扫描 ID：
1a265a22-114d-4c77-85cf-4f14a5905c25已完成
提交的 URL：
https://discord.gg/tMMKqp6X已重定向
报告完成时间：
公共

Cookie · 找到 7 个

复制链接

Cookie 是存储在用户设备上的小文本文件，通常用于记住用户偏好并实现个性化体验

名称值域路径到期 (UTC)保护仅 HTTP
__dcfduid563361a087ab11ef91e2a5fd667d404ediscord.com/是是
__sdcfduid563361a187ab11ef91e2a5fd667d404e27827166da16a6a5dc94f435b58f9f83a52627cf9296b59b4d9abd782f09937adiscord.com/是是
__cfruida22fac124de5d5c5a16f59b1bb137bf1dabecdbc-1728635542.discord.com/是是
_cfuvidpT3q1X3SGOmzoSXS8ZwZzmF9oLeodGEy457FKlQyC4I-1728635542722-0.0.1.1-604800000.discord.com/是是
cf_clearanceRHEw3yX3I3aaqmBwtqpu1GHqxVLJdYTY35suCMoFc88-1728635548-1.2.1.1-K7Q2A7jAsHznczLvLVWw0HlUaSIW8cYEAhg3PdBGLiXMHpwCtJE0lcstUd2MejYeQ589vngs1ElsYbyfcv7p87nXFo_vHlVZggrFMjlbANOPEmEswUkjPvQaa76Pvp5_bmJGFkISfldn0iJa29eaFXUf0I83BLf.85VCK5NJbl2RXK6uTPdpY45GAZD_GlQvFIJOygqkPMY8fBStmcsqrH1cxDvF5YIERbzhHaoM0NASanafU1gpe_zOcbeKYR.Z.6gop6lXZJ.n0Oq4I6LuggB2kbkNw2TZz3p06vyjFzM3irtx6zUPEVdyihiCJ4Z6vu4c.pL_By8sXP5mUMKylkrHr38wtLR43yUfI1ZMotjpYYxppyapTCg8K1EsLcxi.discord.com/是是
__cf_bm53mnJDcb_z8NobWeo1B7dbb1vsUq9hmo8fA5Pa_K41A-1728635548-1.0.1.1-2ctFGHwyp.I7ykHekQ05OBotv_HCgFyLfVl8d.CubWGb3LTDeR.o2wfWkGR5bx9H949qWL7ELXn2e4zZgd5FUQ.discordapp.com/是是
_cfuvidIh5kKKbkvCi7sJunRPmVHDN2QD8zqb_vL2Y_lQrpbqY-1728635548806-0.0.1.1-604800000.discordapp.com/是是

JavaScript 变量 · 找到 20 个

复制链接

在页面窗口对象上加载的全局 JavaScript 变量是在函数外部声明的变量，可以从当前范围内的代码中的任何位置访问

名称类型
0object
onbeforetoggleobject
documentPictureInPictureobject
onscrollendobject
__OVERLAY__boolean
__BILLING_STANDALONE__boolean
GLOBAL_ENVobject
webpackChunkdiscord_appobject
setImmediatefunction
clearImmediatefunction

