Technical Information
| HTTP Status Code | 200 |
| HTTP Version | HTTP/1.1 |
| HTTPS | ✔ Available |
| IP Address | 23.214.159.142 |
| Compression | gzip |
|
🔄 🟡 Long Redirect Chain | There are 4 redirects, which may affect SEO and performance. |
|
🔄 🔴 Redirect Loop Detected | The URL "https://www.mandarinoriental.com/en" redirects to itself, creating a loop. |
HTTP Status Code 200
HTTP Version HTTP/1.1
HTTPS ✔ Available
IP Address 23.214.159.142
Compression gzip
🔄 🟡 Long Redirect Chain There are 4 redirects, which may affect SEO and performance.
🔄 🔴 Redirect Loop Detected The URL "https://www.mandarinoriental.com/en" redirects to itself, creating a loop.
Redirect Chain
| # | URL | HTTP Status Code | Status |
| 1 | https://mandarinoriental.com:443 | 301 | HTTP/2 301 |
| 2 | https://www.mandarinoriental.com/ | 301 | HTTP/2 301 |
| 3 | https://www.mandarinoriental.com/en/ | 301 | HTTP/2 301 |
| 4 | https://www.mandarinoriental.com/en | 200 | HTTP/2 200 |
#1 URL https://mandarinoriental.com:443
HTTP Status Code 301
Status HTTP/2 301
#2 URL https://www.mandarinoriental.com/
HTTP Status Code 301
Status HTTP/2 301
#3 URL https://www.mandarinoriental.com/en/
HTTP Status Code 301
Status HTTP/2 301
#4 URL https://www.mandarinoriental.com/en
HTTP Status Code 200
Status HTTP/2 200
Performance
| DNS Lookup | 0.4 ms |
| TCP Connect | 1.8 ms |
| TLS Handshake | 5.6 ms |
| Time To First Byte (TTFB) | 609.1 ms |
| Content Download | 202.4 ms |
| Total Response Time | 811.4 ms |
DNS Lookup 0.4 ms
TCP Connect 1.8 ms
TLS Handshake 5.6 ms
Time To First Byte (TTFB) 609.1 ms
Content Download 202.4 ms
Total Response Time 811.4 ms
Security
| HTTPS | ✔ Enabled |
| HSTS | ✔ max-age=86400 ; includeSubDomains |
| CSP | ✔ Configured |
| X-Frame-Options | ✔ DENY |
| X-Content-Type-Options | ✔ nosniff |
| Referrer Policy | unsafe-url |
| Permissions Policy | ✔ Configured |
| HTTP/2 | ⚠ HTTP/1.1 |
HTTPS ✔ Enabled
HSTS ✔ max-age=86400 ; includeSubDomains
CSP ✔ Configured
X-Frame-Options ✔ DENY
X-Content-Type-Options ✔ nosniff
Referrer Policy unsafe-url
Permissions Policy ✔ Configured
HTTP/2 ⚠ HTTP/1.1
SEO Quick Check
| Title | Luxury 5-Star Hotels & Resorts | Mandarin Oriental |
| Meta Description | World-class accommodations, spas and fine dining await in prestigious destinations. Reserve award-winning hotels and resorts with Mandarin Oriental. |
| Canonical | https://www.mandarinoriental.com/en |
| Robots Meta | ARCHIVE |
| Twitter Title | Luxury 5-Star Hotels & Resorts | Mandarin Oriental |
| Twitter Description | World-class accommodations, spas and fine dining await in prestigious destinations. Reserve award-winning hotels and resorts with Mandarin Oriental. |
Title Luxury 5-Star Hotels & Resorts | Mandarin Oriental
Meta Description World-class accommodations, spas and fine dining await in prestigious destinations. Reserve award-winning hotels and resorts with Mandarin Oriental.
Canonical https://www.mandarinoriental.com/en
Robots Meta ARCHIVE
Twitter Title Luxury 5-Star Hotels & Resorts | Mandarin Oriental
Twitter Description World-class accommodations, spas and fine dining await in prestigious destinations. Reserve award-winning hotels and resorts with Mandarin Oriental.
Detected Technologies
| Technology | Google Analytics Google Tag Manager Cloudflare Node.js |
Technology Google Analytics Google Tag Manager Cloudflare Node.js
HTTP Headers
| Content-type
| text/html; charset=utf-8 |
| X-xss-protection
| 1; mode=block |
| X-frame-options
| DENY |
| X-content-type-options
| nosniff |
| Referrer-policy
| unsafe-url |
| Permissions-policy
| accelerometer=(), camera=(), geolocation=*, gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=() |
| X-azure-ref
| 20260819T225839Z-166d4c6879fkdd9nhC1BNAn17n000000019g000000002axa |
| X-akamai-transformed
| 9 - 0 pmb=mRUM,2 |
| Vary
| Accept-Encoding |
| Content-encoding
| gzip |
| Expires
| Wed, 19 Aug 2026 22:58:39 GMT |
| Pragma
| no-cache |
| Date
| Wed, 19 Aug 2026 22:58:39 GMT |
| Set-cookie
| AKA_A2=A; expires=Wed, 19-Aug-2026 23:58:39 GMT; path=/; domain=mandarinoriental.com; secure; HttpOnly |
| Server-timing
| ak_p; desc="1787180319273_390846680_358948614_38008_4022_6_5_15";dur=1 |
| Link
| ;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect" |
| Cache-control
| no-store |
| Strict-transport-security
| max-age=86400 ; includeSubDomains |
| Content-security-policy
| default-src https: 'self' data: https://pay.datatrans.com *.demdex.net *.everesttech.net *.omtrdc.net *.sc.omtrdc.net *.tt.omtrdc.net; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://bzrcdn.openai.com https://pay.datatrans.com https://*.letsway.com https://pay.sandbox.datatrans.com https://utt.impactcdn.com https://*.googleapis.com https://*.kouto.co https://*.stripe.com https://*.imagekit.io https://*.bing.com https://*.creativecdn.com https://cloud.e.mandarinoriental.com https://siteintercept.qualtrics.com https://cdnjs.cloudflare.com https://cloud.official.mandarinoriental.com https://zn1z6joka9pfuojsc-mohgcx.siteintercept.qualtrics.com https://www.wepowerconnections.com https://lantern.roeyecdn.com https://tags.creativecdn.com https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.go-mpulse.net https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagservices.com https://assets.adobedtm.com https://b99.yahoo.co.jp https://commerce.adobedtm.com https://cdn.cookielaw.org https://connect.facebook.net https://content.linkedin.com https://graph.facebook.com https://googletagmanager.com https://js.facebook.com https://platform.linkedin.com https://p.teads.tv https://recaptcha.net https://snap.licdn.com https://static-exp1.licdn.com https://sc-static.net https://static.tacdn.com https://s.yimg.jp https://tagmanager.google.com https://tr.snapchat.com https://www.clarity.ms https://www.awin1.com https://www.dwin1.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.gstatic.cn/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://linkcenterus.derbysoftsec.com/ https://px.ads.linkedin.com/ https://analytics.tiktok.com https://secde.trivago.com https://js.verygoodvault.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cloud.e.mandarinoriental.com https://cloud.official.mandarinoriental.com *.licdn.com *.google.com www.googletagmanager.com; img-src 'self' data: https://*; worker-src 'self' blob:; |
| Access-control-allow-headers
| content-type,vgs-client,automatedtestheader |
| Access-control-allow-credentials
| true |
| Access-control-allow-methods
| GET,PUT,POST,DELETE,OPTIONS |
| Access-control-allow-origin
| https://fanclub.mandarinoriental.com;*.mandarinoriental.com;*.moweb-acc.com;*.sitecore.moweb-acc.com;*.managedcloud.sitecore.com;*.verygoodvault.com;*.verygoodproxy.com; |
Meta Tags
| Viewport | width=device-width, initial-scale=1 |
| Google-site-verification | VCC8Iu95FC_Yh6-ySR1S7EB-zTPOU2fWPzTmDKyCAPs |
