girav.de
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- Gatsby
- Analytics
-
- Cloudflare Insights
- Cookie consent
-
- Cookiebot
Third-party hosts loaded (13)
- www.girav.nl×19
- cdn.girav.nl×9
- cdn.video-dns.com×5
- girav.nl×3
- www.girav.com×2
- app.aiden.cx×1
- cdn-4.convertexperiments.com×1
- consent.cookiebot.com×1
- space-g8e4d.video-dns.com×1
- static.cloudflareinsights.com×1
- www.dwin1.com×1
- www.girav.at×1
- www.girav.be×1
Social
Contact
- Phone
- Address
- Apollolaan 151, 1077AR, NL, Noord Holland
Registration
- Updated
- 2025-11-19
- Name servers
-
- james.ns.cloudflare.com.
- june.ns.cloudflare.com.
DNS records live
- NS
-
- james.ns.cloudflare.com
- june.ns.cloudflare.com
- MX
-
Show 7 MX records
- 10 aspmx.l.google.com
- 20 alt1.aspmx.l.google.com
- 20 alt2.aspmx.l.google.com
- 30 aspmx2.googlemail.com
- 30 aspmx3.googlemail.com
- 30 aspmx4.googlemail.com
- 30 aspmx5.googlemail.com
- TXT
-
facebook-domain-verification=itp2v1pd0yvjh7vmm8wrvrstbxfljjfacebook-domain-verification=up5aezrrov1rlnj9f7pmoqqgd0uc8ygoogle-site-verification=-plryx6eiy9XDQBghNkp4_BIhS-ZYn20-C3z4Kbh_dA
Email authentication weak
- SPF
-
v=spf1 include:_spf.google.com include:sendgrid.net include:spf.giravproduction.hypernode.io include:spf.girav.nl include:mail.zendesk.com a mx ~allsoftfail (~all) - DMARC
- not published
- DKIM
-
- google:
v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCVwrUBcGIYJ/9PHEkS2klS/snQHXwYnsBXvyV+RsETtX6C52ISY3ykeVc7QdwxCug3KnoOJ7dzrawPFcCP/Y…
selectors probed - google:
Certificate (current)
WE1
Expires in 24 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- findings
-
- short HSTS max-age
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
- missing Referrer Policy
- missing Permissions Policy
Header values
- x-frame-options
SAMEORIGIN- x-content-type-options
nosniff- content-security-policy
font-src https://widgets.trustedshops.com 'self' 'self' data: *.fontawesome.com *.gstatic.com *.hotjar.com *.slant.co data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.awin1.com *.zenaps.com *.fls.doubleclick.net 'self' *.girav.de *.girav.nl *.girav.at *.girav.com *.girav.be *.aiden.cx *.zdassets.com *.zendesk.com *.bing.com *.cookiebot.com *.doubleclick.net *.facebook.com *.google.com *.opendns.com *.zscloud.net *.googletagmanager.com *.loyaltyinabox.com *.criteo.com js.mollie.com 'self' 'unsafe-inline'; img-src cdn.girav.nl widgets.magentocommerce.com data: www.googleadservices.com www.google-analytics.com googleads.g.doubleclick.net www.google.com bid.g.doubleclick.net analytic- strict-transport-security
max-age=2592000; includeSubDomains; preload
Links to (5)
- facebook.com×1
- girav.com×1
- instagram.com×1
- trustedshops.de×1
- wa.me×1