ihgplc.com

HTML metadata

Title: InterContinental Hotels Group PLC
Description: We are one of the world's leading hotel companies, whose purpose is to provide True Hospitality for Good.
Language: en
Canonical: https://www.ihgplc.com/

Open Graph

url: https://www.ihgplc.com/en
title: Home
site name: InterContinental Hotels Group PLC
description: We are one of the world's leading hotel companies, whose purpose is to provide True Hospitality for Good.

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Cookie consent

TrustArc

Fonts

Google Fonts

Social widgets

Vimeo Embed

Third-party hosts loaded (13)

cdnjs.cloudflare.com×3
www.googletagmanager.com×3
fonts.googleapis.com×2
otp.tools.investis.com×2
player.vimeo.com×2
cdn.jsdelivr.net×1
cloud.typenetwork.com×1
cloud.typography.com×1
code.jquery.com×1
consent.trustarc.com×1
fonts.gstatic.com×1
irs.tools.investis.com×1
viz.tools.investis.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2003-03-19

Expires

2027-03-19 303 days left

Updated

2026-02-15

Name servers

ns1.markmonitor.com
ns2.markmonitor.com
ns3.markmonitor.com
ns4.markmonitor.com
ns5.markmonitor.com
ns6.markmonitor.com

DNS records live

NS

ns1.markmonitor.com
ns2.markmonitor.com
ns3.markmonitor.com
ns4.markmonitor.com
ns5.markmonitor.com
ns6.markmonitor.com
ns7.markmonitor.com

TXT

facebook-domain-verification=ocjtgeu9ri3a7rfys59majf0c8mll1
google-site-verification=qQYAUlJvAz2JJYcRFBaLyLlroMLYOkx5qrbAMuT7eRA

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2026-02-27 to 2027-02-28

Expires in 284 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.ihgplc.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: ALLOW-FROM development.ihg.com https://ihg-development-v2.did2-e1.investis.com
permissions-policy: accelerometer=(),ambient-light-sensor=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gyroscope=(), magnetometer=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options: nosniff
content-security-policy: default-src *.myidx.cloud 'self' media.idigitalcontents.com cloud.typography.com cloud.typenetwork.com ajax.googleapis.com fonts.googleapis.com use.typekit.net *.analytics.google.com *.google.com *.google-analytics.com google-analytics.com static.cloudflareinsights.com code.highcharts.com viz.tools.investis.com edge.api.brightcove.com *.brightcovecdn.com; img-src *.myidx.cloud 'self' 'unsafe-inline' * data: www.w3.org; frame-src *.myidx.cloud 'self' media.idigitalcontents.com consent-pref.trustarc.com ihg-development-v2.did2-e1.investis.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net ir.tools.investis.com td.doubleclick.net *.trustarc.co viz.tools.investis.com *.google.com irs.tools.investis.com otp.tools.investis.com connectidfeed.com *.connectidfeed.com www.youtube.com *.vimeo.com *.investis.com; style-src *.myidx.cloud 'self' 'unsafe-inline' 'unsafe-eval' cloud.typography.com cloud.typenetwork.com hello.myfonts.net google-analytics.com fonts.goog
strict-transport-security: max-age=15552000; includeSubDomains; preload