Ports
Duration
Date
IP
Nmap scan report for web.whatsapp.com (157.240.234.60)
Host is up (0.044s latency).
Other addresses for web.whatsapp.com (not scanned): 2a03:2880:f228:1c1:face:b00c:0:167
rDNS record for 157.240.234.60: whatsapp-cdn-shv-02-sof1.fbcdn.net
PORT STATE SERVICE
80/tcp open http
| http-headers:
| Content-Type: text/plain
| Server: proxygen-bolt
| Proxy-Status: http_request_error; e_proxy="AcSleck3MQOIm9H4DLZX-AziWgA1jupEnAzfeStgqh3tacVnnh9ax-JxEDrAgzVNrPXD7VWjbbifOgk"; e_fb_vipaddr="AcRiJbN46bqfycGaqzUIfETGSXDVTOM3gJr-nvh_hap10oOvoCWyuaVo8G2Td-acgxwu36wKKx0"; e_fb_twtaskhandle="AcRcQhhST4T_klOqKnnWkkKoBRofg1FSMBuVpQGY8zIbkxoXiJUY0_rVE4Dh_LvvESX0LCYp0x0un9pLbUUb0XZKOCCzzJ6Rr7A"; e_fb_zone="AcRIhyzOSyqDCTTI8XIXApyZlpoqM9R3FAiWiIt_9ExL_8AwS1LvHcxdFbbcKA"; e_clientaddr="AcTIWLEr_wj8TIe5xpvwtxF7tu7IujcgB9J5UYUO2cb24-zBDqiYlrB3VGsqHW_yvjQxZhrzcGkHGB9CtlU", http_request_error; e_proxy="AcQ0aovLAm_1fJ-rCmsYhcKmCOQwK12MptRzuLz9gFMb-e2ZdvoNEYA10FfDBW31TohQFW8OTFSvBz4"; e_fb_vipaddr="AcTwuoSy7VgXXV0WDkw_CIX_fekdtSpSDE0Aq5I5lboaealfgCS9yJtpxIxtzLEIRUg970GTZfs"; e_fb_twtaskhandle="AcR_WvlLuUSUe6yk8XAN7BtGwbzMov1kxyMXH4aJzEe3URCLxdCHM3aYzjlTVMbxZQKTBPKig5MRVo2MKT9YeW_N3J0T-Dg-VUE"; e_fb_zone="AcQoEcXQ2WRzmXShHQRpPByetw7YYsWxL9RnfPyoNWktAiYsnMIC7RlSamcHRA"; e_clientaddr="AcTZkkVaLB0kvw6oTyJRy-WYakkKobqYopLnbHfEvXR6Ln-KbSdvAajNm__2GUmbtshtI3YSG32orwILB4g"
| Date: Sun, 13 Sep 2026 14:43:50 GMT
| Connection: close
| Content-Length: 0
|
|_ (Request type: GET)
443/tcp open https
| http-headers:
| Set-Cookie: wa_ul=6375e913-85d1-427b-8713-7d7e1f9249b7; expires=Sat, 12-Dec-2026 14:43:49 GMT; Max-Age=7776000; path=/; domain=.web.whatsapp.com; secure; httponly; SameSite=Lax
| accept-ch-lifetime: 4838400
| accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-Model
| reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", default="https://web.whatsapp.com/ajax/whatsapp_error_reports/?device_level=unknown&brsid=7685030634986872384&comet_app_key=17&cpp=C3&cv=1047421503&st=1789310629961", permissions_policy="https://www.whatsapp.com/whatsapp_browser_error_reports/"
| report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":259200,"endpoints":[{"url":"https:\/\/web.whatsapp.com\/ajax\/whatsapp_error_reports\/?device_level=unknown&brsid=7685030634986872384&comet_app_key=17&cpp=C3&cv=1047421503&st=1789310629961"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.whatsapp.com\/whatsapp_browser_error_reports\/"}],"group":"permissions_policy"}
| content-security-policy-report-only: default-src 'self' blob:;script-src blob: 'self' 'nonce-YawkZqVi' 'report-sample' https://static.whatsapp.net https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
| content-security-policy: default-src 'self' blob:;script-src blob: 'self' 'nonce-YawkZqVi' 'report-sample' https://static.whatsapp.net 'unsafe-eval' https://*.youtube.com https://maps.googleapis.com https://maps.gstatic.com https://lens.google.com/upload;style-src data: blob: 'self' 'unsafe-inline' https://static.whatsapp.net https://fonts.googleapis.com;connect-src 'self' https://*.whatsapp.net https://www.facebook.com blob: https://crashlogs.whatsapp.net/wa_clb_data https://crashlogs.whatsapp.net/wa_fls_upload_check wss://*.web.whatsapp.com wss://web.whatsapp.com wss://web-fallback.whatsapp.com https://acs.whatsapp.com https://www.whatsapp.com https://dyn.web.whatsapp.com https://graph.whatsapp.com/graphql/ https://graph.facebook.com/graphql https://*.wt.whatsapp.com ws://web.whatsapp.com wss://web.whatsapp.com:5222 https://graph.facebook.com data: https://*.tenor.co https://*.giphy.com https://maps.googleapis.com https://lens.google.com/upload https://*.google.com https://meta-ohttp-relay-prod.fastly-edge.