haskoning.com

HTML metadata

Title: Global consulting engineers | Haskoning
Description: Haskoning is an international consulting engineering company for the natural and built environment. Driven by our purpose of Enhancing Society Together, our 6,800 professionals provide clients with sustainable, world- class solutions that respond to global and local challenges.
Language: en
Canonical: https://www.haskoning.com/en

Open Graph

url: https://www.haskoning.com/
title: Global consulting engineers
site name: Haskoning
description: Haskoning is an international consulting engineering company for the natural and built environment. Driven by our purpose of Enhancing Society Together, our 6,800 professionals provide clients with sustainable, world- class solutions that respond to global and local challenges.

Technology

CDN: Cloudflare

Analytics

Cloudflare Insights
Google Tag Manager

Social widgets

YouTube Embed

Third-party hosts loaded (3)

static.cloudflareinsights.com×1
www.googletagmanager.com×1
www.youtube-nocookie.com×1

Social

Registration

Registrar

GoDaddy.com, LLC

Created

1998-01-05

Expires

2028-01-04 595 days left

Updated

2025-03-14

Name servers

dns41.cloudns.net
dns42.cloudns.net
dns43.cloudns.net
dns44.cloudns.net

DNS records live

NS

dns41.cloudns.net
dns42.cloudns.net
dns43.cloudns.net
dns44.cloudns.net

MX

10 haskoning-com.mail.protection.outlook.com

TXT

Show 18 TXT records

msfpkey=6lf98nx7f93q0n8ypf7d3y735
_ai4apm51x46pzebnbog1ndbr5tdnsl7
_mi7g6m2w814rxmkdr0j0uj9vlgexef2
openai-domain-verification=dv-SPyzDfsLQlsgTXNEBnzkNVOI
google-site-verification=0hkisY60QpMz27OdsrZ2puIgNik_jfD64v6B5zJXTGs
_4i0bbg3iozqjhfqfjnl2jecajwwwl4b
_gzhyj6m90n7uk93d91lucppoj5oeieu
atlassian-domain-verification=twrKkYROipIAwVl/zZGaAaI/s5D6iZzRv3EPKIn7HbvR8qjaAJYyiQ2v3uG5kVZr
_vidssq6d62y01siidq3jqebmdyjrvka
cm95YWxoYXNrb25pbmdkaHY=
miro-verification=071918ceab32bcce5a06fba4b3facc7316e535db
autodesk-domain-verification=9orpbMVG8HMPGSz-ezYO
canva-site-verification=N82GXAyXgqP2Y9tEbmJqbQ
docker-verification=31968114-eeb3-4798-8ac2-6b19f2faaed1
adobe-idp-site-verification=da9e7746d5ca1321af52e1203584d872ff14d58507c9ccc3ed6dbbfb277c9559
_0ygzdo5cd57n4iacqq30xm0nupea4lt
_6pg58kfpurrm5sz21099jh2e9kcqm0b
zoho-verification=zb17715938.zmverify.zoho.eu

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:emaileuc.freshdesk.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:DMARC.Reports@haskoning.com; ruf=mailto:DMARC.Reports@haskoning.com;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0y6jakJV3IEueprO/UjqpgLaUbPf5c5qXsdd/g2CKLrsWuGMRXrU4mVTs7jNOJ5ec6eT5PMZbVnVaL…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MinanjGzkBQ7qX/5OUkJ2GulIeq6s8xo9PmdrBJWgl5GCcjVy36JVF+Vb9QCQWj0noFLSTDmgYBH2…

selectors probed

Certificate (current)

Trust Provider B.V. TLS RSA CA G1

from 2026-03-31 to 2026-10-16

Expires in 150 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.haskoning.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=(self), camera=(), encrypted-media=(), fullscreen=(self) https://www.youtube.com https://www.youtube-nocookie.com https://player.vimeo.com, geolocation=(self), microphone=(), midi=(self), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' https://*.sitecorecloud.io https://*.matomo.cloud https://*.clarity.ms https://*.genially.com https://*.video-dns.com https://*.usercentrics.eu https://*.youtube.com https://*.cloudflareinsights.com https://*.blob.core.windows.net https://*.googleapis.com https://*.cookielaw.org https://*.facebook.net https://*.recruitmentplatform.com ajax.cloudflare.com https://*.google.com https://*.doubleclick.net https://*.azureedge.net https://*.linkedin.com https://*.ads.linkedin.com https://*.maphub.net https://*.licdn.com https://*.mrwork.nl https://*.gstatic.com https://*.hotjar.com https://*.weglot.com https://*.unpkg.com https://*.googletagmanager.com https://*.google-analytics.com https://*.googleadservices.com https://*.mkt.dynamics.com https://*.svc.dynamics.com https://*.googlevideo.com; style-src 'self' 'report-sample' 'unsafe-inline' https://*.azureedge.net https://*.genially.com https://*.cookielaw.org
strict-transport-security: max-age=31536000; includeSubDomains; preload