Check-Host.cc

Try 1.1.1.1 AS13335 check-host.cc /country/de /tld/cc
Domain

whatsapp.com

Aggregated from public BGP, CT logs, our scan layer, honeypots and global probes.

DNS Check HTTP Check Run Full Scan .com TLD

Run a live full scan of whatsapp.com

On-demand: ports, banners, TLS, tech-stack, subdomains and origin/IP-leak detection. Results are shared publicly for everyone to link to.

Deep-scan now
Hosting IPs
59
A/AAAA targets
Subdomains
65
CT + scan + body
Record Types
6
seen in DNS
Observed Certs
1,257
in our scans

DNS Records

A
157.240.0.60, 157.240.17.60, 157.240.210.60, 157.240.253.60, 157.240.27.54, 157.240.29.60, 157.240.5.60, 157.240.9.53
AAAA
2a03:2880:f207:c5:face:b00c:0:167, 2a03:2880:f20a:c5:face:b00c:0:167, 2a03:2880:f228:c5:face:b00c:0:167, 2a03:2880:f232:c5:face:b00c:0:167, 2a03:2880:f23f:c7:face:b00c:0:167, 2a03:2880:f276:1c2:face:b00c:0:167, 2a03:2880:f277:1cd:face:b00c:0:167, 2a03:2880:f278:cb:face:b00c:0:167
MX
10 mxa-00082601.gslb.pphosted.com, 10 mxb-00082601.gslb.pphosted.com
NS
a.ns.whatsapp.net, b.ns.whatsapp.net, c.ns.whatsapp.net, d.ns.whatsapp.net
TXT
Ghm7XCdpYQEendZNsepA80OBAhbN9sfITvUxiy9FNdOGBxeAQICCmLbuXm23hNaysns+wZ6GskJWMtWD1/Ha9Q==, MS=ms22994725, adobe-idp-site-verification=a0d9793b-fc40-430b-9ab4-d3c75e4dcfba, b42e0aa4-9d21-4a73-a111-fba236f1a835, bFwlY7J2JzFYHw5qkQFcBD6EOr9JL4VBpYSXSk3p8lA, dropbox-domain-verification=lfq0o9x85s8s, facebook-domain-verification=ziojpt80hl1748lx6agku0kpttifb2, google-site-verification=MXbDGih8wW-64G5maXGw8iIkFbH7iv_vLobZd-kxdNo
CNAME
—
CAA
0 issue "digicert.com; account=271b0beda0771d006aa3a6c11b05187d456d6c239b46cb5241196095b09c92af"

WHOIS / Registration

Registration data planned

Registrar, creation/expiry dates and domain status via RDAP. Rolling out gradually — bulk WHOIS is rate-limited, so we resolve on a prioritized cadence.

Subdomains

Every subdomain we know about — harvested from CT-log SANs, scan-observed certs and HTML body references — paired with its current A/AAAA target.

Subdomain Resolves to Last seen
web.whatsapp.com
57.144.223.32 2a03:2880:f23f:c7:face:b00c:0:167 2a03:2880:f37c:120:face:b00c:0:167 2a03:2880:f276:1c2:face:b00c:0:167 +35
2026-07-28 20:47:52.650
api.whatsapp.com
57.144.223.32 2a03:2880:f23f:c7:face:b00c:0:167 2a03:2880:f37a:120:face:b00c:0:167 2a03:2880:f276:1c2:face:b00c:0:167 +32
2026-07-28 20:39:29.599
whatsapp.com
57.144.223.32 2a03:2880:f36f:120:face:b00c:0:167 2a03:2880:f37a:120:face:b00c:0:167 2a03:2880:f276:1c2:face:b00c:0:167 +26
2026-07-28 20:39:29.599
chat.whatsapp.com
157.240.9.53 2a03:2880:f36f:120:face:b00c:0:167 2a03:2880:f277:1cd:face:b00c:0:167 2a03:2880:f382:120:face:b00c:0:167 +21
2026-07-28 19:48:54.308
www.whatsapp.com
57.144.223.32 2a03:2880:f277:1cd:face:b00c:0:167 2a03:2880:f37a:120:face:b00c:0:167 2a03:2880:f23f:c7:face:b00c:0:167 +17
2026-07-28 17:34:09.807
faq.whatsapp.com
57.144.223.32 2a03:2880:f277:1cd:face:b00c:0:167 2a03:2880:f36f:120:face:b00c:0:167 2a03:2880:f23f:c7:face:b00c:0:167 +6
2026-07-23 04:29:01.304
business.whatsapp.com
157.240.27.18 2a03:2880:f37a:8d:face:b00c:0:2 2a03:2880:f36f:8d:face:b00c:0:2 2a03:2880:f03f:12:face:b00c:0:2 +4
2026-07-23 10:40:09.175
blog.whatsapp.com
57.144.249.32 157.240.0.60 57.144.245.32 2a03:2880:f23f:c7:face:b00c:0:167 +2
2026-06-22 09:48:57.717
call.whatsapp.com
57.144.223.32 2a03:2880:f36f:120:face:b00c:0:167 157.240.27.54 2a03:2880:f23f:c7:face:b00c:0:167
2026-07-18 07:43:48.774
autodiscover.whatsapp.com
1970-01-01 00:00:00.000
wt.whatsapp.com
1970-01-01 00:00:00.000

