khamsat.com

.com crawl

First seen 2026-04-11 · Last seen 2026-05-19 · ok HTTP/1.1 200 401 ms crawled 2026-05-18

IE · 54.216.38.146 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: خمسات - أكبر سوق عربي للخدمات الرقمية
Description: حلول رقمية متكاملة لإنجاز أعمالك بسهولة وأمان
Canonical: https://khamsat.com

Open Graph

url: https://khamsat.com
title: خمسات
locale: ar
site name: موقع خمسات
description: حلول رقمية متكاملة لإنجاز أعمالك بسهولة وأمان
locale:alternate: ar

Technology

Server: nginx

Analytics

Google Tag Manager

Third-party hosts loaded (4)

khamsat.hsoubcdn.com×26
avatars.hsoubcdn.com×4
static.hsoubcdn.com×4
www.googletagmanager.com×1

Social

Registration

Registrar

Name.com, Inc.

Created

2010-05-10

Expires

2029-05-10 1086 days left

Updated

2023-12-04

Name servers

ns-1522.awsdns-62.org
ns-1544.awsdns-01.co.uk
ns-330.awsdns-41.com
ns-699.awsdns-23.net

DNS records live

NS

ns-1522.awsdns-62.org
ns-1544.awsdns-01.co.uk
ns-330.awsdns-41.com
ns-699.awsdns-23.net

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

zaetoon-verification=b59ec2996188e708355951be66c1cdea
google-site-verification=xt3YLkqoqFHQb37m-n_ye4UfgwJW8RRSmygBSSu2VhU
oqlohiAIT2tiDZDhB9hIF5seefJc5XI8mr1WTEBJJr0=

Email authentication partial

SPF: v=spf1 include:zaetoonemail.com include:amazonses.com include:mailgun.org include:zoho.com include:_spf.google.com -all
strict (-all)
DMARC: v=DMARC1; p=none;
policy: none (monitoring only)
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04

from 2025-11-09 to 2026-12-08

Expires in 202 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 65/100 Checked live page: https://khamsat.com/

present

content-security-policy
x-frame-options
x-content-type-options

findings

missing HSTS
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;img-src 'self' data: blob: *.hsoubcdn.com *.stripe.com i.ytimg.com img.youtube.com www.googletagmanager.com secure.gravatar.com;frame-src 'self' *.js.stripe.com js.stripe.com hooks.stripe.com www.youtube.com *.hsoubcdn.com www.google.com

Links to (2)

facebook.com×3
twitter.com×3