homerwood.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 1122 ms crawled 2026-05-14

US · 54.165.109.83 · AS14618 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title
Premium Engineered Hardwood Floors | HomerWood
Language
en-us
Canonical
https://www.homerwood.com/en-us

Open Graph

url
https://www.homerwood.com/en-us
title
Premium Engineered Hardwood Floors | HomerWood
locale
en-us
site name
Premium Engineered Hardwood Floors | HomerWood

Technology

CDN
Amazon CloudFront
Server
nginx

Contact

Phone
Address
P.O. Box 4905, 17604, Lancaster, PA, United States

Registration

Registrar
CSC Corporate Domains, Inc.
Created
1997-09-15
Expires
2026-09-14 118 days left
Updated
2025-09-10
Name servers
  • dns1.cscdns.net
  • dns2.cscdns.net

DNS records live

NS
  • dns1.cscdns.net
  • dns2.cscdns.net
MX
  • 0 homerwood-com.mail.protection.outlook.com
TXT
  • MS=ms66066947

Email authentication weak

SPF
v=spf1 a mx ip4:208.109.33.155 include:spf.protection.outlook.com include:secureserver.net -all
strict (-all)
DMARC
not published
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYuIfGCrPHEdtObK7FFWJzUPsBCJhWgmcdPIZwWpCuXgQ/ZGycXp6ROK2o4AY3DQ0acATkhHG40Ppr…
  • selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA98OvX7naFR+89leFTKBmmrnrvcZMhje/9X6/DkIcpxBPdK2XBHTKaml1FTLXRAOFJrjgpPcQnQzT/+…
selectors probed

Certificate (current)

Corporation Service Company RSA DV SSL CA 2
from 2026-02-20 to 2027-02-21
Expires in 278 days

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.homerwood.com/en-us

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
origin
x-frame-options
SAMEORIGIN
permissions-policy
geolocation=(self "https://www.homerwood.com"), microphone=(), camera=()
x-content-type-options
nosniff
content-security-policy
script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ahfproducts.com *.dev.ahfproducts.com *.youtube.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.addthis.com *.addthisedge.com *.moatads.com *.hs-scripts.com *.hsforms.net *.hsforms.com *.getcandid.com *.hsadspixel.net *.hs-banner.com *.hsleadflows.net *.hscollectedforms.net *.hs-analytics.net content-getcandid.netdna-ssl.com googleads.g.doubleclick.net *.8x8.com widgets.pinterest.com *.roomvo.com *.bruce.com *.hartco.com *.robbins.com *.ahfcontract.com *.tmbrflooring.com *.raintreefloors.com *.armstrongflooring.com *.usemessages.com *.hubspot.com sibforms.com widget.tagembed.com cdn.tagembed.com kit.fontawesome.com cdn.oribi.io vidassets.terminus.services snap.licdn.com pi.pardot.com cloud.tagbox.com static.hotjar.com script.hotjar.com cloud.tagbox.com cdn.jsdelivr.net; frame-src 'self' *.youtube.com *.addthis.com *.getcandid.com *.facebook.com *.8x8
strict-transport-security
max-age=31536000; includeSubDomains

Links to (6)

Linked from (7)