Audit: whatsapp.com

Audited on 2 Sep 2026

Needs attention

  • TLS certificate expires in 8 days If auto-renewal is configured, it has not run yet.
  • 6 AI crawlers are blocked Intentional for some sites, accidental for most: GPTBot, ClaudeBot, PerplexityBot, Google-Extended, Applebot-Extended.
75
overall score
On-page SEO
0
Crawlability
100
TLS & security
83
Network
83
Email
100
DNS
83

The site is up · responded in 414 ms

  • Reachable 0% of the last 24 hours
  • Outages cost you traffic and rankings while they last, and they rarely happen while you are watching.

On-page SEO

0/100
  • ? Page indexing The page was not fetched
  • ? On-page markup The page was not fetched

Crawlability

100/100
  • robots.txt present + valid Parsed cleanly · 1 sitemap(s) declared
  • Sitemap.xml lists URLs 97 URL(s) · newest 2026-09-01

TLS & security

83/100
  • TLS handshake succeeds
  • Certificate not expiring soon -11 days left

Network

83/100
  • Hostname resolves to an A record 57.144.21.32
  • ! Server header does not leak version

Email

100/100
  • MX records valid + reachable
  • SPF record present v=spf1 include:_spf.fb.com include:facebookmail.com -all
  • DMARC record present
  • DMARC policy enforced p=reject
  • DKIM key published selector=google, ~1296-bit

DNS

83/100
  • A records resolve
  • NS records present
  • MX records present
  • DNS resolvers agree on the same A record 30% of 12 resolvers agree
  • Domain registration not expiring soon 2905 days left
  • Domain is established 17y 11m 27d (2008-09-04)

What changed

Nothing has changed on whatsapp.com since we started watching it.

Certificates expire, DNS gets edited, a header goes missing in a deploy. Prove the domain is yours and we watch it on a schedule — free — and email you the moment something moves, so you hear it from us instead of from a customer.

Subdomains discovered 🔒 Pro

35 via Certificate Transparency

We found 35 subdomains for whatsapp.com via Certificate Transparency logs.

Unlock the subdomain list

  • See every subdomain discovered via crt.sh CT logs
  • Click any subdomain to audit it (separate report)
  • Useful for security recon + asset inventory

A certificate that expires on Tuesday should not wait until Friday. Prove a domain is yours and we check it free, once a week, emailing you anything that changed. Pro checks it once a day, looks at every host on the domain, and keeps 365 days of history — so you hear about a problem in hours rather than days.

Compare plans →