malmaison.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-07 · ok HTTP/1.1 200 555 ms crawled 2026-05-06

IE · 20.123.112.151 · AS8075 Microsoft Corporation

Reputation 97/100 dmarc monitor-only

Classifying

HTML metadata

Title: Discover Luxury Boutique Hotels & Dining | Malmaison
Description: Explore boutique hotels with a difference at Malmaison. Uniquely designed rooms, renowned restaurants, spas & more in prime locations.
Language: en
Canonical: https://www.malmaison.com/

Technology

CDN: Azure Front Door

Social

Registration

Registrar

Nom-iq Ltd. dba COM LAUDE

Created

1996-06-05

Expires

2027-06-04 380 days left

Updated

2026-04-20

Name servers

ns0.demysdns.net
ns1.demysdns.net
ns2.demysdns.net
ns3.demysdns.net
ns4.demysdns.co.uk
ns5.demysdns.co.uk
ns6.demysdns.co.uk

DNS records live

NS

ns0.demysdns.net
ns1.demysdns.net
ns2.demysdns.net
ns3.demysdns.net
ns4.demysdns.co.uk
ns5.demysdns.co.uk
ns6.demysdns.co.uk

MX

0 malmaison-com.mail.protection.outlook.com

TXT

Show 12 TXT records

google-gws-recovery-domain-verification=70667657
knowbe4-site-verification=5b5c0253b18b2299253e1e702e21048b
apple-domain-verification=CekiMUUxSOmClHP8
workplace-domain-verification=xdKhUkf9IXrimRkHdRoZ0WPfHz4f5K
MS=ms78220442
google-site-verification=gMoLbjK5jaxBwvaTWLA_sAV9xYZBNUfQrSloQCDKtuo
adobe-idp-site-verification=8417f56fe9f57b5792f45713c2e49d0e827bb0f4c1fd8928940b6ed1ec689b52
_globalsign-domain-verification=1Jygx0Dnclrrj8v9IkeznW_Ip1KdVBu1d-p7XTm1JU
docusign=fedcaf16-600a-4937-a0df-d558f8a74e98
mandrill_verify.DhSbF-Yv5MAIXPi0KcWXSw
_globalsign-domain-verification=SOHc5TJGOH5v6XFhJBxKzP0EQTlFWm19kWQQOgxFr4
00Dd3000002fTUj=1TBQ50000000149

Email authentication strong

SPF

v=spf1 ip4:195.200.133.244 ip4:82.109.228.53 ip4:149.72.134.139 ip4:20.26.217.83 include:txdlimited.co.uk include:microsdc.com include:oracleindustry.com include:spf.protection.outlook.com include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:mailauth-reports@malmaison.com

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxhb5i5452RNEOlAglbqBqtGUisb1yN4LDt4wyfV/2ZiFvnKNhCRdeLENnESvjBheh39YZdXNtbPWt…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TECJqBO1YKy8sPMk5fAMhNDl79x9Vu+Z+1A3SKUgP+TCNgW8VDlD5Db6g2yH5t2E9i5Fva4AR9Lxmz02j…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXrxU8ByIdoOv9X/asoCTiBBz3IM/7/IZ/vgY3+TN2qdJE9aviLQY7S4+oWjwKu7UjK+eAwWFu/nSkqQ0t…

selectors probed

Certificate (current)

GlobalSign GCC R3 DV TLS CA 2020

from 2025-07-07 to 2026-08-08

Expires in 81 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.malmaison.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(self), camera=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), payment=(self), usb=(self)
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; base-uri 'self'; frame-ancestors 'self'; form-action 'self' *.cybersource.com; object-src 'none';
strict-transport-security: max-age=31536000; includeSubDomains; preload