atol.org

.org crawl

First seen 2026-04-15 · Last seen 2026-05-14 · ok HTTP/1.1 200 2804 ms crawled 2026-05-08

US · 104.26.5.68 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: ATOL protecting holidaymakers since 1973 - ATOL
Description: Planning your next holiday? Before you take your holiday plunge, make sure your package holiday is financially protected by ATOL.
Language: en-GB
Canonical: https://www.atol.org/

Open Graph

url: https://www.atol.org/
title: ATOL protecting holidaymakers since 1973 - ATOL
locale: en_GB
site name: ATOL
description: Planning your next holiday? Before you take your holiday plunge, make sure your package holiday is financially protected by ATOL.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

OneTrust

Fonts

Google Fonts

Social widgets

YouTube Embed

Third-party hosts loaded (7)

cdn.cookielaw.org×2
code.jquery.com×2
fonts.googleapis.com×2
kit.fontawesome.com×2
gmpg.org×1
www.googletagmanager.com×1
www.youtube-nocookie.com×1

Social

Registration

Registrar

Mesh Digital Limited

Created

2002-07-23

Expires

2027-07-23 430 days left

Updated

2025-09-06

Name servers

cheryl.ns.cloudflare.com
kevin.ns.cloudflare.com

DNS records live

NS

cheryl.ns.cloudflare.com
kevin.ns.cloudflare.com

TXT

google-site-verification=3lpCreeAMh8Y4wr0CB4V_jrEzWMFtr1Zz3eHuHkJAEU

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

WE1

from 2026-03-15 to 2026-06-13

Expires in 25 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.atol.org/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

short HSTS max-age
weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self';
strict-transport-security: max-age=10886400; includeSubDomains; preload, max-age=31536000; includeSubDomains; preload