bv.com

HTML metadata

Title: Black & Veatch - Engineering, Procurement, Consulting & Construction Solutions | Black & Veatch
Description: Black & Veatch is a global engineering, procurement, consulting and construction company specializing in infrastructure development.
Language: en
Canonical: https://www.bv.com

Open Graph

url: https://www.bv.com
title: Black & Veatch - Engineering, Procurement, Consulting & Construction Solutions
description: Black & Veatch is a global engineering, procurement, consulting and construction company specializing in infrastructure development.

Technology

CDN: Amazon CloudFront
Server: Netlify
CMS: Next.js

Third-party hosts loaded (2)

images.ctfassets.net×9
cdn.bfldr.com×7

Social

Registration

Registrar

Network Solutions, LLC

Created

1993-12-02

Expires

2033-12-01 2753 days left

Updated

2023-12-02

Name servers

ns4.bv.com
ns6.bv.com
ns7.bv.com

DNS records live

NS

ns4.bv.com
ns7.bv.com

MX

0 bv-com.mail.protection.outlook.com

TXT

Show 23 TXT records

Pardot1116053=f25aa1010987441afc3a89239402593e2e70d27167d724ec0eea87d8ff1255a1
atlassian-domain-verification=zC/FmGd/TKb9hqpfqVyyphp2N7vGdRhahDseVQNlGBcfAETjPgr0S1MkZmo1oe9I
dXMtd2VzdC0yX216TGhabEFWSA==
docusign=03fc6ca8-dd6e-46d7-ac19-1d7cb3fdf3cf
_lgaoc9pyef932bdhkkbbh9ewg10qpz4
canva-site-verification=L7_vOWETkMKb2SuxXA3Dvw
successfactors-site-verification=YzkxZDA5YThmMmEzYmUyMjJhMzAxMDFmOTI0MDY1OWJkZjQyYzQ5N2Q4NjlkYzQ0MWVhNmMwNDBlZjhhYzRjNw==
wrike-verification=MjAzODA2Mjo2MjBiMjQ2ZTc5YzVkOTQxMDFmMWZmMzM5OWRiODI1ZDI0OTc3Mjg3OGVlOTExZTNlMjNjZDc0ZTIxZGZhODVh
sending_domain1116053=dd36c6c0dd1b2c44a92edba7d3a8a55bf32a09e0f26f9f79170687c19f3bace4
apple-domain-verification=CFrnnqFyr6KF8zbA
eBIPMzElvxIAUeme8nQd1wH69n77VIc4qmgcS/onFT8=
MS=ms21262863
adobe-idp-site-verification=62872d664c64db82f72520df6ead7fe897d366e72386f27b19ec8e8f48d7007f
vqdv305pd3kbtqyxbmlnqw6mhl355yqw
cisco-ci-domain-verification=4ed5f51cf3d0d8b776acfcd40beedaa82c7b3c186f31a3e56a40fa278f02dc41
dropbox-domain-verification=4f283te5qsib
google-site-verification=qOhEeseeqhduli5ovfUfpO_wvaNsOS9Tssz1hZ96chs
docusign=61c00180-6a9e-4bd6-b853-c7837c00ba7a
_kutrlaz28d4d2qum84ffgl0w3gzgk8r
pardot1116053=f25aa1010987441afc3a89239402593e2e70d27167d724ec0eea87d8ff1255a1
google-site-verification=RxZdjuDv071cBnEt5KnKLsDq-CYwBk4LZEt_xOHXUlE
atlassian-sending-domain-verification=e54cd4d9-c5a5-478e-9cdc-bd7700ee1ede
mOWXpDXS0UB818cbg/7e2+PfImgMKQ8UYAtxIqbH7hS6cJrgR++LAH6xeubS7zLWj68HEMxgMLG+W5sevf1NNQ==

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:sp1.bv.com include:sp2.bv.com include:sp3.bv.com include:sp4.bv.com include:sp5.bv.com include:_spf.salesforce.com include:sp6.bv.com ip4:147.182.38.15 ip4:147.182.48.16 ip4:10.180.144.40 ip4:10.180.144.42 ip4:128.245.247.239 -all

strict (-all)

DMARC

v=DMARC1;p=reject;rua=mailto:pzytnskz@ag.dmarcian.com;ruf=mailto:pzytnskz@fr.dmarcian.com;fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6wwuVX47hLlGf5t3X3HrUT9B98skMIfKxHrap6whYljoFlABXXeKuwF0Iq69oeR8nch84pIRQBSBj…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJA41cwdGWtLzwna8rEzsOiwpprqdfTBcYXlWc1wZ50HylN1aRcpU/hdaJE7ACLqaICCHMmPtJkPG8…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXEinMwoXyE04BIPEb3nFLRoAh4OPEzGRMwmA/vRKsf0//u/oKZAxEaJPtEBh52UjPFz9m8+moHatkJNuh…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/77tjDyO+mZaSL5kiKhfqQM+qsczMXVjkatNJic76bIZFuSTiZ5cW30LwkZ40wzI8TjoMlgrxFW3VGT2N…

selectors probed

Certificate (current)

E7

from 2026-03-21 to 2026-06-19

Expires in 32 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.bv.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self'; frame-src https://go.bv.com https://view.ceros.com https://*.ceros.com https://preview.widgets.ninetailed.io https://www.youtube.com https://player.vimeo.com https://www.google.com https://www.recaptcha.net https://www.googletagmanager.com https://www.3dvista.com https://*.3dvista.com https://storage.net-fs.com https://*.net-fs.com https://www.facebook.com https://airtable.com https://*.airtable.com https://gateway.zscalertwo.net; script-src 'self' 'nonce-e97c4f2b-8c20-4c05-85eb-ca92df4db981' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' https://gateway.zscalertwo.net; style-src 'self' 'unsafe-inline'; font-src 'self' data: blob:; img-src 'self' images.ctfassets.net downloads.ctfassets.net assets.ctfassets.net cdn.bfldr.com https://storage-us-gcs.bfldr.com https://*.adsrvr.org https://insight.adsrvr.org https://*.adnxs.com img.youtube.com https://*.googletagmanager.com https://*.google-analytics.com https://*.g.doubleclick.net https://sp.analytics.yahoo.com https:/
strict-transport-security: max-age=31536000; includeSubDomains; preload