Verisite checked api.whereby.com on July 9, 2026 and gave it a trust score of 39/100. Out of 44 checks, 26 passed, with 8 warning(s) and 10 failed check(s).
api.whereby.com
Last checked 1 day ago
Part of whereby.comTrust Score
Insufficient
Security Headers
Checks HTTP security headers and cookie security configuration.
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
DNS & Server
Checks DNS records, server information and hosting details.
Security Headers
Checks HTTP security headers and cookie security configuration.
- Domain
- api.whereby.com
- Cookies
-
- Total: 0
- Issues:
- Secure cookies: 0
- Insecure cookies: 0
- HSTS max-age
- 31536000
- Missing headers
- Content-Security-Policy, X-Frame-Options, Referrer-Policy, Permissions-Policy
- HSTS preload
- No
- Used browser fallback
- No
- Referrer-Policy
- No
- X-Frame-Options
- No
- HSTS includes subdomains
- No
- Permissions-Policy
- No
- X-Content-Type-Options
- Yes
- Content-Security-Policy
- No
- Strict-Transport-Security
- Yes
Technology & Software
Detects CMS, frameworks, and JavaScript libraries and checks for outdated versions.
- Detected CMS
-
- Name:
- Slug:
- Version:
- Detected: No
- Confidence: none
- Domain
- api.whereby.com
- JavaScript libraries
- Pages scanned
- 10
- Vulnerable libraries
- Server technology
-
- Server: Framer/1a1b925
- Powered by:
- X generator:
Information Exposure
Checks for exposed sensitive files, directory listings, and information disclosure.
- Domain
- api.whereby.com
- Exposures
-
- /.svn/entries — critical — SVN repository exposed
- /elmah.axd — high — .NET error log exposed
- /debug/default/view — high — Debug panel exposed
- /.DS_Store — medium — macOS directory structure exposed
- Robots.txt analysis
-
- Exists: Yes
- Interesting paths:
- Paths checked
- 18
- Exposures found
- 4
- Directory listing enabled
- No
Email Authentication
Analyzes SPF, DKIM and DMARC configuration for email authentication.
- SPF
-
- Exists: No
- Policy:
- Record:
- Mechanisms:
- Policy label:
- Authorized senders:
- DKIM
-
- Found: No
- Selectors:
- DMARC
-
- Exists: No
- Policy:
- Record:
- Percentage:
- Policy label:
- Has reporting: No
- Subdomain policy:
- Domain
- api.whereby.com
Domain Age
Checks the age of the domain registration. Very young domains are often associated with fraud.
- Domain
- whereby.com
- Registrar
- Amazon Registrar, Inc.
- Registered
- 2000-12-31
- Age (days)
- 9279
- Expires
- 2026-12-31
Privacy & Cookies
Checks for tracking cookies, consent mechanisms, and third-party trackers.
- Check
- Privacy & Cookies
Network & Transport
Checks open ports, HTTP protocol support, redirect chain, and mixed content.
- Domain
- api.whereby.com
- Open ports
- HTTP version
- HTTP/2
- Mixed content domains
- Pages scanned
- 12
- Redirect chain
- http://api.whereby.com, https://api.whereby.com/
- HTTP/2 support
- Yes
- HTTP/3 support
- No
- Open ports found
- 0
- Redirect loop detected
- No
- Mixed content resources
- 0
- Redirect chain length
- 1
- HTTP redirects to HTTPS
- Yes
Content Security
Scans page content for suspicious scripts, iframes, external forms, and cryptominers.
- Check
- Content Security
Business Data
Checks for chamber of commerce number, VAT number, contact details, and required legal pages.
- Domain
- api.whereby.com
- Email address present
- Yes
- Phone number present
- No
- Terms and conditions present
- Yes
- Chamber of Commerce number found
- No
- Terms and conditions page
- /algemene-voorwaarden
- VAT number found
- No
- Physical address present
- No
- Pages scanned
- 40
- Return policy present
- Yes
- Return policy page
- /retourbeleid
- Privacy policy present
- Yes
- Privacy policy page
- /privacybeleid
- Contact details found
- 1
Reviews & Trust Seals
Checks external reviews (Trustpilot) and trust seals (Kiyoh, WebwinkelKeur).
- Domain
- api.whereby.com
- Kiyoh trust seal found
- No
- Trust seal present
- No
- Trustpilot page
- https://www.trustpilot.com/review/api.whereby.com
- Trustpilot profile found
- No
- WebwinkelKeur trust seal found
- No
Malicious / Safety
Checks if the domain appears on known fraud or phishing lists.
- Checked domain
- api.whereby.com
SSL Certificate
Verifies the SSL/TLS certificate validity and configuration.
- Expiry date
- 2026-12-04
- Issuer
- Amazon
- Subject
- whereby.com
- Valid until
- 2026-12-05
- Valid from
- 2026-05-21
- TLS version
- TLSv1.2
- Serial number
- 0FACFEFD311F22211C610A87D55A5743
DNS & Server
Checks DNS records, server information and hosting details.
- IP Address
- 99.83.164.242
- SPF record
- No
- IPv6 support
- No
- DMARC record
- No
- DNSSEC
- No
- MX Records
- Nameservers
- Reverse DNS
- a043d1584dcb72735.awsglobalaccelerator.com
- IP Addresses
- 99.83.164.242, 75.2.8.149
- IPv6 Addresses