aecon.com

HTML metadata

Title: AECON - Aecon Group Inc.
Description: AECON - Aecon Group Inc.
Language: en
Generator: Sitefinity 15.3.8521.0 DX
Canonical: https://www.aecon.com

Open Graph

url: https://www.aecon.com
title: AECON - Aecon Group Inc.
site name: AECON - Aecon Group Inc.
description: AECON - Aecon Group Inc.

Technology

Server: Microsoft-IIS

Analytics

Google Tag Manager

Social widgets

Vimeo Embed
YouTube Embed

Third-party hosts loaded (5)

aeconcom.b-cdn.net×12
hello.myfonts.net×1
player.vimeo.com×1
www.googletagmanager.com×1
www.youtube.com×1

Social

Registration

Registrar

Amazon Registrar, Inc.

Created

1999-04-23

Expires

2027-04-23 339 days left

Updated

2026-03-19

Name servers

ns-1437.awsdns-51.org
ns-1698.awsdns-20.co.uk
ns-385.awsdns-48.com
ns-939.awsdns-53.net

DNS records live

NS

ns-1437.awsdns-51.org
ns-1698.awsdns-20.co.uk
ns-385.awsdns-48.com
ns-939.awsdns-53.net

MX

10 aecon-com.mail.protection.outlook.com

TXT

Show 16 TXT records

formstack-domain-verification=3db4f453521eca2fb00a31b7868d2933
google-site-verification=T7W76clNvaI06aNkhObLCWgHDQm0jPvuFoj487uqGBw
lf5lxsv08c9yx42v1r357xbp8f4kwyz7
miro-verification=d435585b1046294b34fcfea06adbbc843ff5f75d
rjlbzwcw0cddskwsy9jn18dl1ctgwql9
wbvfldfvkhdtmslgf5jn8824ryvgqz7j
MS=ms43621347
_ruvmmfewjuxhk13m6agov3av09jttwa
_xclxtmlxb4rq6nvfa5bjo7wjd7rc0i6
aZcu1O/VQ1xDdRLYb5NHFIK5VfVhhTeWj7y5mb7dAZo9uWnqVYDb/sMXelwk649/w3QJKvHS9amTWIDPfqvPoA==
apple-domain-verification=sXUmf6CYiZxqgAOo
bcn=6C1906FA-F547-11EF-B6FA-DE7E9FF86872
canva-site-verification=5V4BlcV_5Uwo6L9r3Xpsgw
canva-site-verification=J6uXtU9HizsrBDPsu331kw
canva-site-verification=nDWTidQZfE2dG3X6LoyEXg
docusign=eeeb2097-314d-4509-add0-6d96bc1f3a43

Email authentication strong

SPF

v=spf1 ip4:66.179.176.4 include:spf.protection.outlook.com include:_spf-dc17.sapsf.com include:_spf-sfdc.successfactors.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com,mailto:dmarcreports@aecon.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw1wdPE80bCKExBoVwmbwC+c39lI10x5XODwDobJuO+nvWvDWPZJFcYZo04kriE6RubE+k0kf8t8EQ…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdY7MoUpPdJ7/E0FYP5sGxMJf4Fj2K+ppE5LPCd86IYBSCoYhjVEXL9ZKXHpLm9baFy2cTRx2ezqP7…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-02-18 to 2026-08-19

Expires in 92 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.aecon.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; script-src 'report-sample' 'self' blob: https://connect.facebook.net/en_US/sdk.js https://www.googletagmanager.com/gtm.js https://www.googletagmanager.com/gtag/js https://cdn.curator.io/published/2869f841-cf04-4413-9e4f-e7cf14932afe.js https://cdn.curator.io/5.0/curator.embed.js https://www.google-analytics.com/analytics.js https://qmod.quotemedia.com/js/qmodLoader.js https://player.vimeo.com/api/player.js https://f.vimeocdn.com/p/4.39.60/js/player.module.js https://f.vimeocdn.com/p/4.39.60/js/vendor.module.js https://f.vimeocdn.com/js_opt/modules/utils/vuid.min.js https://www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js https://www.gstatic.com/eureka/clank/132/cast_sender.j
strict-transport-security: max-age=31536000