duo.nl — domain check, WHOIS, DNS & reputation

HTML metadata

Title: DUO - Particulier
Description: Informatie voor studenten, terugbetalers en leraren. Informatie over studiefinanciering, studieschuld, reizen, lesgeld, diploma’s en staatsexamens.
Language: nl

Open Graph

url: https://www.duo.nl/particulier/index.jsp
title: DUO - Particulier
locale: nl_NL
site name: duo.nl
description: Informatie voor studenten, terugbetalers en leraren. Informatie over studiefinanciering, studieschuld, reizen, lesgeld, diploma’s en staatsexamens.

Technology

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

DNS records live

NS

ns1.surfnet.nl
ns1.zurich.surf.net
ns2.surfnet.nl
ns3.surfnet.nl

MX

10 grnms101.duo.nl
10 grnms102.duo.nl

TXT

Show 9 TXT records

MS=2A35729DF7B6879605A380199134229FA98192DC
8ZMdLGut+ODreQqgOL1z8ZPHCd32IZK5ee6DxdmpU/hZN9m7//YfHQhiDc9LcNQh1WZE9bbnbtsDyf2AGiFrQg==
_jv1c8udejn31blgz6tm21crhud4cc4w
e344b6293aaff980dacfdfca8d89a596c998a653ffc6da246984b5280553f353
_j006jnihj6zmhuldygm2l4yyqb3s5vm
34795ab8189f9058900af51f79e50414a2d9a007be11677d35d79d4ed8b6cedf
QuoVadis=25dc9442-0d2e-4179-afca-2f1a244a008c
kbE5rD5eSyaHC4KGPYtyK5pCrPFl3JLV1RvtjAkZolz8KyIMfpQEtYdL1kptnP0S
093013cdf61fd81ceca2a8b82df8d689d4a14ee58dd6ceb2c6ee38dde8e54e64

Verified for

Apple
Cisco
Dynamics 365
Google
Miro

Email authentication strong

SPF

v=spf1 mx a ip4:62.112.225.180 ip4:89.221.178.154 ip4:212.159.201.77 ip4:212.159.201.78 include:spf.protection.outlook.com ~all

softfail (~all)

DMARC

v=DMARC1;p=quarantine;rua=mailto:rua@duo.nl;adkim=r;aspf=r;pct=100;sp=reject

policy: quarantine · sp=reject

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQD4Jx7mfrBXvD2aixqYdpkrcwI+YklRCRXpU5KZOq2UXEgW1uW1+o4n8vS3j5H15r8/6u64LAL5CTKo49jRsl…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC9MYq8Z7tTeB6qeENC5hQ150vCqlCox1wKO12VYkKATnG8pc2zdRhBVa+gFHsZ3zjPhOcVKPLBs1RjgEh8LR…

selectors probed

Certificate (current)

DigiCert G2 TLS EU RSA4096 SHA384 2022 CA1

from 2025-11-27 to 2026-07-18

Expires in 47 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://duo.nl/particulier/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer, strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; img-src 'self' data: stats.duo.rijkscloud.nl https://*.lpsnmedia.net https://s3-eu-west-1.amazonaws.com/obipub/ https://*.duo.nl https://duo.nl https://www.toegankelijkheidsverklaring.nl/files/verklaring/label/ https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.duo.nl https://stats.duo.rijkscloud.nl https://www.googletagmanager.com ajax.googleapis.com https://cdnjs.cloudflare.com https://a.optnmnstr.com https://*.obi4wan.com https://*.pusher.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://apps.duo.nl; font-src 'self' https://fonts.gstatic.com https://apps.duo.nl data:;; connect-src 'self' https://*.duo.nl https://stats.duo.rijkscloud.nl https://*.googleapis.com https://kennisbank.prd.duo.nl https://*.obi4wan.com https://*.pusher.com wss://*.pusher.com https://duo.nl; object-src 'none'; frame-src 'self' https://cloud.reflexappointment.nl
strict-transport-security: max-age=631138519;includeSubDomains

Links to (1)

inburgeren.nl×1