Tech Stack

Tech detection pending

Wappalyzer-rules detect CMS, frameworks, analytics, JS libs and server-side languages on this domain.

TLS Certificates

Certificate observations pending

TLS certs naming this domain in subject or SANs will appear here as our scan-layer catches them.

IPs Citing This Domain

Hosts whose HTML body references this domain. Strong signal for origin/mirror/embed discovery.

15.235.147.15:443 href · ×12
18.189.2.208:80 href · ×8
108.181.223.237:443 href · ×8
13.126.87.244:80 href · ×7
3.7.52.122:80 href · ×7
31.70.113.121:443 href · ×6
45.67.230.125:443 href · ×5
34.233.136.121:80 href · ×5
3.21.58.234:443 href · ×5
38.242.138.135:443 href · ×5
66.97.35.101:80 href · ×4
94.20.59.163:443 href · ×4
216.10.248.228:443 href · ×4
34.98.88.77:443 href · ×4
3.84.218.156:443 href · ×4
103.161.184.37:5000 href · ×4
24.199.103.18:443 href · ×4
45.90.57.64:80 href · ×4
139.59.6.75:80 href · ×4
3.65.226.93:80 href · ×4
94.20.59.160:443 href · ×4
66.116.226.45:80 href · ×4
35.155.56.81:80 href · ×4
20.127.107.136:443 href · ×4
3.135.170.129:80 href · ×3
103.211.216.233:443 href · ×3
45.79.209.197:443 href · ×3
217.61.60.205:443 href · ×3
93.62.236.102:80 href · ×3
52.21.157.7:80 href · ×3
49.50.74.30:443 href · ×3
3.108.250.213:80 href · ×3
185.66.109.130:443 href · ×3
125.22.136.172:443 href · ×3
107.21.148.132:443 href · ×3
72.14.186.206:443 href · ×3
35.237.119.133:80 href · ×3
140.245.238.32:443 href · ×3
172.104.164.209:80 href · ×3
57.128.176.233:80 href · ×3
107.21.148.132:80 href · ×3
212.154.118.210:80 href · ×3
45.207.245.146:443 href · ×3
212.237.4.64:443 href · ×3
188.166.222.145:80 href · ×3
98.85.167.224:443 href · ×3
176.58.127.117:443 href · ×3
45.33.13.236:443 href · ×3
65.21.152.68:443 href · ×3
72.61.165.63:443 href · ×3

Origin / IP-Leak

USP

When a hostname is served behind a CDN (e.g. Cloudflare), the origin server can sometimes be identified by matching its TLS cert against the protected hostname. Findings shown here are heuristic candidates, not guarantees.

No origin-IP leaks detected (yet)

Either this domain doesn't sit behind a CDN, or we haven't seen a TLS cert from a non-CDN IP matching this hostname. Run a fullscan to refresh the cert→IP cross-reference.

Threat Intelligence

Domain threat-intel pending

Matches in URLhaus, OpenPhish, PhishTank, malware feeds, and Spamhaus DBL.

History

Domain timeline pending

Passive-DNS history accumulates as our forward-DNS crawler observes A/AAAA/MX/NS/TXT records over time.