Summary
A Concise Overview of the scan result of url https://www.whatsapp.com/channel/0029Vaq6rCvAojZ0jH6bD82l
- Document
- HTML
- 1
- StyleSheets
- 8
- Scripts
- 5
- Font
- 0
- Images
- 4
- Links
- 13
- JavaScript Variables
- 16
- Console log messages
- 0
- Network
- Requests
- 19
- Bytes Transferred
- 71.07KB
- Bytes Total
- 223.76KB
- DNS Record
- CNAME Record
- 2
- A Record
- 1
- AAAA Record
- 1
- Technology
- Security
- 1
- Miscellaneous
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|---|
| https://blog.whatsapp.com/ | WhatsApp Blogs for our latest announcementsBlog |
| https://faq.whatsapp.com/ | WhatsApp Help CenterHelp Center |
| https://whatsappbusiness.com/ | For Business |
| https://web.whatsapp.com/ | Login to WhatsApp WebWhatsApp Web |
| https://get.microsoft.com/installer/download/9NKSQGP7F2NH?cid=website_cta_psi | Get WhatsApp from MicrosoftDownload |
| https://web.whatsapp.com/accept?channel_invite_code=0029Vaq6rCvAojZ0jH6bD82l&source_surface= | View in WhatsApp |
| https://x.com/whatsapp | |
| https://www.youtube.com/channel/UCAuerig2N-RZWJT8x75V9yw | Youtube |
| https://www.instagram.com/whatsapp/?hl=en | |
| https://www.facebook.com/profile.php?id=100064758844406 | |
| https://www.threads.com/@whatsapp | Threads |
| https://www.metacareers.com/jobs?divisions[0]=WhatsApp | Careers |
| https://www.facebook.com/brand/resources/whatsapp/whatsapp-brand | Visit WhatsApp's brand centerBrand Center |
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
eventundefinedonbeforetoggleobjectsharedStorageobjectdocumentPictureInPictureobjectfetchLaterfunctiononpageswapobjectonpagerevealobjectfenceobjectonscrollendobjectenvFlushfunctionEnvobject_btldrobject__DEV__numbernow_inlfunction__bigPipeFRnumber__bigPipeCtornumber
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Miscellaneous | ||
HTTP/3 | HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web. | Type: headers Name: alt-svc Regex: h3 |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 31 msGood
- requestTime
- 90 msGood
- dom
- 51 msGood
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | www.whatsapp.com | mmx-ds.cdn.whatsapp.net. | no |
| A | mmx-ds.cdn.whatsapp.net | 57.144.249.32 | no |
| CNAME | www.whatsapp.com | mmx-ds.cdn.whatsapp.net. | no |
| AAAA | mmx-ds.cdn.whatsapp.net | 2a03:2880:f37c:120:face:b00c:0:167 | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
www.whatsapp.com | 10/11/2026 | 10/12/2027 | 1 year 1 day |
static.whatsapp.net | 10/11/2026 | 10/12/2027 | 1 year 1 day |
mmg.whatsapp.net | 10/11/2026 | 10/12/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Alt-Svc | h3=":443"; ma=86400 |
| Cache-Control | private, no-cache, no-store, must-revalidate |
| Connection | keep-alive |
| Content-Encoding | zstd |
| Content-Type | text/html; charset="utf-8" |
| Date | Mon, 12 Oct 2026 21:50:35 GMT |
| Expires | Sat, 01 Jan 2000 00:00:00 GMT |
| Pragma | no-cache |
| Strict-Transport-Security | max-age=31536000; preload; includeSubDomains |
| Transfer-Encoding | chunked |
| Vary | Accept-Encoding |
| X-Content-Type-Options | nosniff |
| X-FB-Connection-Quality | EXCELLENT; q=0.9, rtt=7, rtx=0, c=14, mss=1368, tbw=3384, tp=-1, tpl=-1, uplat=490, ullat=0 |
| X-FB-Debug | 3AqyhymmUpiei8O1ocT3TymJE/ZbebTPv5JA1surrOYvE5NSTDoZ3iQNN+7iKdwyAaHr+Gc5p1M/T0LllypL5g== |
| X-Frame-Options | DENY |
| X-XSS-Protection | 0 |