控制台日志消息 · 找到 21 条

复制链接

记录到 Web 控制台的消息

级别来源消息
warningother
文本
Error with Permissions-Policy header: Origin trial controlled feature not enabled: 'interest-cohort'.
errorother
URL
https://discord.com/invite/tMMKqp6X
文本
Unrecognized Content-Security-Policy directive 'prefetch-src'.
errorother
URL
https://discord.com/invite/tMMKqp6X
文本
Unrecognized Content-Security-Policy directive 'prefetch-src'.
errorother
URL
https://discord.com/invite/tMMKqp6X
文本
Unrecognized Content-Security-Policy directive 'prefetch-src'.
logother
URL
https://discord.com/assets/webMinimal.523baf58465879e15e72.js
文本
%c[ProcessUtilsElectron] font-weight: bold; color: purple; setMemoryInformation not available.
debugother
URL
https://discord.com/assets/webMinimal.523baf58465879e15e72.js
文本
%c[DatabaseManager] font-weight: bold; color: purple; active user changed (now: undefined, was: null, was: undefined)
logother
URL
https://discord.com/assets/webMinimal.523baf58465879e15e72.js
文本
%c[default] font-weight: bold; color: purple; [BUILD INFO] Release Channel: stable, Build Number: 334940, Version Hash: c24443d9843b400aa6e062145937116740d2bffd
logother
URL
https://discord.com/assets/webMinimal.523baf58465879e15e72.js
文本
AppCrashedFatalReport: getLastCrash not supported.
errorother
URL
https://discord.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
文本
Unrecognized Content-Security-Policy directive 'prefetch-src'.
errorother
URL
https://discord.com/cdn-cgi/challenge-platform/scripts/jsd/main.js
文本
Unrecognized Content-Security-Policy directive 'prefetch-src'.

安全标头 · 找到 7 个

复制链接

可以增强 Web 应用程序安全性的 HTTP 响应标头

了解更多...
名称值支持信息
Strict-Transport-Securitymax-age=31536000; includeSubDomains; preload良性声明只能通过安全连接 (HTTPS) 访问网站。

单击可了解更多信息...
X-Frame-OptionsDENY良性表明是否允许浏览器在 <frame>、<iframe>、<embed> 或 <object> 中渲染页面。

单击可了解更多信息...
X-Content-Type-Optionsnosniff良性表明应该遵循 Content-Type 标头中公布的 MIME 类型，并且不得进行更改。

单击可了解更多信息...
Content-Security-Policydefault-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline' 'nonce-MTA0LDkxLDE0OSw0LDk4LDgxLDYxLDIyNQ==' blob: https://cdn.discordapp.com/animations/ https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://js.braintreegateway.com https://assets.braintreegateway.com https://www.paypalobjects.com https://checkout.paypal.com https://c.paypal.com https://kit.cash.app https://static.discord.com https://static-edge.discord.com; style-src 'self' 'unsafe-inline' https://cdn.discordapp.com https://*.hcaptcha.com https://hcaptcha.com https://kit.cash.app https://static.discord.com https://static-edge.discord.com; img-src 'self' blob: data: https://*.discordapp.net https://*.discordapp.com https://*.discord.com https://i.scdn.co https://i.ytimg.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com https://*.youtube.com https://*.giphy.com https://static-cdn.jtvnw.net https://pbs.twimg.com https://assets.braintreegateway.com https://checkout.paypal.com https://c.paypal.com https://*.stats.paypal.com https://api.cash.app; font-src 'self' https://fonts.gstatic.com https://cash-f.squarecdn.com https://static.discord.com https://static-edge.discord.com; connect-src 'self' https://status.discordapp.com https://status.discord.com https://support.discordapp.com https://support.discord.com https://discordapp.com https://discord.com https://discord-attachments-uploads-prd.storage.googleapis.com https://cdn.discordapp.com https://media.discordapp.net https://images-ext-1.discordapp.net https://images-ext-2.discordapp.net https://router.discordapp.net wss://*.discord.gg https://best.discord.media https://latency.discord.media wss://*.discord.media wss://dealer.spotify.com https://api.spotify.com https://music.amazon.com/embed/oembed https://*.sentry.io https://api.twitch.tv https://api.stripe.com https://api.braintreegateway.com https://client-analytics.braintreegateway.com https://*.braintree-api.com https://www.googleapis.com https://*.algolianet.com https://*.hcaptcha.com https://hcaptcha.com https://*.algolia.net ws://127.0.0.1:* http://127.0.0.1:*; media-src 'self' blob: disclip: https://*.discordapp.net https://*.discord.com https://*.discordapp.com https://*.youtube.com https://streamable.com https://vid.me https://twitter.com https://oddshot.akamaized.net https://*.giphy.com https://i.imgur.com https://media.tenor.co https://media.tenor.com https://c.tenor.com; frame-src https://discordapp.com/domain-migration discord: https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://*.hcaptcha.com https://hcaptcha.com https://js.stripe.com https://hooks.stripe.com https://checkout.paypal.com https://c.paypal.com https://assets.braintreegateway.com https://checkoutshopper-live.adyen.com https://kit.cash.app https://player.twitch.tv https://clips.twitch.tv/embed https://player.vimeo.com https://www.youtube.com/embed/ https://www.tiktok.com/player/ https://music.amazon.com/embed/ https://music.amazon.co.uk/embed/ https://music.amazon.de/embed/ https://music.amazon.co.jp/embed/ https://music.amazon.es/embed/ https://music.amazon.fr/embed/ https://music.amazon.it/embed/ https://music.amazon.com.au/embed/ https://music.amazon.in/embed/ https://music.amazon.ca/embed/ https://music.amazon.com.mx/embed/ https://music.amazon.com.br/embed/ https://www.youtube.com/s/player/ https://twitter.com/i/videos/ https://www.funimation.com/player/ https://www.redditmedia.com/mediaembed/ https://open.spotify.com/embed/ https://w.soundcloud.com/player/ https://audius.co/embed/ https://*.watchanimeattheoffice.com https://sessionshare.sp-int.playstation.com/ https://session-share.playstation.com/ https://localhost:* https://*.discordsays.com https://discordappcom.cloudflareaccess.com/; child-src 'self' blob: https://assets.braintreegateway.com https://checkout.paypal.com https://c.paypal.com; prefetch-src 'self' https://cdn.discordapp.com/assets/; 良性控制允许用户代理为指定页面加载的资源。

