besix.com

HTML metadata

Title

BESIX - From contracting to concessions

Description

BESIX has evolved from an esteemed contractor into a full-service enterprise that brings added value to any construction.

Language

nl

Canonical

https://www.besix.com/en

Translations

en
fr
nl

Open Graph

title: BESIX Group
description: BESIX has evolved from an esteemed contractor into a full-service enterprise that brings added value to any construction.

Technology

CDN: Azure Front Door
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (6)

a.storyblok.com×15
besix.getbynder.com×6
images.storychief.com×3
www.googletagmanager.com×2
cdn.cookielaw.org×1
cookie-cdn.cookiepro.com×1

Social

Registration

Registrar

Combell NV

Created

1997-01-17

Expires

2027-01-18 244 days left

Updated

2026-01-19

Name servers

ns1.register.be
ns2.register.be
ns3.register.be

DNS records live

NS

ns1.register.be
ns2.register.be
ns3.register.be

MX

50 besix-com.mail.protection.outlook.com

TXT

Show 24 TXT records

factorial-domain-verification=J7T4c3Av2d1nDLgDreBK4CbiSuZf6WPGLX4EqEZRk4XaSMjfTR5BMyLHmZPZaYuK
google-site-verification=OlXJDapZ-L8wa6OEz45EHVr8BI1pP0QIqZldgrilp2E
e7gKg9ZMd3ItvfJQcoX9zmj0AKqaVZAa
ms-domain-verification=83840b06-6e2a-40b6-b89d-30efd8ac39f1
MS=10B3ED06DD651BB21846FD57C8D7166760733DFF
docusign=01d29ad5-28cf-4345-b515-b20ab4bd0452
5vh66tkcsqn09bt5xzvj830w3h75wc06
y5htms6c3t4bx81c1nlzwt0j4nsq20bf
P4siDAjSrv/U1O97TnBzuwmQ7CONaRT++hvIgXqrKRryr1gCoFrVSRgT19uyByUHWKTNVDkZKABWfD7a4bUlDg==
llp04l3s13vfq7152hylp6kn8d2bphlq
atlassian-domain-verification=muVOChzxNQ1MLaqdtzhEZkZuAtbKlomn0y2dSY5G5/MH65JN1bFY2xw8uFmDBRHj
718e2ce3de8437eb018b52b9e3b87aa8
MS=ms68033837
xqvj8dc1fbc9v4p8zx5v78jl6p8wj2q4
miro-verification=a1505376eb4db0f089a8cc8bccfa6ac94f7c2b44
apple-domain-verification=aynCCCcPmAXBlfTv
bNY11h2GrgpOHvGgFnuJcNVvaWIu/iC3mKsVTxFvOyhGDZ1tRUvodZlvjE5Var/lglt5YwOMZcUHAkmqsS5zew==
fq49IuutMtYfLfwl4aeutwYJsMEv4ruPRLvGDPo9aPJZUnKGBT0eJQBaAMLwnjNSQ9oFz/+mcY/nzI6lKd8UpQ==
google-site-verification=545-3Tr3zBNzEwvxEhvKaCJ7QEecQas4s5Z0o76izRI
_b2pa1z0raal368p1aqarpxbp6015es3
_11vxg01i0jfiwzwj7jiua15efw8voin
qgjdZ6SNmdgjCnRPb5C/bdqWVlsW8f4Au6OsMq05UmAlpWsB7E9qHbcLDbPa0qiecaECDSdY2hTvr87iYPRVhg==
ciscocidomainverification=6d1bb7a78595b7def7c9501084f102784d4f3e1b4c80bb0b24a9a56ee2a76e49
EA602A56101F791C68DA2676A250EBCE829F89E16B53F1A6A5B14A8BDDDC0FE5

Email authentication partial

SPF

v=spf1 include:spf1.besix.com include:spf2.besix.com include:spf3.besix.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:js0h7mvn@ag.eu.dmarcian.com; ruf=mailto:js0h7mvn@fr.eu.dmarcian.com; fo=1;

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSN78fCLcUA7SdIJv+uC1Jv4YZALSCjpKbTmMdzSKth0UNvjU7NYEyAIO08zzHPdNTH+FSUxZiJG4HBdcuPD…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+V4w/ugRxzL1CxkVsesKRU5qI3snr+CQdkK3eH+qDexpgHiuJP2N/BxTKWWUaZtvmXW2z9aOQ0SbW…
k1: k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUo…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C/K6Xqz8a+sPSRftOoXjn5pb0VRNzxmxJ7D8KxNzZrvHwJq3PjGULJoZUFgtFXulCoO442V9jdcYyT9eV…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9m3xRqHxCRYmq5eKNv79Uq2UbGzac9YXJP1+JywnNKhbF00ljFZC/FuYWoRSritTNyKEA9YuYU+5ITNhhmsjkag…

selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-03-04 to 2026-09-03

Expires in 107 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.besix.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' a.storyblok.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cookie-cdn.cookiepro.com *.googleadservices.com googleadservices.com *.googleads.g.doubleclick.net googleads.g.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms connect.facebook.net cdn.cookielaw.org consentcdn.cookiebot.com bat.bing.com consent.cookiebot.com googletagmanager.com app.storyblok.com ajax.googleapis.com privacyportal-eu-cdn.onetrust.com *.googletagmanager.com https://www.youtube.com/ maps.googleapis.com https://js.hsforms.net https://www.google.com https://www.gstatic.com *.vimeo.com https://snap.licdn.com; child-src 'self' data:; worker-src blob: 'self'; style-src 'self' fonts.googleapis.com *.googletagmanager.com 'unsafe-inline' privacyportal-eu-cdn.onetrust.com; font-src 'self' fonts.gstatic.com privacyportal-eu-cdn.onetrust.com fonts.googleapis.com data:; img-src 'self' a.storyblok.com data: *.googletagmanager.com maps.gstatic.com maps.googleapis.com *.cloudfront.net *.storychief.c
strict-transport-security: max-age=63072000; includeSubDomains; preload