indexo.dev

highlinecg.com

.com crawl

First seen 2026-05-27 · Last seen 2026-05-30 · ok HTTP/1.1 200 531 ms crawled 2026-05-30

US · 13.33.235.42 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title
Highline Construction Group
Description
Boutique Manhattan contractor specializing in complex bespoke residential renovations.
Language
en

Open Graph

url
https://highlinecg.com
title
Highline Construction Group
locale
en_US
description
Boutique Manhattan contractor specializing in complex bespoke residential renovations.

Technology

CDN
Amazon CloudFront
Server
AmazonS3

Registration

Registrar
Gandi SAS
Created
2012-09-13
Expires
2026-09-13 104 days left
Updated
2025-08-09
Name servers
  • ns-1398.awsdns-46.org
  • ns-1637.awsdns-12.co.uk
  • ns-388.awsdns-48.com
  • ns-694.awsdns-22.net

DNS records live

NS
  • ns-1398.awsdns-46.org
  • ns-1637.awsdns-12.co.uk
  • ns-388.awsdns-48.com
  • ns-694.awsdns-22.net
MX
  • 0 highlinecg-com.mail.protection.outlook.com

Email authentication strong

SPF
v=spf1 include:spf.protection.outlook.com include:spf.exclaimer.net include:_spf.createsend.com ~all
softfail (~all)
DMARC
v=DMARC1; p=quarantine; rua=mailto:rampup@highlinecg.com; ruf=mailto:rampup@highlinecg.com; pct=100
policy: quarantine
DKIM
  • selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCLzBO/8CDW9nIGP+STghMtLaQJ6WFcmvehjl/A8DwVGcs3w0Bzmp22j7hAq/NwoP51vxn6F4SWreCbbiK9kR…
selectors probed

Certificate (current)

Amazon RSA 2048 M04
from 2026-05-18 to 2026-12-02
Expires in 184 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.highlinecg.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
  • cross-origin-opener-policy
  • cross-origin-embedder-policy
  • cross-origin-resource-policy
findings
  • CSP allows unsafe inline scripts/styles
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options
nosniff
content-security-policy
default-src 'self'; script-src 'self' 'unsafe-eval' 'unsafe-inline'; style-src 'self' 'unsafe-eval' 'unsafe-inline' https://fonts.googleapis.com; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data:; connect-src 'self' https://highline-webapi-cpa5dycrchf6c3br.centralus-01.azurewebsites.net https://candidate-web-app-gdd4aqhdekbpeygk.centralus-01.azurewebsites.net https://highlinedev.crm.dynamics.com https://highline.crm.dynamics.com; frame-ancestors 'none'; object-src 'none'; base-uri 'none'; upgrade-insecure-requests;
strict-transport-security
max-age=63072000; includeSubDomains; preload
cross-origin-opener-policy
same-origin
cross-origin-embedder-policy
require-corp
cross-origin-resource-policy
same-site

Linked from (1)