stevemadden.com

HTML metadata

Title: Steve Madden® Official Site | Free Shipping on orders $75+
Description: Sign up for SM Pass today. Shop your favorite Steve Madden shoes, handbags, apparel and accessories. Buy now and pay later.
Language: en
Canonical: /

Open Graph

url: https://www.stevemadden.com/
title: Steve Madden® Official Site | Free Shipping on orders $50+
site name: Steve Madden
description: Sign up for SM Pass today. Shop your favorite Steve Madden shoes, handbags, apparel and accessories. Buy now and pay later.

Technology

CDN: Cloudflare
CMS: Shopify

Cookie consent

OneTrust

Third-party hosts loaded (26)

cdn.shopify.com×22
images.contentstack.io×22
cdn.luckylabs.io×6
cdnjs.cloudflare.com×3
d1fghtjypwlbrf.cloudfront.net×2
pif.luckylabs.io×2
shop.app×2
static-autocomplete.fastsimon.com×2
static.shopmy.us×2
swymv3premium-01.azureedge.net×2
web-assets.stylitics.com×2
cdn-widgetsrepository.yotpo.com×1
cdn.cookielaw.org×1
cdn.elements.amazon×1
cdn.kueskipay.com×1
config.gorgias.chat×1
config.gorgias.help×1
content.9gtb.com×1
monorail-edge.shopifysvc.com×1
static.afterpay.com×1
swym.it×1
swymstore-v3premium-01.swymrelay.com×1
tags.pw.adn.cloud×1
try.abtasty.com×1
vice-prod.sdiapi.com×1
www.api.fastsimon.com×1

Social

Contact

Email

info@stevemaddendirect.com

Phone

15710688510085

Address

52-16 Barnett Avenue, 11104, Long Island City, New York, United States

Registration

Registrar

101domain GRS Limited

Created

1998-08-18

Expires

2029-08-17 1186 days left

Updated

2021-08-23

Name servers

dale.ns.cloudflare.com
liv.ns.cloudflare.com

DNS records live

NS

dale.ns.cloudflare.com
liv.ns.cloudflare.com

MX

0 stevemadden-com.mail.protection.outlook.com

TXT

Show 24 TXT records

qh99mj2f2c3z35jk74y45p900s3brds7
intersight=0e57b7edfd7460f71160d9af9b0c8e761ef41ab64630d1634c59bccf93c00a17
google-site-verification=TrFbBVVAi9y_1Vfax1BgKiwETQ5UfyN9rKTYS8h5zS4
MS=ms15203529
openai-domain-verification=dv-AXTdNVszmUflhLtvQzCdzvW6
_f3pdg3qg7zc02d69dvmtknu09zp7em3
infor-cloudsuite-domain-verification=7JN5S24VK5E8PRUMFAWL8GE7BA2M9EX96BV2C9W6DWQ82H3QGD6EFB43H3F3NCJN
google-site-verification=5GKiiQWJzNhFqMy0ODgwKTI-FmMVk9r0dELKiVnKu9E
google-site-verification=jqDH7AkvtHt0VRrnq0aiWHHxegPKx5USr12OLxE8VKc
google-site-verification=LTPPDqKsfldDX3UUBP3gkTHgfnQ_YtDO1aSIRTOLCh4
hyz7vskyjblm9fq0d8vd2gz1pthv1bx3
miro-verification=b242cead1abe8756d566052eb7f25479f5061e08
logmein-verification-code=CnQhc0vO6L32XeiODQl6A9dNY
specops-verification-code=ac01ad4e-4748-4211-8a29-df4a7c80ac88
_6icsyg0ev2qhpp57f9mrp2w4p1myfrg
aliyun-site-verification=63de2d2d-99bf-4909-969f-4e6b3d8c4cae
asv=8925d7922b5ab85174abebb3b6eb2a9b
atlassian-domain-verification=/B8oToOejUmddGaCW9nREFzdda7uAyF7gaHHOTqqP3jw10MJY2XoceaaHYz9SQh4
7qqlxs4c1b3lntzhb7kybslpkbmr5gk5
apple-domain-verification=Zg9f52xAnmhyYY45
facebook-domain-verification=a9c12srpkdgy1yaj7lob76g9u6z8w8
7n3qwskhgsl97qyldglp5p7ys97g1pzg
fa40lwoN1uPxuVBc+S0FEVZmauROA3zn0BXGWMNKL6o2ks/+/0nxjTYt95XiVEyGAo0RnYlHd3+EIfRUGWnBUg==
duo_sso_verification=7ZfZXvQPTfIg3XNAv3qLb5VtXYXZ9V5S8v88pA4FppJ8IvfJEzcP0Rx0xYEz9Y2h

Email authentication partial

SPF

v=spf1 ip4:169.55.48.51 ip4:12.233.90.84 ip4:104.37.18.10 ip4:104.37.18.23 ip4:104.37.19.10 include:spf.protection.outlook.com include:spf.constantcontact.com include:223d03.workshop-spf.net ~all

softfail (~all)

DMARC

v=DMARC1;p=none;rua=mailto:f92a507e4a@rua.easydmarc.us;ruf=mailto:f92a507e4a@ruf.easydmarc.us;fo=1;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+wAdvZfe5g7amify/L2WSEk3nAyh9Zp0FVIGkyxUtgGOo2vTKxSTFBGgqnXe+v4Fh3k+8FiXjiR4J…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxx68DAlB+5FPxQ9dQcORlzLobVSodTT2DNrcU6aTIBenc1+JY+d7xmNRTTigTgemFAPVe241yPjb5z…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA046SYnEDE0ugwkfPkvnKbgMurJ3VcWu1uDFBgmnu2frH9V5cuAaZNMDknVjkntqKRdirbV2tDUMMIW0R5Z…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDTTv1bjTip9txPPx2CWU08ERyukHPKkdZiYf2UgcTKu92u6C8ILh48D61zi9/MfvXS/T6eUIfTHb79Wydr1aIeBS…

selectors probed

Certificate (current)

E8

from 2026-03-30 to 2026-06-28

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.stevemadden.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

short HSTS max-age
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: block-all-mixed-content; frame-ancestors *; upgrade-insecure-requests;
strict-transport-security: max-age=7889238