| Description | World-class accommodations, spas and fine dining await in prestigious destinations. Reserve award-winning hotels and resorts with Mandarin Oriental. |
| Fb:app_id | appIdFace |
| Robots | ARCHIVE |
Content-type text/html; charset=utf-8
X-xss-protection 1; mode=block
X-frame-options DENY
X-content-type-options nosniff
Referrer-policy unsafe-url
Permissions-policy accelerometer=(), camera=(), geolocation=*, gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
X-azure-ref 20260819T225839Z-166d4c6879fkdd9nhC1BNAn17n000000019g000000002axa
X-akamai-transformed 9 - 0 pmb=mRUM,2
Vary Accept-Encoding
Content-encoding gzip
Expires Wed, 19 Aug 2026 22:58:39 GMT
Pragma no-cache
Date Wed, 19 Aug 2026 22:58:39 GMT
Set-cookie AKA_A2=A; expires=Wed, 19-Aug-2026 23:58:39 GMT; path=/; domain=mandarinoriental.com; secure; HttpOnly
Server-timing ak_p; desc="1787180319273_390846680_358948614_38008_4022_6_5_15";dur=1
Link ;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect",;rel="preconnect"
Cache-control no-store
Strict-transport-security max-age=86400 ; includeSubDomains
Content-security-policy default-src https: 'self' data: https://pay.datatrans.com *.demdex.net *.everesttech.net *.omtrdc.net *.sc.omtrdc.net *.tt.omtrdc.net; script-src 'self' 'report-sample' 'unsafe-inline' 'unsafe-eval' https://bzrcdn.openai.com https://pay.datatrans.com https://*.letsway.com https://pay.sandbox.datatrans.com https://utt.impactcdn.com https://*.googleapis.com https://*.kouto.co https://*.stripe.com https://*.imagekit.io https://*.bing.com https://*.creativecdn.com https://cloud.e.mandarinoriental.com https://siteintercept.qualtrics.com https://cdnjs.cloudflare.com https://cloud.official.mandarinoriental.com https://zn1z6joka9pfuojsc-mohgcx.siteintercept.qualtrics.com https://www.wepowerconnections.com https://lantern.roeyecdn.com https://tags.creativecdn.com https://*.demdex.net https://*.doubleclick.net https://*.everesttech.net https://*.go-mpulse.net https://*.google.com https://*.googleadservices.com https://*.googlesyndication.com https://*.googletagservices.com https://assets.adobedtm.com https://b99.yahoo.co.jp https://commerce.adobedtm.com https://cdn.cookielaw.org https://connect.facebook.net https://content.linkedin.com https://graph.facebook.com https://googletagmanager.com https://js.facebook.com https://platform.linkedin.com https://p.teads.tv https://recaptcha.net https://snap.licdn.com https://static-exp1.licdn.com https://sc-static.net https://static.tacdn.com https://s.yimg.jp https://tagmanager.google.com https://tr.snapchat.com https://www.clarity.ms https://www.awin1.com https://www.dwin1.com https://www.google.com/recaptcha/ https://www.googletagmanager.com https://www.gstatic.cn/recaptcha/ https://www.gstatic.com https://www.gstatic.com/recaptcha/ https://www.recaptcha.net https://linkcenterus.derbysoftsec.com/ https://px.ads.linkedin.com/ https://analytics.tiktok.com https://secde.trivago.com https://js.verygoodvault.com; style-src 'self' 'report-sample' 'unsafe-inline' https://fonts.googleapis.com https://cloud.e.mandarinoriental.com https://cloud.official.mandarinoriental.com *.licdn.com *.google.com www.googletagmanager.com; img-src 'self' data: https://*; worker-src 'self' blob:;
Access-control-allow-headers content-type,vgs-client,automatedtestheader
Access-control-allow-credentials true
Access-control-allow-methods GET,PUT,POST,DELETE,OPTIONS
Access-control-allow-origin https://fanclub.mandarinoriental.com;*.mandarinoriental.com;*.moweb-acc.com;*.sitecore.moweb-acc.com;*.managedcloud.sitecore.com;*.verygoodvault.com;*.verygoodproxy.com;
