protect.group

.group user

First seen 2026-05-20 · Last seen 2026-05-20 · ok HTTP/1.1 200 549 ms crawled 2026-06-03

US · 198.202.211.1 · AS209242 Cloudflare London, LLC

Reputation 87/100 weak security headers weak subdomain policy

sector tech type homepage

HTML metadata

Title

Refundable Bookings and Ancillary Services | Protect Group

Description

Welcome to Protect Group. We're the world leader in refundable bookings and ancillary products for your booking flows. Find out more!

Language

en-GB

Generator

Webflow

Canonical

https://www.protect.group/

Translations

en ×2
pt ×2
ar
de
es
fr
id
it
ja
ko
no
th
vi
zh

Open Graph

title: Refundable Bookings and Ancillary Services | Protect Group
description: Welcome to Protect Group. We're the world leader in refundable bookings and ancillary products for your booking flows. Find out more!

Technology

CDN: Cloudflare
jQuery: 3.5.1

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Google Fonts

Third-party hosts loaded (11)

cdn.prod.website-files.com×60
www.protect.group×19
ajax.googleapis.com×1
cdn.jsdelivr.net×1
d3e54v103j8qbb.cloudfront.net×1
fonts.googleapis.com×1
fonts.gstatic.com×1
js-eu1.hs-scripts.com×1
use.typekit.net×1
widget.trustpilot.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

2024-05-09

Expires

2030-05-09 1428 days left

Updated

2024-08-24

Name servers

sam.ns.cloudflare.com
dara.ns.cloudflare.com

DNS records live

NS

dara.ns.cloudflare.com
sam.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

linkedin-site-verification=bdfa315a-a2e0-4f28-b81b-103f1b6db2ae

Verified for

Apple
Google
OpenAI
Postman

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:mail.zendesk.com include:mailgun.org include:spfuk.rocketseed.com include:147537131.spf08.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; pct=100; rua=mailto:technology@protect.group; sp=none; adkim=r; aspf=r

policy: quarantine · sp=none

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlHYBoAwzvsEDYayl9hBfNEYQvSqLwg+E5VfDt/cLNUpZa6nMi01j4gOAmveLiHG8HCLOyFt6PjzRL…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtggUzLp32inpqaHU8eCN/2UzP8HnwsSAVWvuJOhUNtaJNRRth4XLjmMc5kvbYMBapY46mQt9BAe2i+FuWu…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDBgHhtvmevCvf04k3GGh0LCIYKjxsZv9kSbScpCRS5YJeFQohymAn3XO1hi2Kz6Rk5ja3YXArf3/nWkH21EyjkbU…

selectors probed

Certificate (current)

WE1

from 2026-04-15 to 2026-07-15

Expires in 34 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 30/100 Checked live page: https://www.protect.group/

findings

missing HSTS
missing Content Security Policy
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Links to (3)

Use this data via API

Everything on this page for protect.group is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/protect.group" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →