lmflooring.com

.com crawl

First seen 2026-04-20 · Last seen 2026-05-14 · ok HTTP/1.1 200 1215 ms crawled 2026-05-14

US · 54.165.109.83 · AS14618 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

Classifying

HTML metadata

Title: Natural Hardwood | Homepage | LM Flooring
Language: en-us
Canonical: https://www.lmflooring.com/en-us

Open Graph

url: https://www.lmflooring.com/en-us
title: Natural Hardwood | Homepage | LM Flooring
locale: en-us
site name: Natural Hardwood | Homepage | LM Flooring

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Gatsby

Social widgets

YouTube Embed

Third-party hosts loaded (3)

cdn.roomvo.com×1
js.hsforms.net×1
www.youtube.com×1

Social

Contact

Phone

1-866-243-2726

Address

P.O. Box 4905, 17604, Lancaster, PA, United States

Registration

Registrar

CSC Corporate Domains, Inc.

Created

2000-09-25

Expires

2026-09-25 129 days left

Updated

2025-09-21

Name servers

dns1.cscdns.net
dns2.cscdns.net

DNS records live

NS

dns1.cscdns.net
dns2.cscdns.net

MX

10 lmflooring-com.mail.protection.outlook.com

TXT

MS=ms70321880

Email authentication weak

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

not published

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iCQVF0l7igNHUUVEcyNon95HNQrrP3c6B1RO7J1o7hA92G9upKcTzRr1zkaEV4Pmmbcdos1BNxczO…
dkim: v=DKIM1; t=y; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fju5dRLECYeUvZEy2idRbmGYamu6ezAU8wSqMiwYOy3nnud83HS1VLn5VDpWim8lTgQd3gQD…

selectors probed

Certificate (current)

Corporation Service Company RSA DV SSL CA 2

from 2026-03-30 to 2026-10-15

Expires in 149 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.lmflooring.com/en-us

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self "https://www.lmflooring.com"), microphone=(), camera=()
x-content-type-options: nosniff
content-security-policy: script-src 'self' 'unsafe-inline' 'unsafe-eval' *.ahfproducts.com *.dev.ahfproducts.com *.youtube.com *.gstatic.com *.google.com *.googleapis.com *.google-analytics.com *.googletagmanager.com *.googleadservices.com *.facebook.net *.addthis.com *.addthisedge.com *.moatads.com *.hs-scripts.com *.hsforms.net *.hsforms.com *.getcandid.com *.hsadspixel.net *.hs-banner.com *.hsleadflows.net *.hscollectedforms.net *.hs-analytics.net content-getcandid.netdna-ssl.com googleads.g.doubleclick.net *.8x8.com widgets.pinterest.com *.roomvo.com *.bruce.com *.hartco.com *.robbins.com *.ahfcontract.com *.tmbrflooring.com *.raintreefloors.com *.armstrongflooring.com *.usemessages.com *.hubspot.com sibforms.com widget.tagembed.com cdn.tagembed.com kit.fontawesome.com cdn.oribi.io vidassets.terminus.services snap.licdn.com pi.pardot.com cloud.tagbox.com static.hotjar.com script.hotjar.com cloud.tagbox.com cdn.jsdelivr.net; frame-src 'self' *.youtube.com *.addthis.com *.getcandid.com *.facebook.com *.8x8
strict-transport-security: max-age=31536000; includeSubDomains