facom.com

.com crawl

First seen 2026-04-18 · Last seen 2026-05-16 · ok HTTP/1.1 200 7671 ms crawled 2026-05-12

DE · 104.126.37.131 · AS20940 Akamai International B.V.

Reputation 100/100

Classifying

HTML metadata

Title

Home | FACOM

Description

Welcome to Facom Tools.

Language

Generator

Drupal 10 (https://www.drupal.org)

Canonical

https://www.facom.com/

Translations

Technology

CMS: Drupal

Analytics

Google Tag Manager

Third-party hosts loaded (9)

bynder.sbdinc.com×16
acquia.io×1
api.bazaarvoice.com×1
builder.lift.acquia.com×1
cdn.jsdelivr.net×1
cdn.pricespider.com×1
network-a.bazaarvoice.com×1
us.perz-api.cloudservices.acquia.io×1
www.googletagmanager.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

1997-02-04

Expires

2027-02-05 262 days left

Updated

2024-12-31

Name servers

a1-218.akam.net
a18-67.akam.net
a5-64.akam.net
a6-65.akam.net
a8-66.akam.net
a9-67.akam.net

DNS records live

NS

a1-218.akam.net
a18-67.akam.net
a5-64.akam.net
a6-65.akam.net
a8-66.akam.net
a9-67.akam.net

MX

10 mxa-00254701.gslb.pphosted.com
10 mxb-00254701.gslb.pphosted.com

TXT

v=DMARC1; p=none; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

Email authentication strong

SPF: v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com;
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

R12

from 2026-03-17 to 2026-06-15

Expires in 27 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.facom.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: 'unsafe-eval' 'unsafe-inline' data: blob: wss://*.pricespider.com http://*.pricespider.com https://*.zdassets.com; script-src https: 'unsafe-eval' 'unsafe-inline' data: blob: wss://*.pricespider.com http://*.pricespider.com; connect-src https: 'unsafe-eval' 'unsafe-inline' data: blob: wss://*.pricespider.com http://*.pricespider.com wss://*.zopim.com https://*.zdassets.com; upgrade-insecure-requests; report-uri /csp.cgi;
strict-transport-security: max-age=31536000 ; includeSubDomains ; preload