girav.nl

HTML metadata

Title

Extra lange t-shirts voor mannen - Girav

Description

Lange T-shirts van topkwaliteit voor mannen. Nooit meer te korte of te wijde shirts. Op werkdagen voor 23.59 besteld, dezelfde dag verzonden!

Language

nl

Canonical

https://www.girav.nl

Translations

de ×2
nl ×2
en

Open Graph

url: https://www.girav.nl
title: Extra lange t-shirts voor mannen - Girav
site name: Girav.nl
description: Lange T-shirts van topkwaliteit voor mannen. Nooit meer te korte of te wijde shirts. Op werkdagen voor 23.59 besteld, dezelfde dag verzonden!

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights

Cookie consent

Cookiebot

Third-party hosts loaded (11)

cdn.video-dns.com×5
www.girav.com×2
app.aiden.cx×1
cdn-4.convertexperiments.com×1
consent.cookiebot.com×1
space-g8e4d.video-dns.com×1
static.cloudflareinsights.com×1
www.dwin1.com×1
www.girav.at×1
www.girav.be×1
www.girav.de×1

Social

Contact

Phone

+31204721002

Address

Apollolaan 151, 1077AR, NL, Noord Holland

DNS records live

NS

james.ns.cloudflare.com
june.ns.cloudflare.com

MX

Show 9 MX records

1 aspmx.l.google.com
10 aspmx.l.google.com
20 alt1.aspmx.l.google.com
20 alt2.aspmx.l.google.com
30 aspmx2.googlemail.com
30 aspmx3.googlemail.com
30 aspmx4.googlemail.com
30 aspmx5.googlemail.com
5 alt1.aspmx.l.google.com

Verified for

Google
Meta

Email authentication weak

SPF

v=spf1 include:_spf.google.com include:spf.giravdevelopment.hypernode.io include:sendgrid.net include:spf.giravproduction.hypernode.io include:spf.girav.nl a mx ~all

softfail (~all)

DMARC

not published

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCd0w7NFx1It/3hc2NsnfRrpLzBfIWfJX6ft2UEeUszPRUh5HrNv5Mw4Jc5x3LholBNnOLGgUNoO/9y99yt6J…

selectors probed

Certificate (current)

E7

from 2026-05-21 to 2026-08-19

Expires in 80 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.girav.nl/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src www.paypalobjects.com https://widgets.trustedshops.com 'self' 'self' data: *.fontawesome.com *.gstatic.com *.hotjar.com *.slant.co data: 'self' 'unsafe-inline'; form-action pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.facebook.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src bid.g.doubleclick.net *.youtube.com *.youtube-nocookie.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com www.paypalobjects.com player.vimeo.com https://www.google.com/recaptcha/ *.awin1.com *.zenaps.com *.fls.doubleclick.net 'self' *.girav.de *.girav.nl *.girav.at *.girav.com *.girav.be *.aiden.cx *.zdassets.com *.zendesk.com *.bing.com *.cookiebot.com *.doubleclick.net *.facebook.com *.google.com *.opendns.com *.zscloud.net *.googletagmanager.com *.loyaltyinabox.com *.criteo.com js.mollie.com 'self' 'unsafe-inline'; img-src cdn.girav.nl data: widgets.magentocommerce.com www.googleadservices.com *.google-analytics.com googleads.g.doubleclick.net www
strict-transport-security: max-age=15552000; includeSubDomains; preload