indexo.dev

travala.com

.com crawl

First seen 2026-05-08 · Last seen 2026-05-15 · ok HTTP/1.1 200 3545 ms crawled 2026-05-15

US · 172.66.42.218 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Book Hotels, Flights, Tours & Car Rental with Crypto | Travala
Description
Book over 3 million travel products around the world with popular cryptocurrencies. Find and book Hotels, Flights, Car Rental, Tours and Activities online.
Language
en
Canonical
https://travala.com/
Translations
  • de
  • en
  • es
  • fr
  • vi
  • zh

Open Graph

title
Book Hotels, Flights, Tours & Car Rental with Crypto | Travala
site name
Travala
description
Book over 3 million travel products around the world with popular cryptocurrencies. Find and book Hotels, Flights, Car Rental, Tours and Activities online.

Technology

CDN
Cloudflare
CMS
Next.js
Analytics
  • Cloudflare Insights
  • Google Tag Manager
Fonts
  • Google Fonts

Third-party hosts loaded (5)

  • fonts.gstatic.com×3
  • dev.visualwebsiteoptimizer.com×1
  • fonts.googleapis.com×1
  • static.cloudflareinsights.com×1
  • www.googletagmanager.com×1

Social

Registration

Registrar
MarkMonitor Inc.
Created
2016-12-25
Expires
2030-12-25 1681 days left
Updated
2023-07-18
Name servers
  • will.ns.cloudflare.com
  • zara.ns.cloudflare.com

DNS records live

NS
  • will.ns.cloudflare.com
  • zara.ns.cloudflare.com
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
TXT
Show 11 TXT records
  • zoho-verification=zb81109551.zmverify.zoho.com
  • a4d39430-f996-4b47-a6fc-e127f9d146ed=93bacf2499818ebd89e70a69276c879d273b5f372e2c6352009cb8f4c529b6a1
  • atlassian-domain-verification=K/77jeC1USsX/oNMCtak9Mpbta/8MAa9xi/MK8rP0vmoZZ4XJiL27JHn6kHkwlMT
  • b9fe8398-4f73-4055-9948-78e364ecb5f6=93bacf2499818ebd89e70a69276c879d273b5f372e2c6352009cb8f4c529b6a1
  • brave-ledger-verification=51a9b2e64b978d15a89670aa703ae39c6f3a17a40ac04357f43466278f6d872c
  • facebook-domain-verification=13pww3fz5g7qekldpvhxv6di8h444o
  • google-site-verification=4WmdvQYXz7ynTLIOyFOB15gONt1GU-_p8eaS26AZaEM
  • google-site-verification=CC7CoOnXgYGvkFbdrz3eeGoyMe0QdaZ1_C6Y_J4itfk
  • google-site-verification=i0vD_sxcZIs6sNeTDcCtzadhGq5fV2fgopCB9D_J3_Q
  • google-site-verification=nfR7Ex1S_MaY5DTi0oswbcSru3zjcHPkMwItB8NA1Cw
  • openai-domain-verification=dv-KjdE6GdNLDNsPd7HukLO6AZi

Email authentication strong

SPF
v=spf1 include:transmail.net include:_spf.google.com include:trustpilotservice.com include:spf.tapfiliate.com include:mail.zendesk.com include:spf1.odysol.com ~all
softfail (~all)
DMARC
v=DMARC1; p=reject; pct=100; aspf=r; sp=none; rua=mailto:3dfa8950da404d568097979e79ee6b94@dmarc-reports.cloudflare.net,mailto:kent@travala.com,mailto:re+ctv8rgbqycm@dmarc.postmarkapp.com
policy: reject (enforced) · sp=none
DKIM
Show 5 DKIM selectors
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6wuvCCzE9RMxdWXZdbPfg/4vN2eajS5KsathJQ1mbfekpP8LJ9SjpiMaDo1A4PNfW0QSwgV88bkhwV…
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCX162EKFFVWRHl3I3En4NY2ZqY8J5t0rpV4C28r/7nUwMR98ETMc2d7Ma1AcJaxanLofzWPOJSiuG6OYqhS0…
  • k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
  • s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkK8R9p1+VQoXFpkqnM/uxpsqq3uPqRre+EzB3AGfU8lkBTrnuQYpBR333aeyBHZbZhBfFJap9SbHQi2h9…
  • s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow+mTvCMgwIX+oxAtzWXltLb95nbXVjXuAHxCNvq64C9O+mq5kW1qRlP0q/iY8nev/btrP7kmWSze9j23k…
selectors probed

Certificate (current)

WE1
from 2026-04-24 to 2026-07-23
Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.travala.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin, no-referrer-when-downgrade, strict-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' blob: data: ws: wss: *.adrsbl.io *.adform.net *.adnxs.com *.clarity.ms *.id5-sync.com *.recaptcha.net *.google.com *.googleapis.com *.googleanalytics.com *.google-analytics.com *.googletagmanager.com *.googleoptimize.com *.googleadservices.com *.gstatic.com fonts.gstatic.com googleads.g.doubleclick.net *.doubleclick.net google.com.sg *.travala.com wss://*.travala.com ws://*.travala.com *.visualwebsiteoptimizer.com dev.visualwebsiteoptimizer.com *.vwo.com app.vwo.com *.hotjar.com *.hotjar.io *.fullstory.com *.mouseflow.com *.commonservice.io static.cloudflareinsights.com frstre.com *.tapfiliate.com *.stripe.com *.paypal.com *.paypalobjects.com *.coingate.com coingate.com *.crypto.com *.transak.com *.changelly.com *.moonpay.io simpleswap.io *.simpleswap.io *.simplex.com *.simplex-affiliates.com *.binance.cloud *.binance.org *.bnbstatic.com *.walletconnect.com *.walletconnect.org *.web3modal.com *.cloudflare-eth.com cloudflare-eth.com *.rpc.ankr.com rpc.ankr.com *.trave
strict-transport-security
max-age=31536000; includeSubDomains

Links to (9)

Linked from (2)