| content-security-policy | default-src 'self' blob:;script-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-aJNvPgMi' 'self' blob:;style-src *.whatsapp.com *.whatsapp.net 'unsafe-inline' *.facebook.com 'self' data: blob:;connect-src *.whatsapp.com *.whatsapp.net wss://*.facebook.com:* *.fbcdn.net 'self' data: blob:;font-src *.whatsapp.com *.whatsapp.net *.facebook.com static.xx.fbcdn.net data:;img-src *.whatsapp.com *.whatsapp.net *.facebook.com *.fbcdn.net *.fbsbx.com static.xx.fbcdn.net *.cdninstagram.com 'self' data: blob:;media-src *.fbcdn.net 'self' data: blob: *.whatsapp.net;child-src 'self' data: blob:;frame-src *.facebook.com *.whatsapp.com 'self' data: blob:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-aJNvPgMi' 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests; |
| content-security-policy-report-only | default-src 'self' blob:;script-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-aJNvPgMi' 'self' blob:;style-src *.whatsapp.com *.whatsapp.net 'unsafe-inline' *.facebook.com 'self' data: blob:;connect-src *.whatsapp.com *.whatsapp.net wss://*.facebook.com:* *.fbcdn.net 'self' data: blob:;font-src *.whatsapp.com *.whatsapp.net *.facebook.com static.xx.fbcdn.net data:;img-src *.whatsapp.com *.whatsapp.net *.facebook.com *.fbcdn.net *.fbsbx.com static.xx.fbcdn.net *.cdninstagram.com 'self' data: blob:;media-src *.fbcdn.net 'self' data: blob: *.whatsapp.net;child-src 'self' data: blob:;frame-src *.facebook.com *.whatsapp.com 'self' data: blob:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-aJNvPgMi' 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=tr_exp&minimize=0; |
| cross-origin-embedder-policy-report-only | require-corp;report-to="coep_report" |
| cross-origin-opener-policy | same-origin |
| cross-origin-resource-policy | cross-origin |
| document-policy | include-js-call-stacks-in-crash-reports |
| origin-agent-cluster | ?1 |
| permissions-policy | accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" |
| report-to | {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/?device_level=unknown&brsid=7695902077028046704&cpp=C3&cv=1050063423&st=1791841834726"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"} |
| reporting-endpoints | coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.whatsapp.com/whatsapp_browser_error_reports/?device_level=unknown&brsid=7695902077028046704&cpp=C3&cv=1050063423&st=1791841834726", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/" |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|---|
| default-src | 'self'blob:;script-src*.whatsapp.com*.whatsapp.net*.facebook.com*.facebook.net'nonce-aJNvPgMi''self'blob:;style-src*.whatsapp.com*.whatsapp.net'unsafe-inline'*.facebook.com'self'data:blob:;connect-src*.whatsapp.com*.whatsapp.netwss://*.facebook.com:**.fbcdn.net'self'data:blob:;font-src*.whatsapp.com*.whatsapp.net*.facebook.comstatic.xx.fbcdn.netdata:;img-src*.whatsapp.com*.whatsapp.net*.facebook.com*.fbcdn.net*.fbsbx.comstatic.xx.fbcdn.net*.cdninstagram.com'self'data:blob:;media-src*.fbcdn.net'self'data:blob:*.whatsapp.net;child-src'self'data:blob:;frame-src*.facebook.com*.whatsapp.com'self'data:blob:;manifest-src'self'data:blob:;object-src'self'data:blob:;worker-src*.whatsapp.com*.whatsapp.net*.facebook.com*.facebook.net'nonce-aJNvPgMi''self'data:blob:;block-all-mixed-content;upgrade-insecure-requests |
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| wa_csrf | kIwHHpm1nMkMrhcO_pgbVw | .whatsapp.com/ | 12/31/1969, 11:59:59 PM | yes | yes |
| wa_lang_pref | en | .whatsapp.com/ | 10/19/2026, 9:50:35 PM | yes | no |
| wa_ul | 6ad04a4e-4676-44d7-a62c-b66b241c78bb | .www.whatsapp.com/ | 1/10/2027, 9:50:35 PM | yes | yes |