whatsapp.com

Live preview

This site sends "X-Frame-Options: DENY", which blocks embedding it here.

Since whatsapp.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

text/html; charset="utf-8"

Cache-Control

private, no-cache, no-store, must-revalidate

Content-Encoding

Not sent

Security

Content-Security-Policy

default-src 'self' blob:;script-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-Kc4CvxKh' 'self' blob:;style-src *.whatsapp.com *.whatsapp.net 'unsafe-inline' *.facebook.com 'self' data: blob:;connect-src *.whatsapp.com *.whatsapp.net wss://*.facebook.com:* *.fbcdn.net 'self' data: blob:;font-src *.whatsapp.com *.whatsapp.net *.facebook.com static.xx.fbcdn.net data:;img-src *.whatsapp.com *.whatsapp.net *.facebook.com *.fbcdn.net *.fbsbx.com static.xx.fbcdn.net *.cdninstagram.com 'self' data: blob:;media-src *.fbcdn.net 'self' data: blob:;child-src 'self' data: blob:;frame-src *.facebook.com *.whatsapp.com 'self' data: blob:;manifest-src 'self' data: blob:;object-src 'self' data: blob:;worker-src *.whatsapp.com *.whatsapp.net *.facebook.com *.facebook.net 'nonce-Kc4CvxKh' 'self' data: blob:;block-all-mixed-content;upgrade-insecure-requests;

Strict-Transport-Security

max-age=31536000; preload; includeSubDomains

X-Frame-Options

DENY

X-Content-Type-Options

nosniff

Referrer-Policy

Not sent

Permissions-Policy

accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"

What each security header does

Redirect chain

1. 1.http://whatsapp.com/HTTP 301

   → https://whatsapp.com/

2. 2.https://whatsapp.com/HTTP 302

   → https://www.whatsapp.com/

3. 3.https://www.whatsapp.com/HTTP 200

Meta tags

Title

WhatsApp | Secure and Reliable Free Private Messaging and Calling

Description

Use WhatsApp Messenger to stay in touch with friends and family. WhatsApp is free and offers simple, secure, reliable messaging and calling, available on phones all over the world.

Canonical

https://www.whatsapp.com

Robots

index,follow,noodp

Generator

Not set

Open Graph title

WhatsApp | Secure and Reliable Free Private Messaging and Calling

Open Graph description

Use WhatsApp Messenger to stay in touch with friends and family. WhatsApp is free and offers simple, secure, reliable messaging and calling, available on phones all over the world.

Open Graph image

https://static.whatsapp.net/rsrc.php/v4/yO/r/rukeqTVNJDY.png

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

11

Disallow rules (other agents)

14

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains