Infrastructure
· 9 checks — DNS, redirects, IPv6, crawlability, URL variants, and domain intelligence rolled into one auditable list.DCDN & DeliveryActionNo CDN detectedFIX
Consider using a CDN to improve global delivery speed and reduce origin load.
BRedirect Chain2 redirect(s), 573 ms totalREVIEW
https://accor.com
467 ms · HTTP/1.1
https://group.accor.com/
88 ms · HTTP/1.1
https://group.accor.com/en
18 ms · HTTP/1.1 FINAL
| # | URL | Status | Time | Protocol | Server |
|---|---|---|---|---|---|
| 1 | https://accor.com | 301 | 467 ms | HTTP/1.1 | |
| 2 | https://group.accor.com/ | 307 | 88 ms | HTTP/1.1 | |
| 3 | https://group.accor.com/en | 200 | 18 ms | HTTP/1.1 |
See the visual redirect chain in the HTTP Probe tab →
Each redirect adds latency. Try to minimize the chain to 1 hop.
Redirect chain — each hop adds latency; combine into one redirect where possible.
Source: Google Search Central / web.dev
CIPv6 ReadinessActionNo IPv6 supportREVIEW
IPv6 support is increasingly important for global accessibility. About 40% of internet users have IPv6 connectivity.
No AAAA records — same impact as 'no IPv6 (AAAA) records'; IPv6-preferring clients pay extra latency falling back to IPv4.
Source: Google IPv6 stats
CCrawlabilityActionrobots.txt present, sitemap with 0 URLsREVIEW
Search engines may not be able to parse the sitemap. Fix XML validation errors.
An unparseable sitemap is silently ignored by Google — the URLs it advertises are never queued for crawl.
Learn more ▾ ▴
Google's sitemap parser is strict about XML validity. A single unescaped `&` or unclosed tag invalidates the whole file. Run your sitemap through a validator (Search Console's Sitemaps report flags it) and fix the offending entry. Most generators escape correctly; mistakes usually come from manually-written entries.
Source: sitemaps.org / Google Search Central
An empty sitemap provides no value. Add <url> entries for your pages.
An empty sitemap signals 'no content to index' to Google — actively harmful versus having no sitemap at all.
Learn more ▾ ▴
Google compares URLs in the sitemap against URLs it has crawled. An empty sitemap on a site with thousands of pages signals abandonment. Either populate it correctly (most CMSes auto-generate) or delete the file and let Google crawl normally.
Source: Google Search Central / sitemaps.org
Add a 'Sitemap:' directive to robots.txt so search engines can discover your sitemap.
robots.txt omits Sitemap: directive — crawlers must fetch /sitemap.xml by convention; reliable but missing the explicit hint.
Source: sitemaps.org
<!DOCTYPE html><html lang="en" class="__variable_278a1a __variable_6ce207"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, initial-scale=1"/><link rel="preload" href="/_next/static/media/7ab009d2ad286aea-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="preload" href="/_next/static/media/dc31570a38b2dc63-s.p.woff2" as="font" crossorigin="" type="font/woff2"/><link rel="stylesheet" href="/_next/static/css/ee845a5ccb8af004.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/da5441ff4b04f652.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/1e60698aebf7d585.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/3df93fe6f58b89eb.