gradstack.ai — domain check, WHOIS, DNS & reputation

HTML metadata

Title: Australia's capability-led workforce platform
Description: Australia's capability-led workforce platform - verified employability signals, pathways, and early access for students, employers, and partners.
Language: en-AU
Canonical: https://www.gradstack.ai

Open Graph

url: https://www.gradstack.ai
title: Gradstack - Australia's capability-led workforce platform
description: Australia's capability-led workforce platform - verified employability signals, pathways, and early access for students, employers, and partners.

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

challenges.cloudflare.com×1
www.googletagmanager.com×1

Social

Contact

Email

hello@gradstack.ai

DNS records live

NS

ns1.nameserver.net.au
ns2.nameserver.net.au
ns3.nameserver.net.au

MX

1 smtp.google.com

Verified for

Google

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1;p=none;rua=mailto:3929c4a33e@rua.au.easydmarc.com;ruf=mailto:3929c4a33e@ruf.au.easydmarc.com;fo=1;

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUay78y9lDKiLivco2KKlnDHVdW1ii3uPfTWpxuk/wgOMtw+dYNvhGTcxD2gXOZJ18P7vkV8NpOS27…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R13

from 2026-05-23 to 2026-08-21

Expires in 77 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 70/100 Checked live page: https://www.gradstack.ai/

present

strict-transport-security
content-security-policy-report-only
x-content-type-options
referrer-policy
permissions-policy

findings

missing Content Security Policy
missing frame protection

Header values

referrer-policy: strict-origin-when-cross-origin
permissions-policy: camera=(), microphone=(), geolocation=(), interest-cohort=()
x-content-type-options: nosniff
strict-transport-security: max-age=63072000; includeSubDomains
content-security-policy-report-only: default-src 'self'; script-src 'self' 'nonce-YWU1MjA2ZGMtNDI4NS00YzEzLThjNmUtMTg4YzNmM2RmNGQ5' 'strict-dynamic' https://www.googletagmanager.com https://www.google-analytics.com https://va.vercel-scripts.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self' https://www.google.com https://www.google-analytics.com https://*.google-analytics.com https://vitals.vercel-insights.com https://challenges.cloudflare.com; frame-src https://challenges.cloudflare.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'; report-uri /api/csp-report; upgrade-insecure-requests