="anonymous" integrity="sha256-bvXXOry3JGFJmlRAccSf7qke7J1e21O3G2EXi+8nOFs=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 68054/249678 Bytes






ETag: b7aac721-4335-4b9e-b7ed-21f5341f4cbd

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=
sha384-o0yfNR75sxUkQB7ArZAWdeH4+G93ZtVjD981SsoXy+teKez020fRbacOKk09XX9y
sha512-6aTSP314GZCpv3Y6QNJRxqkDrxT1OPobjtyOrUMfpKCHWD+hgwd//Vy7Rz3hDUEFpMQibnUgJ0ZXK5tIXeo8Xg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-react.c4ee0173.js" crossorigin="anonymous" integrity="sha256-DYnt+qwshSvvG9ME60XjXm7D4uOpZw8Eka8zmAu3mVo=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 11035/40570 Bytes






ETag: e7ffc30f-f182-41a2-8d14-015b586a586a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=
sha384-M/LPTB6bt+9sXEAv/DaNi46cbMcjq200F4tWhk1Uag9C9MTlAUNH9sJ7PIwrQREY
sha512-/3acdmOy0KITCSsDseAy/4Z1tdvnue2pptNxxEO+edAdl2A+s5IxC/2ErlD/CSWqBEcizjgL/5CacHQjS+FcXQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-rxjs.142286d3.js" crossorigin="anonymous" integrity="sha256-Y9i1g3X3bkVmn9wm/CFS2ZqZtgRdXWuteI7gIXIJO3s=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9732/31600 Bytes






ETag: 0018558c-6783-4632-b8c7-ba1b46895d10

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=
sha384-dJ7A3c9C3wWbYaenXjU8uIzM6raPB2YH7Hr8gev6IDP38SVxhErQT4boyHfs97ZS
sha512-5bYoCmMX3jyPbsV6kH4yuEz5ajPOwmKgkhNG5cDbwWGsb8cTtAjgEOEfYkXcFkfRUHIcZALl9DhisH1sBaIDdQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/npm-sigi.fdf0b52b.js" crossorigin="anonymous" integrity="sha256-fHoW/YEDndIeWewg4HeDofF7XVZPmMzK+04a1PaIk3A=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31671/116237 Bytes






ETag: ee72750b-d6bc-423c-a16e-9093c8c129a2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=
sha384-NUThBFGIyqmpQEbOqbC9CxE4RTEiK+HzrX/6zA8Gy7o3LMs8Lxfjhr/X5SYvlWHK
sha512-o9EDF0KJI/JBZixR7rFmxQy1h3i0HaLoa5L8z54ieh3r05uza8EI3V/AHMFs6+ypBojkcyP7f5O4TWsDZ+Q/sg==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/player.init.dc83de41.js" crossorigin="anonymous" integrity="sha256-8pEoFHcxWHjB5zdoHhl2zaZEuOTl4yi3dcdKqiQTkWU=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 31760/102673 Bytes






ETag: f38a37f7-c1f9-4ab8-a8c6-32b765a987d3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=
sha384-9LTcWq4dgktBGhoNb2MbsIzx5TnANiwanB2EKVkPGEjwlmmcve4sZbdarScYuGF7
sha512-FM4C/vDBkpwJ3Swr8PPUF57zZMSkaiRYT0N4LE6yj/6/8IRXuWIyYvw5fLCrn6WAa9KzFBuA0xD/cDcZNSyyhQ==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/slardar.b3c5dc7a.js" crossorigin="anonymous" integrity="sha256-wNMXrDQF+nofHa0Te8nAYJwh7zj26gplPNsBL+ihLkE=" />



script
src
//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 117116/461838 Bytes






ETag: a0e1c175-e09c-4501-85d1-ca5fd693b912

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=
sha384-wD5fPOlYLk/hALclNFEsH8fKwR6NfGJ4EJYdh5pkK4DrVyM2rSAqJGYscahB+1gF
sha512-Sna3aYYuWcOJxneQA5Jjsz2VOOH5w202CRKe3bCObSXDeseUFaaGl5zrSpbaK7uQ2hwHso8x4KhLTNOIFXdRVA==

 

<script src="//sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok/webapp/main/react-v18/webapp-desktop/static/js/webapp-desktop.47760101.js" crossorigin="anonymous" integrity="sha256-+FIwo0hRGRZoYN3+oinHZ5Ozym7kvocae7faBpK68Uc=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37441/159322 Bytes






ETag: f1eec929-41ed-4b70-afa8-ebd58c88cff4

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=
sha384-ej9MCzfFBu2pFOD0nwDF9BdwG6LV+K10CkkqTy8xy7090/LnCcQgka9ypCxpKh6q
sha512-xPtvzP0/FOtv8IjZ/FxdyoD7bnizHi5vh2RW81IetEEseZppL1bjysACELufd6lrn5ghCrOPIt7XT6emPnbW5A==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.933/index.js" crossorigin="anonymous" integrity="sha256-HpHKCo6LafwVb+yMdUIz/1OBmxHHvoYzZfqkVdRAt94=" />



script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js
200

1
Problems with Content-Type - Header - see details
Missing defer / async attribute. application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 691/1337 Bytes






ETag: 760dbf8e-b313-4fb3-931b-844fb633132f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=
sha384-e5hJLifDiibIGYJcQmpHGfBUXln7rdUaTbYgwC0WFw2jkUgJVlBVrJEj8YisEjLM
sha512-LcvykDfuGah6DHXmrli4HRhUhOZ8fI97fDRoqZbicQn7LSQ/hwPJ7o3Be6lKEsWNS1boyHBZdhvV7mHowCbZug==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js" crossorigin="anonymous" integrity="sha256-SrRiXf/+cozADG1w1ijCpWijO6MKVazvO7umx667pWM=" />


https://www.tiktok.com/404?fromUrl=/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de

meta
charset
UTF-8


1
ok















meta
apple-mobile-web-app-capable
yes


1
ok















meta
apple-mobile-web-app-status-bar-style
black


1
ok















meta
apple-mobile-web-app-title
TikTok


1
ok















meta
mobile-web-app-capable
yes


1
ok















meta
viewport
width=device-width,initial-scale=1,viewport-fit=cover,user-scalable=no,maximum-scale=1,minimum-scale=1


1
ok















script
src
https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.943/index.js
200

1
Problems with Content-Type - Header - see details
async attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 37382/159108 Bytes






ETag: d49b6505-3a5e-4b6c-9be3-72b5c5859a98

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HzNQikCuaR6QcdRy3ZnFc2xANaxn2eUrGnkaECBgYkY=
sha384-tjvmYF+wDmUM0MpPKSGwaz6inm7r1habZ4WLvtacjMZVENRs3NcDYwxtnev0q+9n
sha512-lUDfq6CigW5R5g/u+h9u2FrTET8KU4pstfzWFhBKZlpORXE8H0p9eNw+NR6QNXKUULZHYxqH15MQCek6eqhpfw==

 

<script src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok_privacy_protection_framework/loader/1.0.0.943/index.js" crossorigin="anonymous" integrity="sha256-HzNQikCuaR6QcdRy3ZnFc2xANaxn2eUrGnkaECBgYkY=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/1002.bab0c1658bc02577cce4.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 49408/153391 Bytes






ETag: 4818a502-a9e9-43d4-8da9-fa71b0c38d1e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-7R0RQ/LKi6vATkkEysE6L4QavJmgnjPF1N+VsMYCszU=
sha384-Dro+GyOMFbzEYx33kkHTD8TIy2FWOJ1w2oXQst4Uc9jHpmnomu61/Qk1W4jW+bHX
sha512-p4XvIqPB+gWbj2/ETeF/eA+9N3fEkO2Ud1fcPbvkr2nD7+6eUfyMzdAUNl6UOrM3/rzspLYSIPXdqliEPC3pOw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/1002.bab0c1658bc02577cce4.js" crossorigin="anonymous" integrity="sha256-7R0RQ/LKi6vATkkEysE6L4QavJmgnjPF1N+VsMYCszU=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/1449.181f9568326ed323627e.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
88 Bytes






ETag: 0ed91223-36c3-4a10-bb65-fd3b7787a0bc

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-Ts8W+70/WqxX1lp+sjTRDkfhdFnkDWm1s5Nm18nwhlw=
sha384-hMqevdqlfU27Du9DClrgD/TSRdg2DQYXlAZ2FQ3EZi3O4RpGAgtjqkIWSN/SGmTK
sha512-wvPoJ7aMDoUrFry9v9iJyBAIOYxesfCU/MR8n0QQmAe4hQ2DdOdhRUwY2EG93EoO7iWkWZDC6GXhYPSUED8Onw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/1449.181f9568326ed323627e.js" crossorigin="anonymous" integrity="sha256-Ts8W+70/WqxX1lp+sjTRDkfhdFnkDWm1s5Nm18nwhlw=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/1879.469519216a71a1586666.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 75494/309458 Bytes






ETag: 706c5e8c-c088-4103-98aa-e87bf3ef9166

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8MM2GYKURV4BTDyj3XduEJfWqM7HzdmHiibZWlokzQ4=
sha384-OV/kSM2sTCyHZaHDdN9qySXaqgFOM1aGZfaAwVIdMPmFv8HbOpc2lCJR7PN4c/RG
sha512-RaMtm5lLl9wcaU4wumUgSNh97sLguNsSUhobR4pnPiwlI5RpWAv1tuMay6qmmlN3K8HIdkLbk+D/iNGsyw0ecg==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/1879.469519216a71a1586666.js" crossorigin="anonymous" integrity="sha256-8MM2GYKURV4BTDyj3XduEJfWqM7HzdmHiibZWlokzQ4=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/2092.9093f5c239199bb8e61b.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5061/15925 Bytes






ETag: 0dc2e914-a138-4c82-98d7-b1a2f4d6a713

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-5BWL98IJjhUbPZ/A/hzSeB1+kllno7n0s2CcYpQZ5oY=
sha384-ueGN2lDUcD+sV0igO06B9QmJOMvrSIOOiQ6pGU2jeB/bxnr7RhXumv2FbIh4fEff
sha512-zY4+u4d5e3oVm6gzBCjSbCt1fdx+lN/kyk9p4brgGqTMVGdN2XrGiFYiyFir7+SyMHV3822t8icuifI9xxunTg==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/2092.9093f5c239199bb8e61b.js" crossorigin="anonymous" integrity="sha256-5BWL98IJjhUbPZ/A/hzSeB1+kllno7n0s2CcYpQZ5oY=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/2800.a12b0e832b7846ca0be5.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 116349/479161 Bytes






ETag: 0ac5478d-b0ce-4f51-96be-ad018d3e06e2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-qobEuhXez3O9/kL/i3YyT11rQXzfnVY8MdbCrdFmIcc=
sha384-wBHxgmJp6+oSZuTAnRpktmyrWJvmv9JBifKTxiqk89SEp1MXSdtps4bgxwfwfooH
sha512-EU5XGe4MEPAxcVUIeZd60rJSkzZkMZZrpYBsiRZh71Y6nBN1axqJaIX4M70TzwDwkVzpnAJ0OQsibnNwzm+Yyg==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/2800.a12b0e832b7846ca0be5.js" crossorigin="anonymous" integrity="sha256-qobEuhXez3O9/kL/i3YyT11rQXzfnVY8MdbCrdFmIcc=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/3508.4e7d6f463b72ed1fba81.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
378 Bytes






ETag: 7c0edff8-1618-4ab3-8deb-84d404a743e3

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-JC31Px6ds6TvyloIaOH32ClgQyGJGQYLDg91jNd82JU=
sha384-cQcomhs4DKaHAp2AF5A1aqWNx1c1U4MtXjgl39rX3cjC/X/miWB/TI56MAJVsz8R
sha512-//PMfvh9UD1lQ4IKZWXRMq+7RgI7WlK2/0vvrnb5DjsnT+Ag1NMj+EzC8pSwZCcdurwsVUstJltJ3uuJ0ylgFg==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/3508.4e7d6f463b72ed1fba81.js" crossorigin="anonymous" integrity="sha256-JC31Px6ds6TvyloIaOH32ClgQyGJGQYLDg91jNd82JU=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/404.8ec8fa125614bccb686f.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 5337/14586 Bytes






ETag: de0fc79e-5a2f-468e-b612-00b81b5a5c78

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-+87T/5H9UDW5gQ/akyjFhccoR4/RlHetrBRDeMlfaf0=
sha384-d46h9cqybwYiBgb0CqprCfLFDtGktrmJHQTxRC3KLy4RmQULamKAcqHQ3MELj67K
sha512-RDSvzJ39gRliknYMnpraIz7I7sXVjnQlJ8Zy7WC9G8ioEXqv0WKo+KmqQR/2LAIiwWp+9ZOaTycTZlFRPPeUUg==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/404.8ec8fa125614bccb686f.js" crossorigin="anonymous" integrity="sha256-+87T/5H9UDW5gQ/akyjFhccoR4/RlHetrBRDeMlfaf0=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/4770.3f159c3da9d0d9a7738c.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
314 Bytes






ETag: 5e5543c4-b541-4a6c-b94f-5e408d351482

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-jnvvca5XKJzytwlLg40fdLR2I1MjvVBjInvp/uN/N/k=
sha384-f1DkgpW/cT8pcc6MHy5FLrZjLTd0cdBbVm1lJB/P2bLFQCe3+JkI/LFM4WpRNFNq
sha512-BhBtlStrB1B5mnN0UrLBIo5E0exMbi+pVta07pBXg9cYkoOwDl+HAvdHocZER0lQ8+hyUpcXD7oMMnF8KsU4nA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/4770.3f159c3da9d0d9a7738c.js" crossorigin="anonymous" integrity="sha256-jnvvca5XKJzytwlLg40fdLR2I1MjvVBjInvp/uN/N/k=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/4832.17f488cd9eff2d323d51.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
127 Bytes






ETag: c0d68936-14e0-4716-99d1-409debba0c4f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-dGmeaUwTE5//HVCoFvXbShlM/zlJmUyaNfhv6f4XPrg=
sha384-mzXL3AcoVwGGjFfbNT5wInb7No392vhhCctAxjH6q4xDY+0tlo0F+T0u+A97GeVi
sha512-59vz7bYIGtWMVSK/qDfSGk0ZyOQEHwP29RMUpePpULIfA4u37TnPk+MGpr9qeFMxDSEnVTmg+OHGKP176jVOfA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/4832.17f488cd9eff2d323d51.js" crossorigin="anonymous" integrity="sha256-dGmeaUwTE5//HVCoFvXbShlM/zlJmUyaNfhv6f4XPrg=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/5487.b064fcacf115ca0b2394.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
253 Bytes






ETag: 148c22a3-f0fc-4d4c-8b3f-06754c1a171a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8+C9cMNMkyzcVyvPvLxfqBn5b+5YBF23Yv/0ZGkAVyQ=
sha384-m4w4aEPOzdXa3mAniFmaqrk5KLFnUeQ07ZcPkUzgCn2/QtXpCBTt+7pbz3yOR94c
sha512-Its5YR31xGO1lj8hi1+Sui8fQUkrUiEnF1F6aRG61m4OFhpQiU9MSXFHFC8hBBMjz71gWmyxnAWtVqecRulYjA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/5487.b064fcacf115ca0b2394.js" crossorigin="anonymous" integrity="sha256-8+C9cMNMkyzcVyvPvLxfqBn5b+5YBF23Yv/0ZGkAVyQ=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/5597.dcef5750ecc18e4bb2d3.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 2065/4780 Bytes






ETag: 7044ea69-3c58-4d03-a992-202857f8e39a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-P3yntvgwjvyWB9sLX2b3XWIi6Pr9AIjaLltuA0q94gI=
sha384-xENis+W8w7Y6HQir5fPrCGgb9NMUMJnHJkB68IXJcAGIOseXCHM5hu38t2Y99FfI
sha512-TLUYrzyJLJ8DkcB8wFbsAOBHonRJwFLjefd6WUo5xVVbV1Z8F0QKobdGH4yjEKtsGpbF0BGaZ20V8w/EQNprmA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/5597.dcef5750ecc18e4bb2d3.js" crossorigin="anonymous" integrity="sha256-P3yntvgwjvyWB9sLX2b3XWIi6Pr9AIjaLltuA0q94gI=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/5879.27cda42d3ca8768bc42a.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
127 Bytes






ETag: c39988ca-dad8-4ff8-b6ae-43da81bbb56a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-gw5d3asLFNtdA1I+hCDjsAbaDygRINJClu+D8ov7NvA=
sha384-s1k3Q1b7E7NtYRYqxlWcS5FCrIpB1zRd40MA+e86n6iUMXah8IZOtYaqpej20yuZ
sha512-a+DaebJbAcFH2a/Jrc8MW9rOCSSJKQwdma7B519ZQNDxd16yv/kfxLilABHBu24uQlbG2+dnGVV9KZQzCmoTYA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/5879.27cda42d3ca8768bc42a.js" crossorigin="anonymous" integrity="sha256-gw5d3asLFNtdA1I+hCDjsAbaDygRINJClu+D8ov7NvA=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/6159.af412c6651a29b45ba59.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 283117/1248733 Bytes






ETag: f3c1caa8-82cc-49f6-be70-f222df116166

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-4Z1RZ2PLBmZhCIoxbJEWN7XcDxVpAZppsb4n1dO9yro=
sha384-QBiE1v0IJOABU67F1y1DWy5xQY6FvQigj0fZ3bFDXqv3DKPK8VqgXlrSeKEu1cm6
sha512-zroAU3/WaK+i+rWWyBS5K8Guor1RaavuBUii80oqu5V+KG/ndPCaA/gyNypKqq+3Mj1oQLXsVnrV1pVs9+PEGw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/6159.af412c6651a29b45ba59.js" crossorigin="anonymous" integrity="sha256-4Z1RZ2PLBmZhCIoxbJEWN7XcDxVpAZppsb4n1dO9yro=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/6249.2cf4dd84f3fbd6a5eaca.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8125/30951 Bytes






ETag: f6bfa673-b943-45fe-bc4f-6d088257b980

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-COwPi6iU43SmxL59aS4dmqIZXKtQirJjTW4HD5GDHrE=
sha384-VjL84I3IyS0CxxtBVGruDkkZTd7m233oPOKZ7bUg3MpLDv2PZHqahYXuuBd9LQfy
sha512-GBUmNe540/ZXSFX4LnkLCshUKvLA+8JBvOQvfaIjYDJ1uo/UvG90FAenFeWB1cIA1Op0UDNdg75RyNzKalBeOg==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/6249.2cf4dd84f3fbd6a5eaca.js" crossorigin="anonymous" integrity="sha256-COwPi6iU43SmxL59aS4dmqIZXKtQirJjTW4HD5GDHrE=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/9090.9c8560d37a277276793f.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 7638/30242 Bytes






ETag: 2c7d3445-2c6c-41a6-9c38-3d666977079e

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-sP7444ikN7/GNBViOLH/ZuNclhptx1oD3e0erd50+sE=
sha384-iRxNgNIRrZws4cJfnW4J2tmyMa98Wt6Q3GuMkwLfEawbXiI5ZQX57cmVxTPOQrOF
sha512-CCHz/QauCbWVFIp8DTgBxDt6Y+aucrttw64YHhjPn5ig5NXc5lSQ6afVLiY4kjbPOdsxdhU++QHvAMrCZeSIfw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/9090.9c8560d37a277276793f.js" crossorigin="anonymous" integrity="sha256-sP7444ikN7/GNBViOLH/ZuNclhptx1oD3e0erd50+sE=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/9186.344b1f021bac2d02b4eb.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
460 Bytes






ETag: 409f9b1a-ac2e-46b6-b6fd-fcf13719544a

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-wzCOPCFmtQfp1MSH0GujkdM8Zu2gq4BDCbvB4rbDDyw=
sha384-xj24C+9k7TRnvc1XwMh7OB86yT0NCvU2Yifu/tUHkH4HotRZVxsOQMNConi1BPNE
sha512-YM6N1Jx8TRJCHsowMLYInzvJZAOPk44dL2UIF5SZcF43Il8+x7y8MfUogkNNQCJR6gex6AB7MDLwOFpzp2sjlQ==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/9186.344b1f021bac2d02b4eb.js" crossorigin="anonymous" integrity="sha256-wzCOPCFmtQfp1MSH0GujkdM8Zu2gq4BDCbvB4rbDDyw=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/multi-cluster-domain.c54899fa650525c77696.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
466 Bytes






ETag: 07a74ce2-b698-43b5-b7e8-8c6ca3e98ace

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-aUaNViwNNfXlRLIvkMyuW/qiw01qgoc2HPCI5PCQfY4=
sha384-H+0ldoIGFSr/0/aLEofH/pxY9SwiLJ5+ipMkbTLu8FBTIgpFS1WkYMc2iluxBCrG
sha512-I/nx2Wu5B0hggxKcktI8H+vw9LTrHGl+VGKrAenuuLuTKfKZQK91rwgoe7xAhneXero7TcCksfi8Id3fMvl8gA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/multi-cluster-domain.c54899fa650525c77696.js" crossorigin="anonymous" integrity="sha256-aUaNViwNNfXlRLIvkMyuW/qiw01qgoc2HPCI5PCQfY4=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-596046b7.90fdd0448bd177818b4c.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 17025/87089 Bytes






ETag: 99acffc2-2cbe-4de1-b797-fe8b9fe08528

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-CXWJHSr7AJDQBNJ9DymZ4DVw1+YMKN9Uh9vwMHsg5HA=
sha384-5lxPBqsqyMbqXEHB7qpTYlh5dwUrcJgrf0QecdtaYwV8KOANN3WFVjxL1CwBTfZ5
sha512-NHlW3JcIgPeo2rZwE+11Pd7rDY8OCIUsEAPXvTJjZxpncs+p99aMskiNXpSGNOpewRCoxtVHbQTquVwWSWspqw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-596046b7.90fdd0448bd177818b4c.js" crossorigin="anonymous" integrity="sha256-CXWJHSr7AJDQBNJ9DymZ4DVw1+YMKN9Uh9vwMHsg5HA=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-74d9c565.661d78df54a7fbe652b7.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 9484/39354 Bytes






ETag: d2725e90-a4bf-489f-b7a7-999e6db8cdba

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-67gCwZjOStCxXrzFyWGv4zrl5lMWDpQsDJOSNvEcRV8=
sha384-CDPtooV7sWHUB5NuPNYHvGKzao8hBiCfj/YbmrYklVSTUJZaLtCabpRWSeFTIgRB
sha512-BXReyxjyuv07Fq2Wait0URJUbn104MlWyBki0dqMvhjnune4PU6s8kj3UGvJMYvqF/PJCGwVmp6tAnPMVHs0mQ==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-74d9c565.661d78df54a7fbe652b7.js" crossorigin="anonymous" integrity="sha256-67gCwZjOStCxXrzFyWGv4zrl5lMWDpQsDJOSNvEcRV8=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-7842561a.42630433db42c11016bd.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8106/23914 Bytes






ETag: b507ed06-2ffb-43ba-9d8c-5dcaaabfbeca

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-YPZnfwFtjDPkuE/DkWW9ZCWpEn0qTqbmxRupCS2pEn4=
sha384-z2nM0pXI+V++0c0iEd1+qo0kudlotz+6+s7oQp56rDjJG2zMUvAhZMqlU3FNj0P0
sha512-k9oKAqKvDMO8DirJsTJ5a+7rzf+1qu3epeWsXDI9uBlzIl1UT+rFH1pkN7vewFX6CvjpYHPZ+5gcr8gips2jFA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-7842561a.42630433db42c11016bd.js" crossorigin="anonymous" integrity="sha256-YPZnfwFtjDPkuE/DkWW9ZCWpEn0qTqbmxRupCS2pEn4=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-async-b1a9beb1.ba039504e717fbc3cce5.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8064/18489 Bytes






ETag: a3af0ef7-8ac8-40f7-bbee-c7f2b6bded85

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oZrOyBwRu8+Z+nHkI455OXqUmF4slxqA7wy0jSzArPA=
sha384-N6ISzLDFqH4itlS8/wz0Ezs5vAjEeDDjx6EzDM7Pd0KNZOCOeEAJuBbwT3TMoQCq
sha512-EB8uIIbJmmaAwr6qmKfolYT0RBpolFPo+F29fjmPeoHztD1fLO0oez4Tqw71eMUZdcrrcb0lvlidsfkDPGZvhw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-async-b1a9beb1.ba039504e717fbc3cce5.js" crossorigin="anonymous" integrity="sha256-oZrOyBwRu8+Z+nHkI455OXqUmF4slxqA7wy0jSzArPA=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-b3a903c8.1da016b4fb592ade2efd.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 55587/201421 Bytes






ETag: de2c200c-42cd-435b-85eb-3766b5f15e39

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-o33Y/B4y/WvLiAc+b3BqDntcGG5ayklC5uW7hepb3WE=
sha384-66h1MViveLA04wuAFgXSYK6Ej03YmpM/diUwlpX8G3rqTa3w5jzhaBjgHcF2BrV8
sha512-su2xEcpriH6DqxL7mMTVU+qR8hJgr9kPFS/WI/oVwcjvfr23EWTN1a3yeaVHnGGACzAeDRU0TE+KdoVlA6OFRw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-b3a903c8.1da016b4fb592ade2efd.js" crossorigin="anonymous" integrity="sha256-o33Y/B4y/WvLiAc+b3BqDntcGG5ayklC5uW7hepb3WE=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-d801507b.6c0d58b86fd328e0da29.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 423226/1544639 Bytes