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/9b26dcc88aca10c4.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/2d082d5a726de7cf.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/35839dd5bae1f6e1.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/fa8cafcec66b7cc9.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/a626e6bab4dff2f9.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/6956acec8a29c4d1.css" data-precedence="next"/><link rel="stylesheet" href="/_next/static/css/eb02acb9e5c3d77a.css" data-precedence="next"/><link href="/_next/static/css/cac9415335929dfd.css" rel="stylesheet" as="style" data-precedence="dynamic"/><link rel="preload" as="script" fetchPriority="low" href="/_next/static/chunks/webpack-b5d25f38ead4e4dc.js"/><script src="/_next/static/chunks/4bd1b696-182b6b13bdad92e3.js" async=""></script><script src="/_next/static/chunks/1255-1e9a537968501932.js" async=""></script><script src="/_next/static/chunks/main-app-2b45ed7a98d30896.js" async=""></script><script src="/_next/static/chunks/c15bf2b0-c59ed6c02f757fc5.js" async=""></script><script src="/_next/static/chunks/c16f53c3-409df1246fc2628c.js" async=""></script><script src="/_next/static/chunks/1356-cfc7b432c5453877.js" async=""></script><script src="/_next/static/chunks/4707-b5d18eaedbc3ffab.js" async=""></script><script src="/_next/static/chunks/5284-0d4839bea9f56531.js" async=""></script><script src="/_next/static/chunks/2008-f8a13e9fb7412960.js" async=""></script><script src="/_next/static/chunks/872-af216dfa91992ef9.js" async=""></script><script src="/_next/static/chunks/2502-4fd99ea510ded0c3.js" async=""></script><script src="/_next/static/chunks/9453-fee74c89e4beede6.js" async=""></script><script src="/_next/static/chunks/8326-a2297c7ad4adffd7.js" async=""></script><script src="/_next/static/chunks/2691-33992894e472a810.js" async=""></script><script src="/_next/static/chunks/app/%5Blocale%5D/%5B...slug%5D/page-94b4cb273f86c8a6.js" async=""></script><script src="/_next/static/chunks/9772-84922d8d7cc3a111.js" async=""></script><script src="/_next/static/chunks/app/%5Blocale%5D/layout-8db5653d03c6e3c7.js" async=""></script><script src="/_next/static/chunks/app/%5Blocale%5D/error-2280230c5b55eca3.js" async=""></script><script src="/_next/static/chunks/app/%5Blocale%5D/page-51640a4862d3971c.js" async=""></script><link rel="preload" href="https://cdn.cookielaw.org/consent/e68b4128-6c9f-4c02-929d-50c317884905/otSDKStub.js" as="script"/><link rel="preload" href="/_next/static/chunks/b536a0f1.76074e6ae7c53a9d.js" as="script" fetchPriority="low"/><link rel="preload" href="/_next/static/chunks/bd904a5c.43338207e237b2eb.js" as="script" fetchPriority="low"/><link rel="preload" href="/_next/static/chunks/51749ec1.54f5f2f3b9acf3a7.js" as="script" fetchPriority="low"/><link rel="preload" href="/_next/static/chunks/2148.a48d3f619f597dd5.js" as="script" fetchPriority="low"/><link rel="preload" href="/_next/static/chunks/3806.7a50aba5952d874c.js" as="script" fetchPriority="low"/><meta name="next-size-adjust" content=""/><title>Accor Group</title><meta name="description" content="Accor is a world-leading hospitality group offering stays and experiences across more than 110 countries with over 5,800 hotels and resorts, 10,000 bars & restaurants, wellness facilities and flexible workspaces."