playnicetogether.com

HTML metadata

Title: Play Nice Together: Web Design & Branding Services in Westchester, NY
Description: When Design and Tech get a long, it’s a beautiful thing! Digital Design firm based out of Westchester County, NY. We love you already.
Canonical: https://www.playnicetogether.com/

Open Graph

url: https://www.playnicetogether.com/
title: Play Nice Together: Web Design & Branding Services in Westchester, NY
locale: en_US
site name: Play Nice Together
description: When Design and Tech get a long, it’s a beautiful thing! Digital Design firm based out of Westchester County, NY. We love you already.

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts
Font Awesome

Third-party hosts loaded (5)

cdn.bytesizedhost.com×13
use.fontawesome.com×3
stats.pntcms.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Tucows Domains Inc.

Created

2015-03-07

Expires

2027-03-07 290 days left

Updated

2026-02-06

Name servers

ns10.playnicetogether.com
ns10.playnicetogether.info
ns10.playnicetogether.net
ns10.playnicetogether.org

DNS records live

NS

ns10.playnicetogether.com
ns10.playnicetogether.info
ns10.playnicetogether.net
ns10.playnicetogether.org

MX

10 boron.playnicetogether.com
10 radon.playnicetogether.com

TXT

amazon-business-verification=29521f15c7a2f73c3f962bea7dfff7378797333f5c863f9ee0f150cb753cbf00

Verified for

Dropbox
Google
Microsoft 365
Slack
Yandex

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:_spf.playnicetogether.com include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:wzerJ5IHkSvP@rua.bytesizedhost.com; ruf=mailto:wzerJ5IHkSvP@ruf.bytesizedhost.com; aspf=r; adkim=r;

policy: reject (enforced)

DKIM

default: v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDuhAscRx8Mqfx5940OcHARpOheZ20L1P7Z0jsH76uzCHkkv2ie8lHPRNHEGaWeUjZQQvL8w14xhFsUy…
google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCLdV1z+N72UpOK6cYnpNUdv0uVc+9uqhRE2etiT/kP38CzDow9Xo8p8sNB+/OT7xrdujbXK8FYdd5t0EcP0O…

selectors probed

Certificate (current)

E7

from 2026-03-22 to 2026-06-20

Expires in 30 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.playnicetogether.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; worker-src 'self' blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://*.google-analytics.com https://www.gstatic.com https://stats.pntcms.com https://use.typekit.net blob:; connect-src 'self' https://www.google-analytics.com https://*.analytics.google.com https://*.googletagmanager.com https://stats.pntcms.com; img-src 'self' data: https://cdn.bytesizedhost.com https://p.typekit.net https://www.google-analytics.com https://*.googletagmanager.com https://stats.g.doubleclick.net https://stats.pntcms.com; style-src 'self' 'unsafe-inline' https://*.fontawesome.com https://*.typekit.net; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'self'; font-src 'self' https://use.fontawesome.com https://use.typekit.net; report-uri https://api.pntcms.com/csp/reporting/; report-to csp-endpoint;
strict-transport-security: max-age=31536000

Links to (4)

Linked from (1)

smhnyc.org×2