Summary
A Concise Overview of the scan result of url https://web.whatsapp.com/
- Document
- HTML
- 2
- StyleSheets
- 1
- Scripts
- 9
- Font
- 0
- Images
- 1
- Links
- 0
- JavaScript Variables
- 36
- Console log messages
- 0
- Network
- Requests
- 13
- Bytes Transferred
- 109.94KB
- Bytes Total
- 792.08KB
- DNS Record
- CNAME Record
- 2
- A Record
- 1
- AAAA Record
- 1
- Technology
- Security
- 1
- Miscellaneous
- 1
Document
Links
The outgoing links identified from the page.
| Link | Text |
|---|
JavaScript Variables
Global JavaScript variables are variables that are defined outside of any function or block scope in JavaScript.
onpagerevealobjecteventundefinedonbeforetoggleobjectoncommandobjectonscrollendobjectonanimationcancelobjectcrashReportobjectdocumentPictureInPictureobjectfetchLaterfunctionviewportobjectonpageswapobjectfenceobjectonscrollsnapchangeobjectonscrollsnapchangingobjectongamepadconnectedobjectongamepaddisconnectedobjectdataElementobjectcopyVariablesfunctionvariablesobjectEnvobject__annotatorfunction__d_stubobject__dfunction__rl_stubobjectrequireLazyfunction_btldrobject_nowInlfunction_qplInlobjectTHEME_KEYstringSYSTEM_THEME_MODEstringsplashscreenVariableMapobjectprefersColorSchemeModestringprefersDarkobjectprefersLightobjectsystemThemeModeSetbooleanconfiguredThemeobject
Technology
The technologies identified are present on the scanned URL.
| Name | Description | Detected patterns |
|---|---|---|
| Security | ||
| HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | Type: headers Name: strict-transport-security Regex: (?:) | |
| Miscellaneous | ||
HTTP/3 | HTTP/3 is the third major version of the Hypertext Transfer Protocol used to exchange information on the World Wide Web. | Type: headers Name: alt-svc Regex: h3 |
Performance
The speed and efficiency of the scanned URL loads and displays its content.
- dns
- 1 msGood
- tcp
- 63 msGood
- requestTime
- 144 msGood
- dom
- 361 msNeeds Improvement
DNS Record
A DNS record maps a domain name to an IP address or other resource information.
| Type | Name | Content | DNSSEC |
|---|---|---|---|
| CNAME | web.whatsapp.com | mmx-ds.cdn.whatsapp.net. | no |
| A | mmx-ds.cdn.whatsapp.net | 57.144.223.32 | no |
| CNAME | web.whatsapp.com | mmx-ds.cdn.whatsapp.net. | no |
| AAAA | mmx-ds.cdn.whatsapp.net | 2a03:2880:f382:120:face:b00c:0:167 | no |
SSL Certificate
An SSL certificate is a digital certificate that verifies the authenticity and encrypts the communication between a website and its visitors.
| Subject | Issue date | Expiry date | Valid |
|---|---|---|---|
web.whatsapp.com | 10/27/2026 | 10/28/2027 | 1 year 1 day |
static.whatsapp.net | 10/27/2026 | 10/28/2027 | 1 year 1 day |
HTTP Headers
HTTP Header
An HTTP header is a component of an HTTP request or response that contains additional information about the message being sent or received.
| Name | Value |
|---|---|
| Alt-Svc | h3=":443"; ma=86400 |
| Cache-Control | private, no-cache, no-store, must-revalidate |
| Connection | keep-alive |
| Content-Encoding | zstd |
| Content-Type | text/html; charset="utf-8" |
| Date | Wed, 28 Oct 2026 15:19:06 GMT |
| Expires | Sat, 01 Jan 2000 00:00:00 GMT |
| Pragma | no-cache |
| Strict-Transport-Security | max-age=63072000; includeSubDomains; preload |
| Transfer-Encoding | chunked |
| Vary | Accept-Encoding, User-Agent, Accept-Language Accept-Encoding |
| X-Content-Type-Options | nosniff |
| X-FB-Connection-Quality | EXCELLENT; q=0.9, rtt=1, rtx=0, c=13, mss=1368, tbw=3382, tp=-1, tpl=-1, uplat=30, ullat=0 |
| X-FB-Debug | 4fUoiJdyuqcMlJ36GPWhf6X5goBzYvCL57TemVMIVKlrY5F6EgaCjuYhac7oFFRXlXgGMI5o8VAxUGLJZGsEYg== |
| X-XSS-Protection | 0 |
| accept-ch | viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model |
| accept-ch-lifetime | 4838400 |
| content-security-policy | default-src 'self' blob: 'wasm-unsafe-eval';script-src blob: 'self' 'nonce-tCzVNEMN' 'report-sample' https://static.whatsapp.net 'wasm-unsafe-eval' https://*.fbcdn.net https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://*.fbcdn.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com https://*.fbcdn.net data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com wss://hatch.metaaivm.com https://hatch-api.meta.ai https://api.muse.ai;font-src data: 'self' https://static.whatsapp.net https://*.fbcdn.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;upgrade-insecure-requests; frame-ancestors https://*.whatsapp.com https://whatsapp.com; |
| content-security-policy-report-only | default-src 'self' blob: 'wasm-unsafe-eval';script-src blob: 'self' 'nonce-tCzVNEMN' 'report-sample' https://static.whatsapp.net 'wasm-unsafe-eval' https://*.fbcdn.net https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://*.fbcdn.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com https://*.fbcdn.net data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com wss://hatch.metaaivm.com https://hatch-api.meta.ai https://api.muse.ai;font-src data: 'self' https://static.whatsapp.net https://*.fbcdn.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.giphy.com https://*.ytimg.com *.youtube.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=tr_exp&minimize=0; |
| cross-origin-embedder-policy | require-corp |
| cross-origin-opener-policy | same-origin |
| cross-origin-resource-policy | cross-origin |
| document-policy | force-load-at-top include-js-call-stacks-in-crash-reports |
| origin-agent-cluster | ?1 |
| permissions-policy | accelerometer=(), attribution-reporting=(), autoplay=*, bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(self), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=*, private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(self), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" |
| report-to | {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/web.whatsapp.com\/ajax\/whatsapp_error_reports\/?device_level=unknown&brsid=7701738560019613065&comet_app_key=17&cpp=C3&cv=1052045173&st=1793200746109"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"} |
| reporting-endpoints | coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown&brsid=7701738560019613065&comet_app_key=17&cpp=C3&cv=1052045173&st=1793200746109", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/" |
Content Security Policy
Content Security Policy (CSP) is a security mechanism that helps prevent cross-site scripting (XSS) and other code injection attacks by specifying which content sources are allowed to be loaded on a web page.
| Name | Value |
|---|---|
| default-src | 'self'blob:'wasm-unsafe-eval';script-srcblob:'self''nonce-tCzVNEMN''report-sample'https://static.whatsapp.net'wasm-unsafe-eval'https://*.fbcdn.nethttps://*.youtube.comhttps://maps.googleapis.comhttps://maps.gstatic.comhttps://lens.google.com/upload;style-srcdata:blob:'self''unsafe-inline'https://static.whatsapp.nethttps://*.fbcdn.nethttps://fonts.googleapis.com;connect-src'self'https://*.whatsapp.nethttps://www.facebook.comblob:https://crashlogs.whatsapp.net/wa_clb_datahttps://crashlogs.whatsapp.net/wa_fls_upload_checkwss://*.web.whatsapp.comwss://web.whatsapp.comwss://web-fallback.whatsapp.comhttps://acs.whatsapp.comhttps://www.whatsapp.comhttps://dyn.web.whatsapp.comhttps://graph.whatsapp.com/graphql/https://graph.facebook.com/graphqlhttps://*.wt.whatsapp.comws://web.whatsapp.comwss://web.whatsapp.com:5222https://graph.facebook.comhttps://*.fbcdn.netdata:https://*.tenor.cohttps://*.giphy.comhttps://maps.googleapis.comhttps://lens.google.com/uploadhttps://*.google.comhttps://meta-ohttp-relay-prod.fastly-edge.comhttps://whatsapp-api.arkoselabs.comhttps://iframe.arkoselabs.comwss://hatch.metaaivm.comhttps://hatch-api.meta.aihttps://api.muse.ai;font-srcdata:'self'https://static.whatsapp.nethttps://*.fbcdn.nethttps://fonts.gstatic.com;img-src'self'data:blob:https://*.whatsapp.nethttps://*.fbcdn.nethttps://*.facebook.com*.tenor.co*.tenor.com*.giphy.comhttps://*.ytimg.com*.youtube.comhttps://maps.googleapis.com/maps/api/staticmaphttps://trustly.one/https://*.trustly.one/https://paywithmybank.com/https://*.paywithmybank.com/;media-src'self'https://*.whatsapp.nethttps://*.cdninstagram.comhttps://*.fbcdn.netblob:mediastream:data:*.tenor.co*.tenor.comhttps://*.giphy.com;child-src'self'blob:data:;frame-src'self'blob:https://*.whatsapp.net/flows-v2/wa-web/https://flows.whatsapp.net/flows/cache_management/https://*.facebook.com/payments/3ds_cardinal_init/https://webtp.whatsapp.netdata:https://*.youtube.comhttps://whatsapp-api.arkoselabs.comhttps://iframe.arkoselabs.comhttps://trustly.one/https://*.trustly.one/https://paywithmybank.com/https://*.paywithmybank.com/;manifest-src'self'blob:data:;object-src'self'blob:data:https://lens.google.com/upload;worker-src*.whatsapp.com/static_resources/webworker_v1/init_script/*.whatsapp.com/sw.js*.whatsapp.com/guest-sw.js*.whatsapp.com/guest-events-sw.js*.whatsapp.com/static_resources/webworker/pdf-worker/*.whatsapp.com/static_resources/webworker/init_script/*.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;upgrade-insecure-requests; frame-ancestorshttps://*.whatsapp.comhttps://whatsapp.com |
Cookies
Cookies are small pieces of data stored on a user's web browser to track and remember information about their browsing activity on a website.
| Name | Value | Domain/Path | Expires | Secure | HTTP Only |
|---|---|---|---|---|---|
| wa_ul | c8b8f031-37fc-4a7b-822d-830dcef0d07e | .web.whatsapp.com/ | 1/26/2027, 3:19:06 PM | yes | yes |