indexo.dev

gridlines.io

.io crawl

First seen 2026-04-19 · Last seen 2026-05-09 · ok HTTP/1.1 200 7207 ms crawled 2026-05-13

US · 3.164.68.88 · AS16509 Amazon.com, Inc.

Reputation 94/100 dmarc monitor-only

Classifying

HTML metadata

Title
Digital Verification API Suite | Gridlines
Description
APIs for digital identity verification, User KYC, and employment checks. Onboard customers, partners and merchants with Gridlines.
Language
en

Technology

CDN
Amazon CloudFront
Server
nginx
CMS
Next.js

DNS records live

NS
  • ns-1495.awsdns-58.org
  • ns-1802.awsdns-33.co.uk
  • ns-50.awsdns-06.com
  • ns-810.awsdns-37.net
MX
  • 1 aspmx.l.google.com
  • 10 alt3.aspmx.l.google.com
  • 10 alt4.aspmx.l.google.com
  • 5 alt1.aspmx.l.google.com
  • 5 alt2.aspmx.l.google.com
Verified for
  • Google

Email authentication partial

SPF
v=spf1 include:_spf.google.com include:amazonses.com include:sendersrv.com ~all
softfail (~all)
DMARC
v=DMARC1;p=none;pct=25;rua=mailto:tech@gridlines.io
policy: none (monitoring only) · pct=25
DKIM
  • google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCNqSVHjmBFjlZzCrw1EyAXKo6UY4Z6Ydl0HWaDh/woymmz48dy8A14L06qwMOsZU9erfglxUHz34ejUmEP3z…
selectors probed

Certificate (current)

Amazon RSA 2048 M01
from 2026-04-20 to 2026-11-04
Expires in 167 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://gridlines.io/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
  • missing Permissions Policy
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
x-content-type-options
nosniff
content-security-policy
default-src 'self' https: 'unsafe-inline'; script-src 'self' https: 'unsafe-inline'; object-src 'none'; img-src 'self' https: data:; frame-src 'self' https://*.jotform.com https://*.jotfor.ms https://www.google.com https://*.s3.ap-south-1.amazonaws.com data: blob:; connect-src 'self' https: blob:;
strict-transport-security
max-age=31536000

Linked from (1)