gavdi.com — domain check, WHOIS, DNS & reputation

HTML metadata

Title

SAP SuccessFactors Partner | SAP HCM | Cloud HR

Description

Gavdi Group is an employee-owned company with a proud heritage and an outstanding reputation for delivering award-winning SAP workforce management solutions.

Language

en-GB

Generator

All in One SEO (AIOSEO) 4.9.7.2

Canonical

https://gavdi.com/

Feeds

Gavdi Group » Feed RSS
Gavdi Group » Comments Feed RSS

Open Graph

url: https://gavdi.com/
title: SAP SuccessFactors Partner | SAP HCM | Cloud HR
locale: en_GB
site name: Gavdi Group |
description: Gavdi Group is an employee-owned company with a proud heritage and an outstanding reputation for delivering award-winning SAP workforce management solutions.

Technology

Server: Apache
CMS: WordPress
jQuery: 3.7.1

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Fonts

Google Fonts

Third-party hosts loaded (10)

fonts.googleapis.com×5
www.googletagmanager.com×3
consent.cookiebot.com×2
fonts.gstatic.com×2
cdnjs.cloudflare.com×1
consentcdn.cookiebot.com×1
js.zi-scripts.com×1
px.ads.linkedin.com×1
secure.cart8draw.com×1
snap.licdn.com×1

Social

Contact

Phone

Registration

Registrar

Gandi SAS

Created

2007-09-06

Expires

2026-09-06 93 days left

Updated

2025-08-06

Name servers

ns-107-c.gandi.net
ns-226-b.gandi.net
ns-39-a.gandi.net

DNS records live

NS

ns-107-c.gandi.net
ns-226-b.gandi.net
ns-39-a.gandi.net

MX

0 gavdi-com.i-v1.mx.microsoft

TXT

Show 7 TXT records

_85gv4hr1r9if7ui0fjjjkevkgyxj9fo
2DC76489A1
mdggt03xkqw3yhpgr8znyjr02sfdmq3r
atlassian-sending-domain-verification=d6a32247-7894-4cfc-9e3c-9833fc0b11f0
_mk1t0c55uvo4n0kydt5r3wq04s9uooe
xwttm2tlrs4zzn4yt0swbmk7bgn6j6ml
5115AF4F96

Verified for

Apple
Atlassian
Brevo
Google
Smartsheet

Email authentication strong

SPF

v=spf1 include:spf.protection.outlook.com include:spf.eu.exclaimer.net include:service-now.com a:gavdi.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email; pct=100;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphspsyyPbK4bGssTktwMkDNLbLQwkI+uqHqMwF1udu4WURFOKpcBfw3L1Dgq6lDoHzeIbsOIunDJhG…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXqGwDavdlXNVoC36yy32eMsgWQtO9e/zPydgj4cryUFR8LAoUCuSHM7E2Kp3ft++EqmMs0brFc+kB…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

R13

from 2026-04-12 to 2026-07-11

Expires in 36 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 60/100 Checked live page: https://gavdi.com/

present

strict-transport-security
content-security-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Referrer Policy
missing Permissions Policy

Header values

content-security-policy: frame-ancestors 'self'; block-all-mixed-content; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' data: blob: https://www.googletagmanager.com https://www.google-analytics.com https://region1.google-analytics.com https://app.intercom.io https://consentcdn.cookiebot.com https://consent.cookiebot.com https://f.vimeocdn.com https://js.intercomcdn.com https://maps.google.com https://maps.googleapis.com https://player.vimeo.com https://secure.cart8draw.com https://www.vimeo.com https://widget.intercom.io https://cdn.jsdelivr.net https://cdnjs.cloudflare.com https://js.zi-scripts.com https://ws.zoominfo.com https://tags.clickagy.com https://snap.licdn.com; style-src 'self' 'unsafe-inline' fonts.googleapis.com; object-src 'none'; frame-src 'self' *.vimeo.com consentcdn.cookiebot.com maps.googleapis.com maps.google.com vimeo.com www.intercom-reporting.com www.youtube.com youtube.com https://hemsync.clickagy.com; child-src 'self' *.vimeo.com fast.wistia.net intercom-sheets.co
strict-transport-security: max-age=63072000; preload