ETag: 68891065-bd5f-466a-a51d-2a6b93607de2

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-GeTVU0HcB9/1lYsLjX5zkGuFxfuGIMVTtZ0U1UKu3/U=
sha384-Yma06JRaXGTsq2PswVmSgAAshywL+6MFTxjGG/n6fIkXG6zSdPCK7AUNIq3yE7p5
sha512-H2oEUpfhjsi7YrIDWuw2AebvfaPyxjbQfi1VI5hW0cW86pdo2qqyxjh2efbY/N4P69u7wzbAP43eWrRgBMyrjg==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-d801507b.6c0d58b86fd328e0da29.js" crossorigin="anonymous" integrity="sha256-GeTVU0HcB9/1lYsLjX5zkGuFxfuGIMVTtZ0U1UKu3/U=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-ea8a6886.0a775d1d8c407c6d9af5.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 8721/30797 Bytes






ETag: 7a0d43af-1639-4a48-8eee-f6c5f6d011bf

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-HBBqfgUe7VIGDYTNwF3is85cs9afYMSN7vcxN39gJZE=
sha384-xFshA2zvwPYXWfvScHNO+mlmmfzsAbhA7+3ttEl6SrJNoQ9xQyRAPiqudpikmwGv
sha512-CjAvZ+Yv7InHdvj7/rIdW9KU97zn4oyvByJV0b/VWEIXWgHZn/kHcSvnOMBxmVa5Aox7tsbHXXocGDqFjGIOaA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/npm-ea8a6886.0a775d1d8c407c6d9af5.js" crossorigin="anonymous" integrity="sha256-HBBqfgUe7VIGDYTNwF3is85cs9afYMSN7vcxN39gJZE=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/runtime.8b4de19d5c40c12188b8.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 4635/10016 Bytes






ETag: 9c3f5d6b-e278-410f-a566-8ad55de8922f

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-8l9xWYF/yVGAbXB2P3eYSXd9wwFAXOk9hu1bHwl7jnI=
sha384-eXtaDCZl/LbAzGFBxudJ5PS4tVpegvIzEERIGgkMz700QuEQERGiAgZ1ULr1HRCX
sha512-QDAZpcyKRi8squQ6JCaT0g3KwZtJJwibB8bbcJ+hRtz45QriwHFBr4WEM/ffaTWnUcu4DEWMXymPwQQw35R4Kw==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/runtime.8b4de19d5c40c12188b8.js" crossorigin="anonymous" integrity="sha256-8l9xWYF/yVGAbXB2P3eYSXd9wwFAXOk9hu1bHwl7jnI=" />



script
src
https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/vendor.7a923ceda251353c3c47.js
200

1
Problems with Content-Type - Header - see details
defer attribute found application/javascript
X-Content-Type-Options nosniff found


This Combination of MediaType "application" and MediaSubType "javascript" is obsolete. Don't use it. See https://www.iana.org/assignments/media-types/media-types.xhtml to find a correct Combination. Use "text/javascript" instead.


Cache-Control: max-age=2592000 - with long duration found.
Compression (br): 582827/1978127 Bytes






ETag: a9f4ac0c-5708-4b3d-9a72-f304ec99f4c6

Server-Header Access-Control-Allow-Origin: *
Cross-Origin Resource Sharing (CORS) supported

missing crossorigin=anonymous|use-credentials and integrity - attribute, possible hash-values:

 

sha256-oOflcGThz8ILgnuLGFtdnrWBmzggGOX+6FKvHn2c0DY=
sha384-+WBPIwN/ybXS0HksFeIIdChfajqnNucNVMauDH3PH+8Jx60qpUIELUsBZRjygIyG
sha512-/W7IaRYJYW4SCh4oBD4P/I43pLrowCZfxNDjd1Hiz8VRvfZYNtNGCebKfl5bnCGoNFXs5nwyUbEINYrz+PEzdA==

 

<script src="https://sf16-website-login.neutral.ttwstatic.com/obj/tiktok_web_login_static/tiktok/site/static/webapp-static-site/vendor.7a923ceda251353c3c47.js" crossorigin="anonymous" integrity="sha256-oOflcGThz8ILgnuLGFtdnrWBmzggGOX+6FKvHn2c0DY=" />


 

12. Html-Parsing via https://validator.w3.org/nu/

Url used (first standard-https-result with http status 200): https://www.tiktok.com/ja-JP/

Summary

Good: No non-document-errors
2 errors
1 warnings

TypeMessagenum found
1.errorElement style not allowed as child of element div in this context. (Suppressing further errors from this subtree.)1
2.errorCSS: overflow-y: overlay is not a overflow-y value.1
3.warningThe type attribute is unnecessary for JavaScript resources.1

Details


TypeMessage + Sample
1errorElement style not allowed as child of element div in this context. (Suppressing further errors from this subtree.)

From line 17, column 7 to line 17, column 46

> <style data-emotion="css-global t7v29x">*,*::b
2errorCSS: overflow-y: overlay is not a overflow-y value.

From line 17, column 2293 to line 17, column 2299

verflow-y:overlay;}html
3warningThe type attribute is unnecessary for JavaScript resources.

From line 7, column 33569 to line 7, column 33732

}</script><script type="text/javascript" src="https://sf16-website-login.neutral.tiktokcdn-eu.com/obj/tiktok_web_login_static_eu/tiktok-infra/csp/sdk-pre/slardar.web.pre.js"></scri

 

13. Nameserver - IP-Adresses

Required Root-climbing DNS-Queries to find ip addresses of all Name Servers: a12-66.akam.net, a13-67.akam.net, a18-64.akam.net, a1-97.akam.net, a6-65.akam.net, a9-66.akam.net

 

QNr.DomainTypeNS used
1
net
NS
a.root-servers.net (2001:503:ba3e::2:30)

Answer: a.gtld-servers.net, b.gtld-servers.net, c.gtld-servers.net, d.gtld-servers.net, e.gtld-servers.net, f.gtld-servers.net, g.gtld-servers.net, h.gtld-servers.net, i.gtld-servers.net, j.gtld-servers.net, k.gtld-servers.net, l.gtld-servers.net, m.gtld-servers.net
2
a12-66.akam.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
2600:1480:1::43, 84.53.139.67

