SYS.SCANNER
NEW SCAN

Analyze web.whatsapp.com

Diagnostic completed at 2026-08-26 16:29:41 UTC

Community Trust:
Security Score 90/100
Performance (FCP)
Fetching...
LIVE PREVIEW

Comprehensive Domain Audit

Server Ping (Port 443)
12 ms
Reverse IP Lookup
whatsapp-cdn-shv-02-kul2.fbcdn.net
HTTP/2 Status
HTTP/2 Supported
Brotli Compression
Enabled (br)
File MIME Type
text/html; charset="utf-8"
Redirect Chain
0 Redirect(s)
Google Cache Checker
View Snapshot
Admin Gravatar
contact@
Gravatar

Hosting & IP Checker

  • Server IP Address 163.70.137.60
  • ISP / Hosting Provider Facebook, Inc.
  • Geographic Location Kuala Lumpur, Malaysia
  • IP Spam Reputation Clean (No Blacklists)
MALWARE & LINK AUDIT

Link Scanner & Threat Metrics

  • Total Scanned Links 5 Links
  • Internal vs External 0 Internal / 5 External
  • Link Security Status Clean
Cloudflare Radar Standard Risk Profile (API Quota Limit)
Est. Monthly Traffic
3.7K
Active Visitor Footprint
WHOIS Information
Private / N/A
Age: 11 Years (Expires: N/A)
SSL Certificate
VALID SSL
Expires in 7 days

HTTP Headers Lookup

HTTP/2 200 
content-encoding: br
set-cookie: wa_ul=5c1515c5-6825-4d22-8edc-f987fc1e7b38; expires=Tue, 24-Nov-2026 16:29:39 GMT; Max-Age=7776000; path=/; domain=.web.whatsapp.com; secure; httponly; SameSite=Lax
accept-ch-lifetime: 4838400
accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown&brsid=7678378375418769072&comet_app_key=17&cpp=C3&cv=1046081597&st=1787761779138", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/"
report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/web.whatsapp.com\/ajax\/whatsapp_error_reports\/?device_level=unknown&brsid=7678378375418769072&comet_app_key=17&cpp=C3&cv=1046081597&st=1787761779138"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"}
content-security-policy-report-only: default-src 'self' blob:;script-src blob: 'self' 'nonce-JnYSoG0W' 'report-sample' https://static.whatsapp.net https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src 'self' blob:;script-src blob: 'self' 'nonce-JnYSoG0W' 'report-sample' https://static.whatsapp.net 'unsafe-eval' https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;upgrade-insecure-requests;
content-security-policy: frame-ancestors https://*.whatsapp.com https://whatsapp.com;
document-policy: force-load-at-top
document-policy: include-js-call-stacks-in-crash-reports
permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=*, bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(self), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=*, private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(self), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
cross-origin-resource-policy: cross-origin
origin-trial: AojvwgvBFizBFcnJMB8LbCdT9eDSte7tVJfVLHoVJy1J/0/IZz8Fto9n7e3x2BE1Vu40AbDJwupVGIV6gX1kqggAAAB1eyJvcmlnaW4iOiJodHRwczovL3dlYi53aGF0c2FwcC5jb206NDQzIiwiZmVhdHVyZSI6IkNyYXNoUmVwb3J0aW5nU3RvcmFnZUFQSSIsImV4cGlyeSI6MTc3NjcyOTYwMCwiaXNTdWJkb21haW4iOnRydWV9
cross-origin-embedder-policy: require-corp
cross-origin-opener-policy: same-origin
x-content-type-options: nosniff
x-xss-protection: 0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
vary: Accept-Encoding, User-Agent, Accept-Language
vary: Accept-Encoding
cache-control: private, no-cache, no-store, must-revalidate
origin-agent-cluster: ?1
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-type: text/html; charset="utf-8"
x-fb-debug: RuRcnVIS3+brijYWjZeBUZD9Z/z+3KPk7DOVH2ngyOgTDPldKe9qOkRstJ3EzNl5Tmbta0erNjEl34HUog9LzQ==
date: Wed, 26 Aug 2026 16:29:39 GMT
x-fb-connection-quality: EXCELLENT; q=0.9, rtt=1, rtx=0, c=15, mss=1380, tbw=2725, tp=-1, tpl=-1, uplat=354, ullat=0
alt-svc: h3=":443"; ma=86400

DNS Infrastructure Records

Type Host Target / IP / Value
A mmx-ds.cdn.whatsapp.net 163.70.137.60
TXT mmx-ds.cdn.whatsapp.net v=spf1 a ~all
AAAA mmx-ds.cdn.whatsapp.net 2a03:2880:f27f:1c0:face:b00c::167

Meta Tags Checker

Meta Title

N/A

Meta Description

Log in to WhatsApp Web for simple, reliable and private messaging on your desktop. Send and receive messages and files with ease, all for free.

Main Heading (H1)

WhatsApp works with Safari 15+

Application Security Headers

  • Strict-Transport-Security (HSTS) ENABLED
  • Content-Security-Policy (CSP) ENABLED
  • X-Frame-Options (Clickjacking) MISSING
    💡 Fix: Add Header always append X-Frame-Options SAMEORIGIN to prevent clickjacking attacks.
  • X-Content-Type-Options (MIME) ENABLED

Frequently Asked Questions

Q: Is web.whatsapp.com safe to visit?

Based on our scan, web.whatsapp.com is safe. It has a valid SSL certificate and is clear of active network threats.

Q: Who hosts web.whatsapp.com?

web.whatsapp.com is currently hosted on IP 163.70.137.60 by Facebook, Inc..

Q: Is the web.whatsapp.com IP blacklisted?

No, the server IP is clean on major DNSBL lists like Spamhaus.

Top 10 Similar / Trending Domains Related Network Reports

jbtech.com u.to mychart.urmc.rochester.edu citrix.com shieldforum.net larportal.com gharidetergent.com kmaeshop.com nic.ru sudoku.cba.si

Detailed Analysis Report for web.whatsapp.com

This detailed intelligence report for web.whatsapp.com provides technical parameters regarding infrastructure, DNS lookup queries, reverse IP addresses, and HTTP/2 network capabilities. Mapped to server IP 163.70.137.60 under Facebook, Inc..

Features such as Brotli compression checking, file MIME type verification, redirect chain mapping, IP Spam blacklist checking, live link malware analysis, and Cloudflare safe URL status assist webmasters in securing and optimizing their infrastructure.

Recently Analyzed Websites

Showing Latest 20
rochestertowing.net funbe20.com theolympian.com en.androeed.ru mangahere.com mlwbd.is phonebook.lanl.gov laarmeria.hn tempusunlimited.org mygay.net top81.ws shtyle.fm sidehustlestack.co nepalets.com meesho.com samsung.com email.secureserver.net ca.ufreevpn.com live.com mangago.me