indexo.dev

cremastudio.com

.com crawl

First seen 2026-06-03 · Last seen 2026-06-04 · ok HTTP/1.1 200 361 ms crawled 2026-06-04

GB · 185.199.220.75 · AS12488 Krystal Hosting Ltd

Reputation 87/100 weak security headers no dmarc policy

Classifying

HTML metadata

Title
Digital Products, Branding and Creative Strategies | CREMA™
Description
We're a creative strategies, branding and digital products agency. We transform your ideas into remarkable digital products. Contact us!
Canonical
https://cremastudio.com

Open Graph

url
https://cremastudio.com
title
Digital Products, Branding and Creative Strategies | CREMA™
description
We're a creative strategies, branding and digital products agency.

Technology

Server
LiteSpeed
CMS
WordPress
JS framework
Next.js
Analytics
  • Google Tag Manager

Third-party hosts loaded (1)

  • www.googletagmanager.com×1

Social

Contact

Email
Phone

Registration

Registrar
Dinahosting s.l.
Created
2020-01-13
Expires
2027-01-13 221 days left
Updated
2026-01-05
Name servers
  • ns1.universomenta.es
  • ns2.universomenta.es

DNS records live

NS
  • ns1.universomenta.es
  • ns2.universomenta.es
MX
  • 10 mx1.cloudhosting.uk
  • 20 mx2.cloudhosting.uk
Verified for
  • Google
  • Meta

Email authentication weak

SPF
v=spf1 ip4:185.199.220.75 include:relay.k.io a mx ip4:77.72.0.122 ~all
softfail (~all)
DMARC
not published
DKIM
  • default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIqn5hWerZuYl5rPaxderJ1yfgIrpTWCyeDme7ZeSs+6elbk+fJcReTP7a0OAXa5GmfjlMl8Pa6TK1…
selectors probed

Certificate (current)

R13
from 2026-05-26 to 2026-08-24
Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://cremastudio.com/

present
  • content-security-policy
findings
  • missing HSTS
  • CSP allows unsafe inline scripts/styles
  • missing frame protection
  • missing content type protection
  • missing Referrer Policy
  • missing Permissions Policy
Header values
content-security-policy
default-src 'self'; base-uri 'self'; object-src 'none'; frame-ancestors 'none'; frame-src 'self' https://player.vimeo.com; form-action 'self' https://api.cremastudio.com https://theroom10.us18.list-manage.com; connect-src 'self' https://api.cremastudio.com https://www.google-analytics.com https://www.googletagmanager.com https://player.vimeo.com https://theroom10.us18.list-manage.com; img-src 'self' https://api.cremastudio.com https://www.google-analytics.com https://www.googletagmanager.com https://player.vimeo.com data:; media-src 'self' https://api.cremastudio.com blob:; font-src 'self' data:; style-src 'self' 'unsafe-inline' https://api.cremastudio.com https://www.googletagmanager.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://api.cremastudio.com https://www.google-analytics.com https://www.googletagmanager.com https://theroom10.us18.list-manage.com; worker-src 'self' blob:;

Links to (4)

Linked from (2)

Use this data via API

Everything on this page for cremastudio.com is available as JSON from the indexo.dev REST & MCP API.

curl "https://indexo.dev/api/v1/domains/cremastudio.com" \
  -H "X-API-Key: idx_..."

Read the docs & get a free key →