Answer: a12-67.akam.net
184.26.160.67, 2600:1480:f000::43

Answer: a18-67.akam.net
2600:1480:4800::43, 95.101.36.67

Answer: a22-67.akam.net
23.211.61.67, 2600:1480:7800::43

Answer: a28-67.akam.net
2600:1480:d800::43, 95.100.173.67

Answer: a4-67.akam.net
2600:1480:9000::43, 72.246.46.67

Answer: a6-67.akam.net
23.211.133.67, 2600:1401:1::43
3
a13-67.akam.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
2600:1480:1::43, 84.53.139.67

Answer: a12-67.akam.net
184.26.160.67, 2600:1480:f000::43

Answer: a18-67.akam.net
2600:1480:4800::43, 95.101.36.67

Answer: a22-67.akam.net
23.211.61.67, 2600:1480:7800::43

Answer: a28-67.akam.net
2600:1480:d800::43, 95.100.173.67

Answer: a4-67.akam.net
2600:1480:9000::43, 72.246.46.67

Answer: a6-67.akam.net
23.211.133.67, 2600:1401:1::43
4
a18-64.akam.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
2600:1480:1::43, 84.53.139.67

Answer: a12-67.akam.net
184.26.160.67, 2600:1480:f000::43

Answer: a18-67.akam.net
2600:1480:4800::43, 95.101.36.67

Answer: a22-67.akam.net
23.211.61.67, 2600:1480:7800::43

Answer: a28-67.akam.net
2600:1480:d800::43, 95.100.173.67

Answer: a4-67.akam.net
2600:1480:9000::43, 72.246.46.67

Answer: a6-67.akam.net
23.211.133.67, 2600:1401:1::43
5
a1-97.akam.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
2600:1480:1::43, 84.53.139.67

Answer: a12-67.akam.net
184.26.160.67, 2600:1480:f000::43

Answer: a18-67.akam.net
2600:1480:4800::43, 95.101.36.67

Answer: a22-67.akam.net
23.211.61.67, 2600:1480:7800::43

Answer: a28-67.akam.net
2600:1480:d800::43, 95.100.173.67

Answer: a4-67.akam.net
2600:1480:9000::43, 72.246.46.67

Answer: a6-67.akam.net
23.211.133.67, 2600:1401:1::43
6
a6-65.akam.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
2600:1480:1::43, 84.53.139.67

Answer: a12-67.akam.net
184.26.160.67, 2600:1480:f000::43

Answer: a18-67.akam.net
2600:1480:4800::43, 95.101.36.67

Answer: a22-67.akam.net
23.211.61.67, 2600:1480:7800::43

Answer: a28-67.akam.net
2600:1480:d800::43, 95.100.173.67

Answer: a4-67.akam.net
2600:1480:9000::43, 72.246.46.67

Answer: a6-67.akam.net
23.211.133.67, 2600:1401:1::43
7
a9-66.akam.net
NS
a.gtld-servers.net (2001:503:a83e::2:30)

Answer: a1-67.akam.net, a11-67.akam.net, a12-67.akam.net, a18-67.akam.net, a22-67.akam.net, a28-67.akam.net, a4-67.akam.net, a6-67.akam.net

Answer: a1-67.akam.net
193.108.91.67, 2600:1401:2::43

Answer: a11-67.akam.net
2600:1480:1::43, 84.53.139.67

Answer: a12-67.akam.net
184.26.160.67, 2600:1480:f000::43

Answer: a18-67.akam.net
2600:1480:4800::43, 95.101.36.67

Answer: a22-67.akam.net
23.211.61.67, 2600:1480:7800::43

Answer: a28-67.akam.net
2600:1480:d800::43, 95.100.173.67

Answer: a4-67.akam.net
2600:1480:9000::43, 72.246.46.67

Answer: a6-67.akam.net
23.211.133.67, 2600:1401:1::43
8
a12-66.akam.net: 184.26.160.66
A
a1-67.akam.net (2600:1401:2::43)
9
a12-66.akam.net: 2600:1480:f000::42
AAAA
a1-67.akam.net (2600:1401:2::43)
10
a13-67.akam.net: 2.22.230.67
A
a1-67.akam.net (2600:1401:2::43)
11
a13-67.akam.net: 2600:1480:800::43
AAAA
a1-67.akam.net (2600:1401:2::43)
12
a18-64.akam.net: 95.101.36.64
A
a1-67.akam.net (2600:1401:2::43)
13
a18-64.akam.net: 2600:1480:4800::40
AAAA
a1-67.akam.net (2600:1401:2::43)
14
a1-97.akam.net: 193.108.91.97
A
a1-67.akam.net (2600:1401:2::43)
15
a1-97.akam.net: 2600:1401:2::61
AAAA
a1-67.akam.net (2600:1401:2::43)
16
a6-65.akam.net: 23.211.133.65
A
a1-67.akam.net (2600:1401:2::43)
17
a6-65.akam.net: 2600:1401:1::41
AAAA
a1-67.akam.net (2600:1401:2::43)
18
a9-66.akam.net: 184.85.248.66
A
a1-67.akam.net (2600:1401:2::43)
19
a9-66.akam.net: 2a02:26f0:117::42
AAAA
a1-67.akam.net (2600:1401:2::43)

 

14. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.tiktok.com.edgesuite.net



1
0
tiktok.com.edgesuite.net
0

no CAA entry found
1
0
com.edgesuite.net



1
0
www.tiktok.com



1
0
edgesuite.net
0

no CAA entry found
1
0
tiktok.com
0

no CAA entry found
1
0
com
0

no CAA entry found
1
0
net
0

no CAA entry found
1
0

 

15. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
tiktok.com
_f3zsp3jcr9843f36xnpbfib409nlhjt
ok
1
0
tiktok.com
_globalsign-domain-verification=FUJcu1hWja0wxluxlVKRWITCKMvR1CzjjxYcugM_gM
ok
1
0
tiktok.com
_hvpbov9c2s6s8d9hj5w2njkjbpj35op
ok
1
0
tiktok.com
apple-domain-verification=hXgMRIDdysM4HJYw
ok
1
0
tiktok.com
facebook-domain-verification=iec6txjjw8r35xhq5swdem8tpa5mzw
ok
1
0
tiktok.com
facebook-domain-verification=wo9l655kzm8rfqm1st3qe7gqduoqav
ok
1
0
tiktok.com
google-site-verification=2ZTMDlDhN4fD3hIKVj_1LnDKhTvf4NVhT23o-edCEVw
ok
1
0
tiktok.com
google-site-verification=6qNNoqXIzco_ObM8QE5IZfz2kLnLQkG-llKLL_HudVI
ok
1
0
tiktok.com
google-site-verification=9aMOY6RF3QT8X2ACpo04BZ4CSdjPWxRJgncABZtHRYY
ok
1
0
tiktok.com
google-site-verification=heUwjUSZGdrUk6gp54Bxe8zNWMepAUdI3eECZ7zzNuQ
ok
1
0
tiktok.com
google-site-verification=ot5hoJ0_9g-FO6j5YX6aoLZpNM7N0y988ua0zsCDr88
ok
1
0
tiktok.com
google-site-verification=-pibSb_VhK-cZP1CQSaH7s43WbBkpzjhUwAgyc3YDH4
ok
1
0
tiktok.com
google-site-verification=spKY3sgLfx2ShlMQbs-jaGpfyhukOMBQ9fV_cR8yKII
ok
1
0
tiktok.com
google-site-verification=StaGWBpu1eRwm0dUSA-24OmzeXAqkQitecePeqLQ0fc
ok
1
0
tiktok.com
google-site-verification=UlwaFhsh7mBJzb0eTyZBibPg6HQ6doHO8-_tkmjBo4E
ok
1
0
tiktok.com
hubspot-developer-verification=YzdjZDc2ZDEtMDRmNS00MWQyLWJlNzUtY2Q4YmQyN2E0NDFl
ok
1
0
tiktok.com
klaviyo-site-verification=STK9xy
ok
1
0
tiktok.com
mailru-verification: c0f4705a229bd0c6
ok
1
0
tiktok.com
MS=ms14857357
ok
1
0
tiktok.com
MS=ms80039204
ok
1
0
tiktok.com
pinterest-site-verification=7d9fc044e28c4992dffda772e8ca2bdc
ok
1
0
tiktok.com
v=spf1 include:_spf.google.com include:mail.zendesk.com include:spf.bytedance.com include:mail.stibee.com -all
ok
1
0
tiktok.com
verification-code-site-edm-va=GkLVdrouyEyNQGsN0X0W
ok
1
0
www.tiktok.com


1
0
_acme-challenge.tiktok.com

Name Error - The domain name does not exist
1
0
www.tiktok.com.edgesuite.net


1
0
_acme-challenge.www.tiktok.com

Name Error - The domain name does not exist
1
0
_acme-challenge.tiktok.com.tiktok.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.tiktok.com.tiktok.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.tiktok.com.edgesuite.net

Name Error - The domain name does not exist
1
0
_acme-challenge.www.tiktok.com.www.tiktok.com

Name Error - The domain name does not exist
1
0
_acme-challenge.www.tiktok.com.edgesuite.net.tiktok.com.edgesuite.net

Name Error - The domain name does not exist
1
0
_acme-challenge.www.tiktok.com.edgesuite.net.www.tiktok.com.edgesuite.net

Name Error - The domain name does not exist
1
0

 

16. DomainService - Entries

TypeDomainPrefValueDNS-errornum AnswersStatusDescription
MX

tiktok.com
10
mx1.tiktok.com
03ok

A


35.172.32.95
02ok

A


18.139.153.173
02ok

CNAME


00ok
MX

tiktok.com
20
mx2.tiktok.com
03ok

A


35.172.32.95
01ok

CNAME


00ok
MX

tiktok.com
30
mx3.tiktok.com
03ok

A


18.139.153.173
02ok

A


35.172.32.95
02ok

CNAME


00ok
SPF
TXT
tiktok.com

v=spf1 include:_spf.google.com include:mail.zendesk.com include:spf.bytedance.com include:mail.stibee.com -all
ok

TXT
_spf.google.com

v=spf1 ip4:74.125.0.0/16 ip4:209.85.128.0/17 ip6:2001:4860:4864::/56 ip6:2404:6800:4864::/56 ip6:2607:f8b0:4864::/56 ip6:2800:3f0:4864::/56 ip6:2a00:1450:4864::/56 ip6:2c0f:fb50:4864::/56 ~all
ok

TXT
mail.zendesk.com

v=spf1 ip4:103.151.192.0/23 ip4:185.12.80.0/22 ip4:188.172.128.0/20 ip4:192.161.144.0/20 ip4:216.198.0.0/18 ~all
ok

TXT
spf.bytedance.com

v=spf1 ip4:209.127.230.0/23 ip4:106.186.17.116 ip4:139.162.36.251 ip4:54.179.21.15 ip4:47.88.224.38 ip4:90.84.242.28 ~all
ok

TXT
mail.stibee.com

v=spf1 include:spf1.stibee.com ip4:101.101.219.35 ip4:49.247.136.100 ip4:3.35.150.152 ip4:203.191.134.0/24 ip4:203.191.135.0/24 ~all
ok

TXT
spf1.stibee.com

v=spf1 ip4:13.125.13.211 ip4:3.36.178.220 ip4:52.79.159.54 ip4:52.78.28.74 ip4:54.180.28.193 ip4:52.79.137.211 ip4:52.79.252.20 ip4:3.37.7.144 ip4:3.36.197.132 ip4:52.79.150.24 ~all
ok
_dmarc
TXT
_dmarc.tiktok.com

v=DMARC1; p=reject; pct=100;
ok

 

 

17. Cipher Suites

Summary
DomainIPPortnum CipherstimeStd.ProtocolForward Secrecy
tiktok.com
23.200.24.72
443
18 Ciphers68.22 sec
6 without, 12 FS
66.67 %
tiktok.com
23.200.24.99
443
18 Ciphers68.85 sec
6 without, 12 FS
66.67 %
tiktok.com
23.200.24.122
443
18 Ciphers67.65 sec
6 without, 12 FS
66.67 %
Complete

3
54 Ciphers
18.00 Ciphers/Check
204.72 sec68.24 sec/Check
18 without, 36 FS
66.67 %

Details
DomainIPPortCipher (OpenSsl / IANA)
tiktok.com
23.200.24.72
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
18 Ciphers, 68.22 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS

TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x24
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384




AES256-GCM-SHA384
(Weak)
TLSv1.2
0x00,0x9D
No FS

TLS_RSA_WITH_AES_256_GCM_SHA384

RSA
RSA
AESGCM(256)
AEAD




AES256-SHA256
(Weak)
TLSv1.2
0x00,0x3D
No FS

TLS_RSA_WITH_AES_256_CBC_SHA256

RSA
RSA
AES(256)
SHA256




ECDHE-ECDSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x23
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256




ECDHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x27
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

ECDH
RSA
AES(128)
SHA256




AES128-GCM-SHA256
(Weak)
TLSv1.2
0x00,0x9C
No FS

TLS_RSA_WITH_AES_128_GCM_SHA256

RSA
RSA
AESGCM(128)
AEAD




AES128-SHA256
(Weak)
TLSv1.2
0x00,0x3C
No FS

TLS_RSA_WITH_AES_128_CBC_SHA256

RSA
RSA
AES(128)
SHA256




ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

ECDH
RSA
AES(256)
SHA1




ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

ECDH
RSA
AES(128)
SHA1




AES256-SHA
(Weak)
SSLv3
0x00,0x35
No FS

TLS_RSA_WITH_AES_256_CBC_SHA

RSA
RSA
AES(256)
SHA1




AES128-SHA
(Weak)
SSLv3
0x00,0x2F
No FS

TLS_RSA_WITH_AES_128_CBC_SHA

RSA
RSA
AES(128)
SHA1


23.200.24.99
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
18 Ciphers, 68.85 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS

TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x24
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384




AES256-GCM-SHA384
(Weak)
TLSv1.2
0x00,0x9D
No FS

TLS_RSA_WITH_AES_256_GCM_SHA384

RSA
RSA
AESGCM(256)
AEAD




AES256-SHA256
(Weak)
TLSv1.2
0x00,0x3D
No FS

TLS_RSA_WITH_AES_256_CBC_SHA256

RSA
RSA
AES(256)
SHA256




ECDHE-ECDSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x23
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256




ECDHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x27
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

ECDH
RSA
AES(128)
SHA256




AES128-GCM-SHA256
(Weak)
TLSv1.2
0x00,0x9C
No FS

TLS_RSA_WITH_AES_128_GCM_SHA256

RSA
RSA
AESGCM(128)
AEAD




AES128-SHA256
(Weak)
TLSv1.2
0x00,0x3C
No FS

TLS_RSA_WITH_AES_128_CBC_SHA256

RSA
RSA
AES(128)
SHA256




ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

ECDH
RSA
AES(256)
SHA1




ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

ECDH
RSA
AES(128)
SHA1




AES256-SHA
(Weak)
SSLv3
0x00,0x35
No FS

TLS_RSA_WITH_AES_256_CBC_SHA

RSA
RSA
AES(256)
SHA1




AES128-SHA
(Weak)
SSLv3
0x00,0x2F
No FS

TLS_RSA_WITH_AES_128_CBC_SHA

RSA
RSA
AES(128)
SHA1


23.200.24.122
443
ECDHE-ECDSA-CHACHA20-POLY1305
(Recommended)
TLSv1.2
0xCC,0xA9
FS
18 Ciphers, 67.65 sec
TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
ECDSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-ECDSA-AES256-GCM-SHA384
(Recommended)
TLSv1.2
0xC0,0x2C
FS

TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384

ECDH
ECDSA
AESGCM(256)
AEAD




ECDHE-ECDSA-AES128-GCM-SHA256
(Recommended)
TLSv1.2
0xC0,0x2B
FS

TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256

ECDH
ECDSA
AESGCM(128)
AEAD




ECDHE-RSA-CHACHA20-POLY1305
(Secure)
TLSv1.2
0xCC,0xA8
FS

TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256

ECDH
RSA
CHACHA20/POLY1305(256)
AEAD




ECDHE-RSA-AES256-GCM-SHA384
(Secure)
TLSv1.2
0xC0,0x30
FS

TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384

ECDH
RSA
AESGCM(256)
AEAD




ECDHE-RSA-AES128-GCM-SHA256
(Secure)
TLSv1.2
0xC0,0x2F
FS

TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256

ECDH
RSA
AESGCM(128)
AEAD




ECDHE-ECDSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x24
FS

TLS_ECDHE_ECDSA_WITH_AES_256_CBC_SHA384

ECDH
ECDSA
AES(256)
SHA384




ECDHE-RSA-AES256-SHA384
(Weak)
TLSv1.2
0xC0,0x28
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384

ECDH
RSA
AES(256)
SHA384




AES256-GCM-SHA384
(Weak)
TLSv1.2
0x00,0x9D
No FS

TLS_RSA_WITH_AES_256_GCM_SHA384

RSA
RSA
AESGCM(256)
AEAD




AES256-SHA256
(Weak)
TLSv1.2
0x00,0x3D
No FS

TLS_RSA_WITH_AES_256_CBC_SHA256

RSA
RSA
AES(256)
SHA256




ECDHE-ECDSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x23
FS

TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256

ECDH
ECDSA
AES(128)
SHA256




ECDHE-RSA-AES128-SHA256
(Weak)
TLSv1.2
0xC0,0x27
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256

ECDH
RSA
AES(128)
SHA256




AES128-GCM-SHA256
(Weak)
TLSv1.2
0x00,0x9C
No FS

TLS_RSA_WITH_AES_128_GCM_SHA256

RSA
RSA
AESGCM(128)
AEAD




AES128-SHA256
(Weak)
TLSv1.2
0x00,0x3C
No FS

TLS_RSA_WITH_AES_128_CBC_SHA256

RSA
RSA
AES(128)
SHA256




ECDHE-RSA-AES256-SHA
(Weak)
TLSv1
0xC0,0x14
FS

TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA

ECDH
RSA
AES(256)
SHA1




ECDHE-RSA-AES128-SHA
(Weak)
TLSv1
0xC0,0x13
FS

TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA

ECDH
RSA
AES(128)
SHA1




AES256-SHA
(Weak)
SSLv3
0x00,0x35
No FS

TLS_RSA_WITH_AES_256_CBC_SHA

RSA
RSA
AES(256)
SHA1




AES128-SHA
(Weak)
SSLv3
0x00,0x2F
No FS

TLS_RSA_WITH_AES_128_CBC_SHA

RSA
RSA
AES(128)
SHA1

 

18. Portchecks

No open Ports <> 80 / 443 found, so no additional Ports checked.

 

 

Permalink: https://check-your-website.server-daten.de/?i=bf164682-423a-4e23-9757-410153338c72

 

Last Result: https://check-your-website.server-daten.de/?q=tiktok.com%2Fja-JP%2F - 2026-04-19 12:01:40

 

Do you like this page? Support this tool, add a link on your page:

 

<a href="https://check-your-website.server-daten.de/?q=tiktok.com%2Fja-JP%2F" target="_blank">Check this Site: tiktok.com%2Fja-JP%2F</a>

 

 

Do you really want to support this project? Donate: Check-your-website, IBAN DE98 1001 0010 0575 2211 07, SWIFT/BIC PBNKDEFF, Euro

 

QR-Code of this page - https://check-your-website.server-daten.de/?d=tiktok.com/ja-JP/