bakertilly.nl

HTML metadata

Title

Baker Tilly Nederland | Baker Tilly

Description

Volledig dienstenaanbod in accountancy en advies. We begrijpen je uitdagingen als ondernemer en denken met je mee.

Language

nl

Canonical

https://www.bakertilly.nl

Translations

en

Open Graph

url: https://www.bakertilly.nl
title: Baker Tilly Nederland | Baker Tilly
locale: nl-NL
site name: Baker Tilly
description: Volledig dienstenaanbod in accountancy en advies. We begrijpen je uitdagingen als ondernemer en denken met je mee.

Technology

CDN: Cloudflare
Stack: PHP

Analytics

Google Tag Manager

Third-party hosts loaded (2)

challenges.cloudflare.com×1
www.googletagmanager.com×1

Social

Contact

Phone

088 804 79 00

Address

Papendorpseweg 53 - 59, 3528 BJ, Utrecht, Utrecht, NL

Registration

Registrar

Registrar.eu

Created

2010-08-16

Updated

2025-07-04

Name servers

ns04.2is.be
ns03.2is.nl
ns05.2is.nl

DNS records live

NS

ns1.sitebytes.nl
ns2.sitebytes.nl
ns3.sitebytes.nl

MX

10 mxa-0095a901.gslb.pphosted.com
10 mxb-0095a901.gslb.pphosted.com

TXT

Show 6 TXT records

bkt-website-prod.azurewebsites.net
bw=ydwggoIX7y1Q4seUJ1qwoif6oYnmbDHxpegbMHmHyqZA
DomainVerification=RNP8S1I63NN0W5TE6GIUE9U4S9RNQEJ9CP8QRAYKOH2LIHLBH689F1LM3AXHE7KX
zeno-domain-verification-h0dmtc=olWZW3Gx5fAHnLtZ7wgeb5Sjp
zeno-domain-verification-gatfp9=DbFT55twXRcSQC5kjMwizermd
amazonses:8InPBcZndChkxEapKtKZx9frTh9DIzN4nf30iI+fKYg=

Verified for

Brevo
Google
Microsoft 365

Email authentication strong

SPF

v=spf1 a mx include:spf1.bakertilly.nl include:spf2.bakertilly.nl include:spf.sendinblue.com  include:spf.protection.outlook.com  -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:8jt4tes4@rua.eu.dmarcmanager.app; ruf=mailto:8jt4tes4@ruf.eu.dmarcmanager.app;

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7c7vbO+9xTbTPWNZo/wFWAX5cD/iaitPZmnkIpWEiReqAM2vshHC6JRwisMh7Rz5le4F4E6LAcqG1…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCmzUw8maq4RaVW6PcXBUf68R2hz0AXNvDY/NlfqBcfEtsbAJPLh3srQCp/gGzx20+feFl8FVS5rHlkwi7H7V…
mail: v=DKIM1; k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+ls…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ky6a4N/1jlAbu6voR8HgeGuZNzYBMiDjW2GDTA9oK9OIBLpSZiGEfAisaHfuz8wZroV1U2p8ZVo8sapYR…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyLlqg+t4+xyJaoI8FUW+60pjpQ2z40AdxAr5mt2icgmzOyKZpCj9eDBq6E66LfWlECb80qGClEX8ihoa3z…

selectors probed

Certificate (current)

E8

from 2026-05-08 to 2026-08-06

Expires in 64 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.bakertilly.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: interest-cohort=()
x-content-type-options: nosniff
content-security-policy: base-uri 'none';connect-src 'self' wss://www.bakertilly.nl:* https://www.bakertilly.nl:* https://*.fonts.bunny.net https://fonts.bunny.net https://*.consentcdn.cookiebot.com https://consentcdn.cookiebot.com https://*.facebook.com https://facebook.com https://*.fontawesome.com https://fontawesome.com https://*.google.com https://google.com https://*.google.nl https://google.nl https://*.googleads.g.doubleclick.net https://googleads.g.doubleclick.net https://*.stats.g.doubleclick.net https://stats.g.doubleclick.net https://*.doubleclick.net https://doubleclick.net https://*.ad.doubleclick.net https://ad.doubleclick.net https://*.google-analytics.com https://google-analytics.com https://*.analytics.google.com https://analytics.google.com https://*.googletagmanager.com https://googletagmanager.com https://*.hotjar.com https://hotjar.com wss://*.hotjar.com wss://hotjar.com https://*.hotjar.io https://hotjar.io https://*.api.leadinfo.com https://api.leadinfo.com https://*.collector.leadinfo.
strict-transport-security: max-age=63072000; includeSubDomains; preload