/><link rel="manifest" href="/manifest.json"/><link rel="canonical" href="https://group.accor.com/en"/><link rel="alternate" hrefLang="x-default" href="https://group.accor.com/en"/><link rel="alternate" hrefLang="en" href="https://group.accor.com/en"/><link rel="alternate" hrefLang="fr" href="https://group.accor.com/fr"/><meta name="mobile-web-app-capable" content="yes"/><meta name="apple-mobile-web-app-title" content="Accor"/><meta name="apple-mobile-web-app-status-bar-style" content="default"/><meta property="og:title" content="Accor Group"/><meta property="og:description" content="Accor is a world-leading hospitality group offering stays and experiences across more than 110 countries with over 5,800 hotels and resorts, 10,000 bars & restaurants, wellness facilities and flexible workspaces."/><meta property="og:image" content="https://images.group.accor.com/yrj0orc8tx24/5i152tnoQ2DXRx3HNX5ooy/78ab43cada09676323c560efdb2ffb8c/ACCOR.COM_Hero-FB3.jpg?w=3840&q=100&fm=avif"/><meta name="twitter:card" content="summary_large_image"/><meta name="twitter:title" content="Accor Group"/><meta name="twitter:description" content="Accor is a world-leading hospitality group offering stays and experiences across more than 110 countries with over 5,800 hotels and resorts, 10,000 bars & restaurants, wellness facilities and flexible workspaces."/><meta name="twitter:image" content="https://images.group.accor.com/yrj0orc8tx24/5i152tnoQ2DXRx3HNX5ooy/78ab43cada09676323c560efdb2ffb8c/ACCOR.COM_Hero-FB3.jpg?w=3840&q=100&fm=avif"/><link rel="icon" href="/favicon.ico" type="image/x-icon" sizes="48x48"/><link rel="icon" href="/icon0.svg?dfb9038bf6a79e20" type="image/svg+xml" sizes="any"/><link rel="icon" href="/icon1.png?7c6a7e4a7b68536f" type="image/png" sizes="96x96"/><link rel="apple-touch-icon" href="/apple-icon.png?c550dd059d4d2a79" type="image/png" sizes="180x180"/><script>(self.__next_s=self.__next_s||[]).push([0,{"children":"\n (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':\n new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],\n j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=false;j.src=\n 'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);\n })(window,document,'script','dataLayer','GTM-W36L8T4');\n ","id":"gtm-head"}])</script><script>(self.__next_s=self.__next_s||[]).push([0,{"children":"\n _linkedin_partner_id = \"\";\n window._linkedin_partner_id = \"\";\n (function() {\n var s = document.getElementsByTagName(\"script\")[0];\n var b = document.createElement(\"script\");\n b.type = \"text/javascript\";\n b.async = true;\n b.src = \"https://snap.licdn.com/li.lms-analytics/insight.min.js\";\n s.parentNode.insertBefore(b, s);\n })();\n ","id":"linkedin-insight-tag"}])</script><script src="/_next/static/chunks/polyfills-42372ed130431b0a.js" noModule=""></script></head><body><div hidden=""><!--$--><!--/$--></div><!--$--><!--/$--><div id="ZN_1OZcGbMcuC4phGV"></div><nav class="uiByPassMenuLink_root__t_i18 container py-4 bg-champagne ByPassMenuLink_root__eZIJ6"><ul class="uiByPassMenuLink_wrapper__JKu5_"><li><a href="#main" target="_self" class="uiButton_root__xVOUj g-1 uiButton_tertiary__zGRXY uiByPassMenuLink_button__J3ETV mr-3"><span class="uiButton_label__q1Eff text-small text-blue uiByPassMenuLink_button-label__QVWvn">Go to content</span><span class="uiIcon_root__zniuw uiButton_icon__EgtZk text-gold-accessible" aria-hidden="true"><svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24"><path d="M20.396 12.396a.56.56 0 0 0 0-.792L16.832 8.04a.56.56 0 0 0-.792.792L19.208 12l-3.168 3.168a.56.56 0 0 0 .792.792zM4 12.56h16v-1.12H4z"></path></svg></span></a></li><li><a href="#footer" target="_self" class="uiButton_root__xVOUj g-1 uiButton_tertiary__zGRXY uiByPassMenuLink_button__J3ETV mr-3"><span class="uiButton_label__q1Eff text-small text-blue uiByPassMenuLink_button-label__QVWvn">Go to footer</span><span class="uiIcon_root__zniuw uiButton_icon__EgtZk text-gold-accessible" aria-hidden="true"><svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24"><path d="M20.396 12.396a.56.56 0 0 0 0-.792L16.832 8.04a.56.56 0 0 0-.792.792L19.208 12l-3.168 3.168a.56.56 0 0 0 .792.792zM4 12.56h16v-1.12H4z"></path></svg></span></a></li></ul></nav><header class="uiHeader_root__cShWA Header_root__b1TmH" role="banner"><div class="uiHeader_content__8vj8R g-1 pt-md-2 bg-white Header_content__50559"><div class="top container"><div class="uiHeader_top-content___v78H g-1"><div class="uiHeader_burger-container__ZMack"><button class="uiButton_root__xVOUj g-1 uiButton_tertiary__zGRXY uiHeader_burger__vaEEA" aria-label="Open the menu" aria-hidden="false"><span class="uiButton_label__q1Eff text-small text-blue uiHeader_label__9MIPn"></span><span class="uiIcon_root__zniuw uiButton_icon__EgtZk text-gold-accessible uiHeader_icon__a84gp" aria-hidden="true"><svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24"><path d="M3 11.5a.5.5 0 0 1 .5-.5h17.105a.5.5 0 0 1 0 1H3.5a.5.5 0 0 1-.5-.5m0-7a.5.5 0 0 1 .5-.5h17.105a.5.5 0 0 1 0 1H3.5a.5.5 0 0 1-.5-.5m0 14.475a.5.5 0 0 1 .5-.5h7.526a.5.5 0 1 1 0 1H3.5a.5.5 0 0 1-.5-.5"></path></svg></span></button><button class="uiButton_root__xVOUj g-1 uiButton_tertiary__zGRXY uiHeader_burger__vaEEA uiHeader_burger--hidden__Wytex" aria-label="Close the menu" aria-hidden="true"><span class="uiButton_label__q1Eff text-small text-blue uiHeader_label__9MIPn"></span><span class="uiIcon_root__zniuw uiButton_icon__EgtZk text-gold-accessible uiHeader_icon__a84gp" aria-hidden="true"><svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" viewBox="0 0 24 24"><path d="M6.646 6.896a.5.5 0 0 1 .708 0L12 11.543l4.646-4.647a.5.5 0 0 1 .708.708l-4.647 4.646 4.647 4.64
BTLS Certificate Expiry & Recommendations83 days until leaf cert expires — 3 issues to addressREVIEW
Certificate validity
Recommended actions
- Enable HSTS: Strict-Transport-Security: max-age=31536000; includeSubDomains
- Enable DNSSEC on your domain for DNS spoofing protection
- Enable OCSP stapling on your TLS server to remove a CA roundtrip and protect user privacy
A+DNS Records2 A records, 44 ms lookupPASS
| A | 45.60.163.180, 45.60.151.180 |
| AAAA | — |
| CNAME | — |
| NS | indom10.indomco.com, indom20.indomco.net, indom130.indomco.org, indom30.indomco.fr, indom80.indomco.hk |
| MX | 1 accor.in.tmes.trendmicro.eu |