单击可了解更多信息...
Referrer-Policy—良性控制请求中应该包含多少引荐者信息。

单击可了解更多信息...
Clear-Site-Data—良性控制客户端浏览器为来源服务器存储的数据。

单击可了解更多信息...
X-Permitted-Cross-Domain-Policies—良性控制 Web 客户端（例如 Adobe Flash Player 或 Adobe Acrobat）是否拥有跨域处理数据的权限。

单击可了解更多信息...
Permissions-Policyinterest-cohort=()新允许和拒绝在文档或 iframe 中使用浏览器功能。

单击可了解更多信息...
Cross-Origin-Embedder-Policy—新配置将跨源资源嵌入到文档中。

单击可了解更多信息...
Cross-Origin-Opener-Policysame-origin-allow-popups新确保顶级文档不与跨源文档共享浏览背景组。

单击可了解更多信息...
Cross-Origin-Resource-Policy—新请求浏览器阻止对给定资源的 no-cors 跨源/跨站点请求。

单击可了解更多信息...
X-XSS-Protection1; mode=block停用已弃用。当检测到页面遭受反射式跨站点脚本 (XSS) 攻击时，停止加载页面。

单击可了解更多信息...
Feature-Policy—停用已弃用。替换为 Permissions-Policy 标头。

单击可了解更多信息...
Expect-CT—停用已弃用。选择加入报告和/或执行证书透明度要求。

单击可了解更多信息...
Public-Key-Pins—停用已弃用。允许 HTTPS 网站抵御攻击者使用错误颁发的或其他欺诈性证书进行假冒。

单击可了解更多信息...

性能导航计时

复制链接

PerformanceNavigationTiming 界面会提供关于浏览器文档导航事件的指标

了解更多...

处理卸载事件

事件计时（毫秒）
unloadEventStart0
unloadEventEnd0

重定向

事件计时（毫秒）
redirectStart0
redirectEnd0

服务 Worker 初始化

事件计时（毫秒）
workerStart0

服务 Worker 提取事件

事件计时（毫秒）
fetchStart92

DNS

事件计时（毫秒）
domainLookupStart92
domainLookupEnd92

TCP

事件计时（毫秒）
connectStart95
secureConnectionStart105
connectEnd121

请求

事件计时（毫秒）
requestStart122

响应

事件计时（毫秒）
responseStart1652
responseEnd1699

正在处理

事件计时（毫秒）
domInteractive2422
domContentLoadedEventStart5725
domContentLoadedEventEnd5728
domComplete7444

负载

事件计时（毫秒）
loadEventStart7449
loadEventEnd7449