Nmap scan report for web.whatsapp.com (157.240.234.60)
Host is up (0.044s latency).
Other addresses for web.whatsapp.com (not scanned): 2a03:2880:f228:1c1:face:b00c:0:167
rDNS record for 157.240.234.60: whatsapp-cdn-shv-02-sof1.fbcdn.net

PORT     STATE    SERVICE
80/tcp   open     http
| http-headers: 
|   Content-Type: text/plain
|   Server: proxygen-bolt
|   Proxy-Status: http_request_error; e_proxy="AcSleck3MQOIm9H4DLZX-AziWgA1jupEnAzfeStgqh3tacVnnh9ax-JxEDrAgzVNrPXD7VWjbbifOgk"; e_fb_vipaddr="AcRiJbN46bqfycGaqzUIfETGSXDVTOM3gJr-nvh_hap10oOvoCWyuaVo8G2Td-acgxwu36wKKx0"; e_fb_twtaskhandle="AcRcQhhST4T_klOqKnnWkkKoBRofg1FSMBuVpQGY8zIbkxoXiJUY0_rVE4Dh_LvvESX0LCYp0x0un9pLbUUb0XZKOCCzzJ6Rr7A"; e_fb_zone="AcRIhyzOSyqDCTTI8XIXApyZlpoqM9R3FAiWiIt_9ExL_8AwS1LvHcxdFbbcKA"; e_clientaddr="AcTIWLEr_wj8TIe5xpvwtxF7tu7IujcgB9J5UYUO2cb24-zBDqiYlrB3VGsqHW_yvjQxZhrzcGkHGB9CtlU", http_request_error; e_proxy="AcQ0aovLAm_1fJ-rCmsYhcKmCOQwK12MptRzuLz9gFMb-e2ZdvoNEYA10FfDBW31TohQFW8OTFSvBz4"; e_fb_vipaddr="AcTwuoSy7VgXXV0WDkw_CIX_fekdtSpSDE0Aq5I5lboaealfgCS9yJtpxIxtzLEIRUg970GTZfs"; e_fb_twtaskhandle="AcR_WvlLuUSUe6yk8XAN7BtGwbzMov1kxyMXH4aJzEe3URCLxdCHM3aYzjlTVMbxZQKTBPKig5MRVo2MKT9YeW_N3J0T-Dg-VUE"; e_fb_zone="AcQoEcXQ2WRzmXShHQRpPByetw7YYsWxL9RnfPyoNWktAiYsnMIC7RlSamcHRA"; e_clientaddr="AcTZkkVaLB0kvw6oTyJRy-WYakkKobqYopLnbHfEvXR6Ln-KbSdvAajNm__2GUmbtshtI3YSG32orwILB4g"
|   Date: Sun, 13 Sep 2026 14:43:50 GMT
|   Connection: close
|   Content-Length: 0
|   
|_  (Request type: GET)
443/tcp  open     https
| http-headers: 
|   Set-Cookie: wa_ul=6375e913-85d1-427b-8713-7d7e1f9249b7; expires=Sat, 12-Dec-2026 14:43:49 GMT; Max-Age=7776000; path=/; domain=.web.whatsapp.com; secure; httponly; SameSite=Lax
|   accept-ch-lifetime: 4838400
|   accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
|   reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown&brsid=7685030634986872384&comet_app_key=17&cpp=C3&cv=1047421503&st=1789310629961", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/"
|   report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/web.whatsapp.com\/ajax\/whatsapp_error_reports\/?device_level=unknown&brsid=7685030634986872384&comet_app_key=17&cpp=C3&cv=1047421503&st=1789310629961"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"}
|   content-security-policy-report-only: default-src 'self' blob:;script-src blob: 'self' 'nonce-YawkZqVi' 'report-sample' https://static.whatsapp.net https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
|   content-security-policy: default-src 'self' blob:;script-src blob: 'self' 'nonce-YawkZqVi' 'report-sample' https://static.whatsapp.net 'unsafe-eval' https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;upgrade-insecure-requests;
|   content-security-policy: frame-ancestors https://*.whatsapp.com https://whatsapp.com;
|   document-policy: force-load-at-top
|   document-policy: include-js-call-stacks-in-crash-reports
|   permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=*, bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(self), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=*, private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(self), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
|   cross-origin-resource-policy: cross-origin
|   cross-origin-embedder-policy: require-corp
|   cross-origin-opener-policy: same-origin;report-to="coop_report"
|   X-Content-Type-Options: nosniff
|   X-XSS-Protection: 0
|   Pragma: no-cache
|   Expires: Sat, 01 Jan 2000 00:00:00 GMT
|   Vary: Accept-Encoding, User-Agent, Accept-Language
|   Vary: Accept-Encoding
|   Cache-Control: private, no-cache, no-store, must-revalidate
|   origin-agent-cluster: ?1
|   Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
|   Content-Type: text/html; charset="utf-8"
|   X-FB-Debug: jMuomUv2GnRAesSx9OcYs5yu5/TV9dFi5Mcg2vCtU7AiFjhEh1q67G+4c3sY8LKmJE2ocWNx7kFh/FoRPEr/wA==
|   Date: Sun, 13 Sep 2026 14:43:50 GMT
|   X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=46, rtx=0, c=14, mss=1380, tbw=3384, tp=-1, tpl=-1, uplat=167, ullat=0
|   Alt-Svc: h3=":443"; ma=86400
|   Connection: close
|   
|_  (Request type: HEAD)
631/tcp  filtered ipp
3872/tcp filtered oem-agent
5800/tcp filtered vnc-http
7080/tcp filtered empowerid
8000/tcp filtered http-alt
8080/tcp filtered http-proxy
8088/tcp filtered radan-http
8180/tcp filtered unknown
8443/tcp filtered https-alt

Nmap done: 1 IP address (1 host up) scanned in 2.42 seconds