indexo.dev

kaddi.com

.com crawl

First seen 2026-05-04 · Last seen 2026-05-04 · ok HTTP/1.1 200 2997 ms crawled 2026-05-10

GB · 20.90.134.32 · AS8075 Microsoft Corporation

Reputation 95/100 weak security headers

Classifying

HTML metadata

Title
Kaddi | Places to go and things to do
Description
Kaddi is a directory for school trips and activities. Reviewed by EVCs and trip leaders
Language
en

Open Graph

url
https://kaddi.com
title
Kaddi | Home
description
The go-to directory for unforgettable school trips. Rated exclusively by teaching colleagues, EVCs and trip leaders

Technology

Server
nginx
Fonts
  • Google Fonts

Third-party hosts loaded (3)

  • kaddi.blob.core.windows.net×48
  • fonts.gstatic.com×2
  • fonts.googleapis.com×1

Social

Registration

Registrar
IONOS SE
Created
2003-12-22
Expires
2026-12-22 216 days left
Updated
2025-10-09
Name servers
  • ns0.schoolsathome.co.uk
  • ns1.schoolsathome.co.uk

DNS records live

NS
  • ns0.schoolsathome.co.uk
  • ns1.schoolsathome.co.uk
MX
  • 0 kaddi-com.mail.protection.outlook.com
TXT
  • MS=ms39943620
  • brevo-code:a3d423074c883dce06230ddc2a731114

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com -all
strict (-all)
DMARC
v=DMARC1; p=reject; rua=mailto:rua@dmarc.brevo.com
policy: reject (enforced)
DKIM
  • mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…
selectors probed

Certificate (current)

GeoTrust TLS RSA CA G1
from 2026-02-14 to 2026-08-15
Expires in 87 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://kaddi.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; frame-src 'self' https://challenges.cloudflare.com https://www.youtube.com; frame-ancestors 'self' https://evolveapp.online https://edvisits.community; img-src 'self' https://kaddi.blob.core.windows.net https://maps.googleapis.com https://maps.gstatic.com data:; script-src 'self' https://challenges.cloudflare.com https://maps.googleapis.com https://www.youtube.com 'unsafe-inline'; style-src 'self' https://fonts.googleapis.com 'unsafe-inline'; font-src 'self' https://fonts.gstatic.com; connect-src 'self' https://challenges.cloudflare.com https://maps.googleapis.com https://kaddi.blob.core.windows.net;

Links to (5)

Linked from (1)