WhereWasAI-verifier/1.0 (+https://wherewasai.com/verifier) requests one URL. A traveler submits that URL after posting a one-time code on the page. The verifier sends a single GET. It does not crawl, and it does not follow links on the page.
A match shows on the journal as Certified with the check date in UTC. The line links to that URL.
The fetch allows http and https, at most 3 redirects, a 10 second limit, and a 1 MB body. Only text/html and text/plain are read. Private, loopback, link-local, multicast, and metadata addresses are refused. The page text is checked for the code and then discarded. WhereWasAI stores a hash of the body, not the body.
Site owners can write to no-reply@wherewasai.com about this fetch.