| TXT | 9gip37grb03krfqaocrnclh5to docusign=b5a1fc49-f300-4527-8886-a922b1eaf0ef brevo-code:f80d7cf52d373facdd6b5caef9778f81 idkpopg0nughp581ge5213rc93 anthropic-domain-verification-zdw4zr=rqMSahs2TbvxAvbhPb9OZr3Aq g9isqsr0vimc3fafipddlbjnaf hpe-greenlake-domain-verification=4d38376138586347344c44487539436571674d594b6265... h3mibg51sivvaen2q4u8mklp36 ms-domain-verification=31ec2255-d370-4704-8a56-d2d5ad1377de 6v4u9it08vkrbv1dpvt5tfj1gf facebook-domain-verification=vu8pb3rnpx7xi560nnwac8is1ghdws +hhG7GlyCl240Q15TIjV8WJfIao= b49c9seicgbq8ej5msm398bsq6 59759D536D8722AAD22 ms-domain-verification=caad1ba4-c16d-422d-997e-11cba2756e69 ca3-9f2048d53e784c7397205e2b69046b21 miro-verification=e2911707502298cc7192eabc59bf38da552b6ca3 24n0rhpvfp3qtfkmvgvva836l8 tmes=82e97b8099bb1369acac47d2add57adc PhGhWKwe84jxqnQzLE/JcpiwH+0= aim1snvbcck6jnpng8faok34rq brevo-code:4b32a431eeb29647e3dd89d9e5fa66a2 tm9epqeu6kupilbqo3heeh7rom SLQXHX7AYCD8E7WA8HG6AS0LSNKVSN3T6PJ1HIRQ _6v65b8y8eza45l5z58pc40wsnfzoang r8entfs93eph62o9c7lsqqnti6 AFQEeUFYbYWO9pM8cYS422KlqZ0= 5kfgbgsyvbhmb3tgld6gy0j4drcdm86r asv=40f948c609afd27c090cd8b9d04ddbc5 59759D536D8722AAD222549DCA107EF4E89C1022130ABDB310F72278C1C2BB98 /yukZjHQ0K9Stq/RhKVD5elOsBk= brevo-code:824481f9749dac0a2d3997e487fe52e7 1d5pqbcrmrs8a2m6r24iqdh6k4 Sendinblue-code:4f6f85d727efa3686a569db4bbbce0bc iVEDMl81+kfVBwKLcYfUUg4P/J4= adobe-idp-site-verification=cece2ead1c562712ebd8fd79b6284ee87a7a80aef3496ed374a1... qe4kafpstk69qg2gvijoj633tn THEgj+rKjYX2aBqrPATNwD42Gik= brevo-code:4cadda2e72ff2100ab2d67184dcf0c72 notion-domain-verification=xbpPWeWbzUmbzkGji2t7mTXZuaL9epReVCGvMH1tytq mc-domain-verification=2r596t4kjr08air6sj781iyxqgtle0 YxBm9U6jJAwlL43depth2jez76s= stripe-verification=aababaf554756500e0520936e4f8eb5ef504e1a5027c6b194bcd7398e17e... fastly-domain-delegation-tqfkpes4cwrhyvwsmzau-825509-2024-10-28 4YB4Zc3zONHe1E4x0Y50OnId63fLApWjMILeDaTxJ9N1d0Upu/fWV+RX2Ogtd4eTsWswP+tBVbkODL1q... asv=0b84712e29c975a5db39e59fdfa33a36 klTaoNaKhyChybU0HTgS/V+cLY8= mta3ji1vbkj4eqjubhkjk4gnee hrb3732lrt1kolh46752gqdde7 google-site-verification=5SAxbhIOU9EaAEVdk5qNe2-M1XNGmYMtV4C8ew9bUfo gkqa6b9oitnhfthnehri3pctu5 wj3076mptw8f04s0csybbsj4kjlsgxst dmZbB9baBxcBLcdM7qD6gjAO3F/VY91Y5NrI7UEEGN3iATZ0Iq8Da7R/IxNvWyJuxoynC5NlreiP86sV... cisco-ci-domain-verification=66f7c7af68eac1a0edd3911aae51dd3f95eac33a9f2dd740bb6... lf4d1385nmmna1mav0t1qil2eb globalsign-domain-verification=A81D1E2CEBE1B53365AAFEA0BA7197CF mandrill_verify.mPX4dBbJpHQrc6bvRatjzQ Tvqa9jcJisWZmm9CfPlk4j2+k0c= o53+bdK+m35JHgZQI2z6a/XNRmc= 1a41d4jmql7dci98kj80vdoq1k W1NqnmT851MZ5pLyLBmICcqRc5Y= brevo-code:443b97c717fe20d099038072f0d3b91d FZVVBZl/oHEAAUOdOSsbDKZ0Nnw= astro-domain-verification=clw85hlhw07v201ilws7vibxh 61LWnevckZqyR0fcU26PL4pmq84= 93m9s74ajhr80oj2bnadapj73a tdG+yjPAKdlqG/DWzy92uz7OpOU= fastly-domain-delegation-btGOjo3ZA5thT9H-537418-2022-10-06 brevo-code:db16aa2b4c0aba0495d1f27c7cdef7ca 7b4f121f1013b277c1944a4bdad5b888 m1md5qir4ka71829gu6lkalfe1 xBLe7cmwwwIAOstJjTg6V8D9l66SRr+P8fGoFNGGtn7KI8Jh6Br5AVjVsKlI8hJSIP7+h3szsFZQt4TP... atlassian-domain-verification=BbwBPa6o4zgjEPpHB143FtqOxUuaHH7V8FGT/hEu6CB4aTpZKG... brevo-code:9b3123f4c2353e9e1c6304627cacfd0c G6J23JDIY3FN8O9SA7A668P5M6QPJHYDI6J454D5 _globalsign-domain-verification=kXKn0dJek0Ox8CS-B26A8hfjYJy5w20BV8l7M6nbkD SPF v=spf1 include:spf.tmes.trendmicro.com include:spf.mantrahotels.com include:orac... W4Fal+LcgloVCaH2rjf4819hsb4= EZ/3MVO8A6IMr4bRG9szJqDgj9M= fastly-domain-delegation-9klS1BNrxUWAS-11-03-2020 00d1t000000xooeea2 google-site-verification=1Of3OeY_aJIBKpW_H1lwOjjUUr1us1OcTW4rrj_v0mc emg15an0o6cl04db5cgso41m11 access-domain-verification=2ce0957ac72e33e08627872a090b01abf0181fb06e7e166ee5453... cisco-ci-domain-verification=36e06d0c21bb1c13285e6dcbe87f73dfb46b45424d4ddf9925d... brevo-code:b9daedf16a60557d5692889dbeed88db 3NL3ZRFLFIXHA1YQRE2QQCN2T1JIQMSOKD49UYLF google-site-verification=CI_nAgv8yCfQOW5VPD3mSPQFOwX_9NZO732u84LyQxk 5ljqm1gg61b36ku07dql6llb2d iioiojslubb6sqt22n45sg95b6 mh7ff3vvgg6acn96326s642r5c brevo-code:0d115a8db646eb6fa8a4f47ab1ca39e9 8f289ea8-08c1-4601-859b-c9244f0b6056 docusign=b084b565-9aad-4432-be42-ece28675840f B1ZRPwab7npzBF+6KrqL4GXVnxw= MS=ms21626114 |
| CAA | Lookup not available with standard resolver |
CAA record lookup requires a specialized DNS resolver. This check will be available in a future update.
Informational: CAA (Certification Authority Authorization) records weren't checked in this scan.
A+URL Variantswww/non-www, trailing slash, HTTP→HTTPSPASS
www / non-www
Preferred variant: non-www
HTTP → HTTPS
Consistent
A+Domain Intelligenceaccor.com — via CSC Corporate Domains, Inc., 28 years, 6 months old, hosted on INCAPSULA - Incapsula Inc, USPASS
251 days
February 22, 2027
83 days
Issued by GlobalSign nv-sa
28 years, 6 months
Registered February 23, 1998
Not enabled
Protects against DNS spoofing
INCAPSULA - Incapsula Inc, US
ASN AS19551
45.60.163.180
CSC Corporate Domains, Inc.
Expiry timeline
Recommended actions
- Enable DNSSEC to protect visitors from DNS spoofing
- Enable registrar lock (clientTransferProhibited) to block unauthorized domain transfers
DNSSEC protects against DNS spoofing attacks. While not required, enabling DNSSEC adds an additional layer of security. Contact your DNS provider to enable it.
Without DNSSEC, an attacker who can poison your DNS can hijack your domain — and SSL certs alone don't stop them.
Learn more ▾ ▴
DNSSEC adds cryptographic signatures to DNS records, preventing forged responses from poisoning resolver caches. Without it, an attacker who controls the network path can redirect your domain to a malicious server before any HTTPS handshake happens. Most modern registrars (Cloudflare, Google Domains, Route 53) enable it with one toggle.
Source: ICANN / RFC 4033
The domain can be transferred without an unlock step. Enable registrar lock (clientTransferProhibited) in your registrar's control panel to protect against unauthorized or accidental transfers.
Without registrar lock, an attacker who phishes your registrar credentials can transfer the domain in minutes — total brand hijack.
Learn more ▾ ▴
Registrar lock (clientTransferProhibited, clientUpdateProhibited, clientDeleteProhibited) requires extra verification before any transfer/update/delete. Every major registrar offers it free. Combined with 2FA on your registrar account, it's the strongest defense against domain hijacking.
Source: ICANN / domain-security best practice