messinasflooring.com

HTML metadata

Title: Residential & Commercial Flooring in Salem, NH | Messina's Flooring
Description: Messina's Flooring is your source for quality flooring solutions for residential and commercial projects in and around Salem, NH! Learn more!
Language: en-US
Canonical: https://www.messinasflooring.com/

Open Graph

url: https://www.messinasflooring.com/
title: Residential & Commercial Flooring in Salem, NH | Messina's Flooring
locale: en_US
site name: Messina's Flooring
description: Messina's Flooring is your source for quality flooring solutions for residential and commercial projects in and around Salem, NH! Learn more!

Technology

Server: LiteSpeed
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (13)

cdnjs.cloudflare.com×2
fonts.gstatic.com×2
mm-media-res.cloudinary.com×2
viz.broadlu.me×2
fonts.googleapis.com×1
gmpg.org×1
mmllc-images.s3.amazonaws.com×1
mmllc-images.s3.us-east-2.amazonaws.com×1
session.mm-api.agency×1
static.floorforce.com×1
www.floorlytics.broadlu.me×1
www.googletagmanager.com×1
www.roomvo.com×1

Contact

Phone

Registration

Registrar

Register.com - Network Solutions, LLC

Created

2002-11-18

Expires

2029-11-18 1279 days left

Updated

2024-10-18

Name servers

dns105.register.com
dns106.register.com

DNS records live

NS

dns105.register.com
dns106.register.com

MX

0 messinasflooring-com.mail.protection.outlook.com

TXT

MS=ms57045435
v=DMARC1; p=quarantine; rua=mailto:dmarc@messinasflooring.com;

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=none;

policy: none (monitoring only)

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HG56W3UecdAmipE+f2mwZ6i/v2N/zhdEiSIfLCcjoH9iO1ZpvQh/ncIK8pSJJU+kqRzyME4LcBt1khttA…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDuzx+yf87S0G1d3JMwSWGGV6k3wdl2Wk+8D86noKR+auqFI1KIONy6LIivZRVILXwBYAAjbYsPkR5gUeJ7aKvXmy…

selectors probed

Certificate (current)

R12

from 2026-03-31 to 2026-06-29

Expires in 41 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.messinasflooring.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy
cross-origin-opener-policy
cross-origin-embedder-policy
cross-origin-resource-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), autoplay=(), camera=(), cross-origin-isolated=(), display-capture=(self), encrypted-media=(), fullscreen=*, geolocation=(self), gyroscope=(), keyboard-map=(), magnetometer=(), microphone=(), midi=(), payment=*, picture-in-picture=*, publickey-credentials-get=(), screen-wake-lock=(), sync-xhr=*, usb=(), xr-spatial-tracking=(), gamepad=(), serial=(), geolocation=(self ""), geolocation=(self "")
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' data: session.mm-api.agency mmllc-images.s3.amazonaws.com www.roomvo.com mm-media-res.cloudinary.com https://session.mm-api.agency/init facebook.com connect.facebook.net https://www.gstatic.com/wcm/loader.js googleadservices.com *.stripe.com https://i.vimeocdn.com/video/ https://player.vimeo.com https://vimeo.com/api/oembed.json http://www.googletagservices.com https://cdnjs.cloudflare.com https://i.simpli.fi/ https://*.audioeye.com/ https://sampleproduct.mm-dev.agency/ https://insight.adsrvr.org/ *.slabcloud.com *.cloudflareinsights.com *.vimeo.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.cloudflareinsights.com *.stripe.com https://slabcloud.com *.slabcloud.com *.sentry.io *.amazonaws.com *.yourgreatfloors.com *.cloudfront.net/ *.tvsquared.com *.nomipix.com *.trkn.us *.birdeye.com https://reviewtube.com/ *.reportingsolution.net https://reviews.nextadagency.com/ *.hibu.com *.userway.org session.mm-api.agency www.roomvo.com http
strict-transport-security: max-age=63072000, max-age=31536000, max-age=31536000
cross-origin-opener-policy: unsafe-none
cross-origin-embedder-policy: unsafe-none; report-to='default'
cross-origin-resource-policy: cross-origin

Links to (3)

Linked from (1)

snhhbra.com×1