shopmandalaybay.com

HTML metadata

Title

Shop Mandalay Bay Beds, Bedding, Bath & Spa, Fragrance, Outdoor Living and More

Description

Enrich your living space with Mandalay Bay's premium collection of beds, bedding, bath & spa essentials, fragrances, outdoor lighting & furniture, pool amenities and more.

Language

en

Canonical

https://www.shopmandalaybay.com/

Translations

en ×2

Open Graph

url: https://www.shopmandalaybay.com/index.aspx
title: Shop Mandalay Bay Beds, Bedding, Bath & Spa, Fragrance, Outdoor Living and More
site name: Shop Mandalay Bay
description: Enrich your living space with Mandalay Bay's premium collection of beds, bedding, bath & spa essentials, fragrances, outdoor lighting & furniture, pool amenities and more.

Technology

CDN: Amazon CloudFront

Analytics

Google Tag Manager

Third-party hosts loaded (4)

514023213.collect.igodigital.com×1
ajax.googleapis.com×1
cloud.typography.com×1
www.googletagmanager.com×1

Contact

Phone

1-877-673-1975

Registration

Registrar

Nom-iq Ltd. dba COM LAUDE

Created

2022-03-15

Expires

2027-03-15 298 days left

Updated

2026-03-05

Name servers

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns15.dnsmadeeasy.com

DNS records live

NS

ns10.dnsmadeeasy.com
ns11.dnsmadeeasy.com
ns12.dnsmadeeasy.com
ns13.dnsmadeeasy.com
ns14.dnsmadeeasy.com
ns15.dnsmadeeasy.com

MX

1 mx1-us1.ppe-hosted.com
5 mx2-us1.ppe-hosted.com

TXT

Show 4 TXT records

ppe-251fc496b5ae82fa50c275a4930c66494cce90df
x0qjy4r0c1gwdy2809f2d9tlhnvsddsj
dr95fzgh3c574kx8085rtqwypg55fc61
b5lkxt5hq6sn84z4b4w792sxkl3vbfrd

Verified for

Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 a:dispatch-us.ppe-hosted.com include:_spf.smtp.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; aspf=r; rua=mailto:dmarc-report@shopmandalaybay.com; ruf=mailto:dmarc-report@shopmandalaybay.com; fo=1; pct=100

policy: reject (enforced) · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlfEws5tZTcbPvL/qFdwSsrCfE+EZfWeSJeeOumXNQqG+5GcLWHZAtzt/rkkSAaWiJWLTPnTjxdH+g…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-02-26 to 2027-03-14

Expires in 297 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.shopmandalaybay.com/index.aspx

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'nonce-FWfWkQcK6qyTDRyNBe/Bwg==' https://www.googletagmanager.com https://ajax.googleapis.com https://static-na.payments-amazon.com https://maps.googleapis.com https://www.google.com https://client.rum.us-east-1.amazonaws.com; style-src 'self' 'unsafe-inline' ; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' https://nova.collect.igodigital.com https://m.media-amazon.com https://p.typekit.net https://www.googletagmanager.com https://cdn-assets.affirm.com https://www.google.com; object-src 'none'; frame-src 'self' https://www.googletagmanager.com https://www.google.com https://td.doubleclick.net;
strict-transport-security: max-age=31536000; includeSubDomains; preload