shopnewyorknewyork.com

HTML metadata

Title

Shop New York-New York Las Vegas

Description

Shop the New York-New York collection of premium hotel beds, bedding, linens, towels, robes, vanity mirrors, fragrances, and gifts for any occasion.

Language

en

Canonical

https://www.shopnewyorknewyork.com/

Translations

en ×2

Open Graph

url: https://www.shopnewyorknewyork.com/index.aspx
title: Shop New York-New York Las Vegas
site name: Shop New York-New York
description: Shop the New York-New York collection of premium hotel beds, bedding, linens, towels, robes, vanity mirrors, fragrances, and gifts for any occasion.

Technology

CDN: Amazon CloudFront

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (5)

514029082.collect.igodigital.com×2
use.typekit.net×2
www.googletagmanager.com×2
client.rum.us-east-1.amazonaws.com×1
dataplane.rum.us-east-1.amazonaws.com×1

Contact

Phone

1-877-607-0601

Registration

Registrar

Nom-iq Ltd. dba COM LAUDE

Created

2022-11-29

Expires

2026-11-29 192 days left

Updated

2026-02-23

Name servers

ns20.digicertdns.com
ns21.digicertdns.com
ns22.digicertdns.com
ns23.digicertdns.net
ns24.digicertdns.net
ns25.digicertdns.net

DNS records live

NS

ns20.digicertdns.com
ns21.digicertdns.com
ns22.digicertdns.com
ns23.digicertdns.net
ns24.digicertdns.net
ns25.digicertdns.net

MX

1 mx1-us1.ppe-hosted.com
5 mx2-us1.ppe-hosted.com

TXT

ppe-dd89f80c3c91008ede0d9fee38e49b5ec1127047
3nj06kxfr7nkfs9r2mz1lzqc39jbx455
tclmjb9p8dtxnrw4rb43hcgmxvy6wsc2

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a:dispatch-us.ppe-hosted.com include:_spf.smtp.com include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=none; pct=100; aspf=r;

policy: reject (enforced) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylUhI9QQgN7fTsAhkN3KPUGbREMfmhMPTP91DS9kE6a1ckDE9SURj5bWkX0UGhwU+YTsPDF609ORLl…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2026-02-26 to 2027-03-07

Expires in 290 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.shopnewyorknewyork.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'nonce-dq/PEQTctP4sSLIDjzzSqg==' https://www.googletagmanager.com https://ajax.googleapis.com https://maps.googleapis.com https://static-na.payments-amazon.com https://www.google.com https://bat.bing.com https://514022985.collect.igodigital.com https://client.rum.us-east-1.amazonaws.com; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net; font-src 'self' https://use.typekit.net https://fonts.gstatic.com; img-src 'self' https://nova.collect.igodigital.com https://m.media-amazon.com https://p.typekit.net https://www.googletagmanager.com https://cdn-assets.affirm.com https://www.google.com; object-src 'none'; frame-src 'self' https://www.google.com https://www.googletagmanager.com https://td.doubleclick.net;
strict-transport-security: max-age=31536000; includeSubDomains; preload