qbuzz.nl — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Qbuzz | Reizen met bus en trein in jouw regio
Description: Qbuzz verbindt mensen en regio’s met reizen per bus en trein in Zuid-Holland, Friesland en Groningen-Drenthe. Samen vooruit, samen thuis.
Language: nl

Technology

Server: Google
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (4)

qbuzz.files.prepr.io×8
consent.cookiebot.com×1
static.zdassets.com×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.brandshelter.com
ns2.brandshelter.de
ns3.brandshelter.info
ns4.brandshelter.net
ns5.brandshelter.us

MX

9 qbuzz-nl.o-v1.mx.microsoft

TXT

4b9FuGvgnSDrraxnxPjZpfo6n3O3ytld1x7e4vZVlgl1Ss+TKMquopAoG+8uzHg3rvHucI4SIHvyBSAKy9Gqbg==
MS=1BA0B8BEF9F71A0217A0C0D08ABFBA17E9041E7F
SVbSmiFnoasuu2V3kDA71HTKRPysp4arzsGQ8phoNwY=

Verified for

Apple
Google
Meta
Microsoft 365
MongoDB

Email authentication strong

SPF

v=spf1 ip4:84.241.158.156 ip4:80.113.6.242 ip4:85.146.246.62 ip4:51.163.166.100 ip4:31.171.206.167 ip4:13.94.232.90 ip4:54.77.253.53 ip4:54.76.46.137 ip4:54.194.38.195 ip4:54.75.9.121 ip4:82.94.177.118 ip4:217.19.238.48/29 include:spf.protection.outlook.com include:mail.zendesk.com include:spf.flowmailer.net include:_spf.secudoc.app include:spf.afas.online include:_spf.psm.knowbe4.com include:spf.topdesk.net -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:9arvf4ezvr@rua.powerdmarc.com,mailto:security@qbuzz.nl; ruf=mailto:9arvf4ezvr@ruf.powerdmarc.com,mailto:security@qbuzz.nl; pct=100; fo=1;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC63gREkG87AbzAenIBOcHPeZnNh14BmK3ht/SSxUGtHfKql2OHwWQF7P7aSjRy8ACOIPzeCvy5atyqgObZpj…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MbXQJK6B2epe/IgP5T/Ae+zyfqRNexQfH3JnjpBn6RFrmSqyl7+QyXza1WmIBRK71OoJu+yjLC3y7…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

WR3

from 2026-04-20 to 2026-07-19

Expires in 38 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://qbuzz.nl/

present

strict-transport-security
content-security-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' https://ovbgd-marcom-service.westeurope.cloudapp.azure.com https://consentcdn.cookiebot.com https://busgd.nl https://www.googletagmanager.com https://consent.cookiebot.com https://static.zdassets.com https://qbuzz.stream.prepr.io https://*.mux.com https://www.gstatic.com http://www.gstatic.com https://googleads.g.doubleclick.net https://consent.cookiebot.eu https://static.hotjar.com https://script.hotjar.com https://connect.facebook.net wss://qbuzzbv.zendesk.com/ https://qbuzzbv.zendesk.com/ https://www.google.nl/ https://qbuzz-zhn.zendesk.com/ https://qbuzz-dmg.zendesk.com/ https://qbuzz-gd.zendesk.com https://capi-automation.s3.us-east-2.amazonaws.com/ https://static.ads-twitter.com/ https://cdn.jsdelivr.net; style-src 'self' 'unsafe-inline' https://use.typekit.net https://p.typekit.net https://fonts.googleapis.com https://cdn.jsdelivr.net; img-src 'self' blob: data: https://qbuzz.files.prepr.io/ https://www.googletagmanager.com
strict-transport-security: max-age=31536000

Links to (6)

Linked from (7)

Use this data via API

Everything on this page for qbuzz.nl is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/qbuzz.nl" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →