besix.fr

.fr crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 3729 ms crawled 2026-05-15

NL · 20.73.94.20 · AS8075 Microsoft Corporation

Reputation 100/100

Classifying

HTML metadata

Title

BESIX

Language

Canonical

https://www.besix.fr/fr

Translations

Open Graph

title: BESIX

Technology

CDN: Azure Front Door
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (6)

a.storyblok.com×16
besix.getbynder.com×4
d2csxpduxe849s.cloudfront.net×2
www.googletagmanager.com×2
cdn.cookielaw.org×1
cookie-cdn.cookiepro.com×1

Social

Registration

Registrar

Combell NV

Created

2003-05-26

Expires

2026-11-19 183 days left

Updated

2025-12-31

Name servers

ns1.register.be
ns2.register.be
ns3.register.be

DNS records live

NS

ns1.register.be
ns2.register.be
ns3.register.be

TXT

vlyskcwyh5syp4gnc2tstlwqrm208jzb
_5vu0gj4djbj8cdm1ccdx73dpaa3lhx7

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GeoTrust TLS RSA CA G1

from 2026-03-04 to 2026-09-03

Expires in 106 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.besix.fr/fr

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' a.storyblok.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' cookie-cdn.cookiepro.com *.googleadservices.com googleadservices.com *.googleads.g.doubleclick.net googleads.g.doubleclick.net *.hotjar.com *.hotjar.io *.clarity.ms connect.facebook.net cdn.cookielaw.org consentcdn.cookiebot.com bat.bing.com consent.cookiebot.com googletagmanager.com app.storyblok.com ajax.googleapis.com privacyportal-eu-cdn.onetrust.com *.googletagmanager.com https://www.youtube.com/ maps.googleapis.com https://js.hsforms.net https://www.google.com https://www.gstatic.com *.vimeo.com https://snap.licdn.com; child-src 'self' data:; worker-src blob: 'self'; style-src 'self' fonts.googleapis.com *.googletagmanager.com 'unsafe-inline' privacyportal-eu-cdn.onetrust.com; font-src 'self' fonts.gstatic.com privacyportal-eu-cdn.onetrust.com fonts.googleapis.com data:; img-src 'self' a.storyblok.com data: *.googletagmanager.com maps.gstatic.com maps.googleapis.com *.cloudfront.net *.storychief.c
strict-transport-security: max-age=63072000; includeSubDomains; preload