api.whatsapp.com - URL scan, 21 Aug 2026
MalwareAnalyzer by Cyble scanned api.whatsapp.com and returned a benign verdict (score 0). The page resolved to 157.240.8.53 on Facebook, Inc. in AU. The domain was registered 6560 days ago through RegistrarSafe, LLC. 15 domains and 1 IP were contacted, over 21 HTTP requests. 3 malware samples communicate with this URL. This is a point-in-time observation from 21 Aug 2026; the page may have changed since.
Scan result
- Verdict: benign (score 0) · Confidence 11%
- Scanned URL:
https://api.whatsapp.com/message/4JYJAPW7ULKTD1?autoload=1&app_absent=0 - Domain: api.whatsapp.com · IP: 157.240.8.53 · AS32934 · AU
- Page title: Share on WhatsApp
- HTTP status: 200 · text/html; charset="utf-8"
- Registrar: RegistrarSafe, LLC · domain age 6560 days · created 2008-09-04
- TLS issuer: C=US, O=DigiCert Inc, CN=DigiCert Global G2 TLS RSA SHA256 2020 CA1 · valid to Aug 28 23: · subject C=US, ST=California, L=Menlo Park, O=Meta Platforms, Inc., CN=*.whatsapp.net
- Evidenced operator: Meta Platforms, Inc.
- HTTP requests captured: 21 · cookies set: 1 · outgoing links: 82
- Scan tier: standard · observed 2026-08-21 20:24:18 UTC
Malware communicating with this URL (3)
These samples were observed contacting or being served from api.whatsapp.com. Each links to its full analysis.
- 3d8b407f6823d3b9dfb08ec1de5362790fc714ce995fafe755483c7e46b12348 - referenced ·
3d8b407f6823d3b9dfb08ec1de536279· first seen 2026-08-20 - 1f31daf2bbffcc935a8d9748065a74b8df18e75246c5d0b0f062bd0189380806 - referenced ·
1f31daf2bbffcc935a8d9748065a74b8· first seen 2026-08-17 - c784eeea9a0a5ecb90039885358e4119e68abbda6593743152433e67db81051e - referenced ·
c784eeea9a0a5ecb90039885358e4119· first seen 2026-08-16
Antivirus & YARA (0 of 47 engines)
No engine flagged this page's content.
Why this verdict
- Valid TLS, no impersonation or off-origin credential post
Contacted infrastructure
- 157.240.8.53 - AS32934 Facebook, Inc. (Australia)
Observed indicators
- api.whatsapp.com
- static.whatsapp.net
- www.whatsapp.com
- blog.whatsapp.com
- faq.whatsapp.com
- whatsappbusiness.com
- web.whatsapp.com
- pps.whatsapp.net
- x.com
- www.youtube.com
- www.instagram.com
- www.facebook.com
- www.threads.com
- www.metacareers.com
- send
- 157.240.8.53
- https://api.whatsapp.com/message/4JYJAPW7ULKTD1?autoload=1&app_absent=0
- https://api.whatsapp.com/data/manifest.json
- https://static.whatsapp.net/rsrc.php/y1/r/FJbTMJqMap7.svg
- https://static.whatsapp.net/rsrc.php/v5/yH/l/0,cross/_jfkUskf2-v.css
Other scans of api.whatsapp.com (10)
This host has been scanned before. Each scan is a separate observation, so a verdict here does not carry over to the others.
- 23 Aug 2026 - unknown ·
https://vigilanciaweb.cl/dinamicos/files/file/nasemelo.pdf - 23 Aug 2026 - unknown ·
https://robloxeditortoolscriptautocut.pages.dev/ - 23 Aug 2026 - unknown ·
https://www.antasboru.com/404 - 23 Aug 2026 - suspicious ·
https://how-to-use-phone-number-to-verify-age-on-roblox.pages.dev/ - 23 Aug 2026 - unknown ·
https://robloxattackontitantitanshiftscript.pages.dev/ - 23 Aug 2026 - unknown ·
https://roblox-strongest-battlegrounds-script-auto-ult.pages.dev/ - 23 Aug 2026 - unknown ·
https://roblox-blox-fruits-esp-script.pages.dev/ - 23 Aug 2026 - unknown ·
https://samanagaofficial.net/desktop/home - 23 Aug 2026 - unknown ·
https://www.ventisilva.com.br/ckfinder/userfiles/files/86049491203.pdf - 23 Aug 2026 - unknown ·
https://tctnanotech.com/wp-content/plugins/super-forms/uploads/php/files/d70c531b6497dae92bb39bed8d2
Questions about api.whatsapp.com
- Is api.whatsapp.com safe?
- The scan of api.whatsapp.com on 21 Aug 2026 found no evidence of harm. That is the absence of a finding at one point in time, not a guarantee: a page can change, and a scan only sees what it was served.
- What malware is associated with api.whatsapp.com?
- 3 analysed samples communicate with this URL.
- How was api.whatsapp.com checked?
- A static pass resolved DNS, captured TLS and headers and followed the redirect chain, and where the standard tier allows, a headless browser rendered the page and recorded every request. Egress is SSRF-locked. Signatures that matched only page text are weighted far below one that matched a served file, because a page documenting malware matches the same rules.
Scanned at the standard tier - see how URL scanning works.
Scan another URL · Latest analyzed threats · All scans of api.whatsapp.com
Scanned on MalwareAnalyzer by Cyble · Open interactive scan