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com;font-src data: 'self' https://static.whatsapp.net https://fonts.gstatic.com;img-src 'self' data: blob: https://*.whatsapp.net https://*.fbcdn.net https://*.facebook.com *.tenor.co *.tenor.com *.giphy.com https://*.ytimg.com *.youtube.com https://maps.googleapis.com/maps/api/staticmap https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;media-src 'self' https://*.whatsapp.net https://*.cdninstagram.com https://*.fbcdn.net blob: mediastream: data: *.tenor.co *.tenor.com https://*.giphy.com;child-src 'self' blob: data:;frame-src 'self' blob: https://*.whatsapp.net/flows-v2/wa-web/ https://flows.whatsapp.net/flows/cache_management/ https://*.facebook.com/payments/3ds_cardinal_init/ https://webtp.whatsapp.net data: https://*.youtube.com https://whatsapp-api.arkoselabs.com https://iframe.arkoselabs.com https://trustly.one/ https://*.trustly.one/ https://paywithmybank.com/ https://*.paywithmybank.com/;manifest-src 'self' blob: data:;object-src 'self' blob: data: https://lens.google.com/upload;worker-src *.whatsapp.com/static_resources/webworker_v1/init_script/ *.whatsapp.com/sw.js *.whatsapp.com/guest-sw.js *.whatsapp.com/guest-events-sw.js *.whatsapp.com/static_resources/webworker/pdf-worker/ *.whatsapp.com/static_resources/webworker/init_script/ *.whatsapp.com/static_resources/webworker_v4/init_script/;block-all-mixed-content;upgrade-insecure-requests;
| content-security-policy: frame-ancestors https://*.whatsapp.com https://whatsapp.com;
| document-policy: force-load-at-top
| document-policy: include-js-call-stacks-in-crash-reports
| permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=*, bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(self), compute-pressure=(self), display-capture=(self), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=*, private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(self), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
| cross-origin-resource-policy: cross-origin
| cross-origin-embedder-policy: require-corp
| cross-origin-opener-policy: same-origin;report-to="coop_report"
| X-Content-Type-Options: nosniff
| X-XSS-Protection: 0
| Pragma: no-cache
| Expires: Sat, 01 Jan 2000 00:00:00 GMT
| Vary: Accept-Encoding, User-Agent, Accept-Language
| Vary: Accept-Encoding
| Cache-Control: private, no-cache, no-store, must-revalidate
| origin-agent-cluster: ?1
| Strict-Transport-Security: max-age=63072000; includeSubDomains; preload
| Content-Type: text/html; charset="utf-8"
| X-FB-Debug: jMuomUv2GnRAesSx9OcYs5yu5/TV9dFi5Mcg2vCtU7AiFjhEh1q67G+4c3sY8LKmJE2ocWNx7kFh/FoRPEr/wA==
| Date: Sun, 13 Sep 2026 14:43:50 GMT
| X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=46, rtx=0, c=14, mss=1380, tbw=3384, tp=-1, tpl=-1, uplat=167, ullat=0
| Alt-Svc: h3=":443"; ma=86400
| Connection: close
|
|_ (Request type: HEAD)
631/tcp filtered ipp
3872/tcp filtered oem-agent
5800/tcp filtered vnc-http
7080/tcp filtered empowerid
8000/tcp filtered http-alt
8080/tcp filtered http-proxy
8088/tcp filtered radan-http
8180/tcp filtered unknown
8443/tcp filtered https-alt
Nmap done: 1 IP address (1 host up) scanned in 2.42 seconds
Features
5 scans/day
Daily API Calls - 20 request
Save log
Public scan
OSINT scan
Unlisted scan
Private scan
No Ads
Remove after scan
Remove scan result
Additional methods for scan
This option is suitable for beginners who want to check if their host has any open ports accessible from the outside.
Lifetime
Features
10 000 scans/day
Daily API Calls - 100 000 request
Save log
Public scan
OSINT scan
Unlisted scan
Private scan
No Ads
Remove after scan
Remove scan result
Additional methods for scan
This option is best for professionals who need to test their host's open ports from an external source.
Billed Annually @ $45.00 - 50% discount