bruce.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 404 ms crawled 2026-05-14

US · 54.165.109.83 · AS14618 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title: Hardwood Flooring – America is Built on Bruce Floors
Description: America has been built on Bruce hardwood flooring since 1884. Vast selection of solid and engineered hardwoods in oak, hickory, maple, and more.
Language: en-us
Canonical: https://www.bruce.com/en-us

Open Graph

url: https://www.bruce.com/en-us
title: Hardwood Flooring – America is Built on Bruce Floors
locale: en-us
site name: Hardwood Flooring – America is Built on Bruce Floors

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Gatsby

Third-party hosts loaded (2)

js.hsforms.net×1
www.roomvo.com×1

Social

Contact

Phone

1-866-243-2726

Address

P.O. Box 4905, 17604, Lancaster, PA, United States

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1994-01-20

Expires

2027-01-21 247 days left

Updated

2026-01-17

Name servers

dns1.cscdns.net
dns2.cscdns.net

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

0 bruce-com.mail.protection.outlook.com

TXT

MS=ms16341086
MS=ms43300616
google-site-verification=JF_hRjj3Ry_fQgdPBPc1rNafmiqvaoV7iHt1RSgz8WA

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com include:1572336.spf10.hubspotemail.net ip4:64.64.156.33 ip4:64.64.156.34 ip4:64.64.156.35 ip4:204.74.20.14 ip4:204.74.20.220 ip4:64.64.156.157 ip4:204.74.20.252 -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:ahf.alerts@ahfproducts.com; ruf=mailto:ahf.alerts@ahfproducts.com; aspf=r; adkim=r;sp=none; fo=0;

policy: none (monitoring only) · sp=none

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDQtLBiDpJH2oN57tp+4uP7PVy6zXkbgFkLdVOd+je3ANMkblc+jiLqnpi4n+VNqQ6ssFxX6mhGewzK0MtfOa…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCUCEXxyft4yZwp1P1qcPPbTohTez6wD666X7BiViBtxQ+ruTZ6pVWqYeIgMSBjqO9GTXlcjrOQ0F4rxO23+K…

selectors probed

Certificate (current)

Corporation Service Company RSA DV SSL CA 2

from 2026-02-20 to 2027-02-21

Expires in 278 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bruce.com/en-us

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://www.bruce.com"), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ahfproducts.com *.dev.ahfproducts.com *.youtube.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.addthis.com *.addthisedge.com *.moatads.com *.hs-scripts.com *.hsforms.net *.hsforms.com *.getcandid.com *.hsadspixel.net *.hs-banner.com *.hsleadflows.net *.hscollectedforms.net *.hs-analytics.net content-getcandid.netdna-ssl.com googleads.g.doubleclick.net *.8x8.com widgets.pinterest.com *.roomvo.com *.bruce.com *.hartco.com *.robbins.com *.ahfcontract.com *.tmbrflooring.com *.raintreefloors.com *.armstrongflooring.com *.usemessages.com *.hubspot.com sibforms.com widget.tagembed.com cdn.tagembed.com kit.fontawesome.com cdn.oribi.io vidassets.terminus.services snap.licdn.com pi.pardot.com cloud.tagbox.com static.hotjar.com script.hotjar.com cloud.tagbox.com cdn.jsdelivr.net; frame-src 'self' *.youtube.com *.addthis.com *.getcandid.com *.facebook.com *.8x8
strict-transport-security: max-age=31536000; includeSubDomains