cresta-awards.com

.com crawl

First seen 2026-04-15 · Last seen 2026-05-19 · ok HTTP/1.1 200 982 ms crawled 2026-05-10

IE · 54.194.84.18 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Cresta Awards | International Awards for Creative Excellence | Cresta Awards 2026
Description: The Cresta Awards recognise outstanding creative work worldwide and uphold high creative standards, judged independently by an international jury since 1993.
Language: en
Canonical: https://www.cresta-awards.com

Open Graph

url: https://www.cresta-awards.com
title: Cresta Awards | International Awards for Creative Excellence | Cresta Awards 2026

Technology

Server: Apache

Analytics

Google Tag Manager

Third-party hosts loaded (9)

ae-uat-assets.s3-eu-west-1.amazonaws.com×19
ae-prod-assets.awardsengine.com×5
gitcdn.github.io×2
www.googletagmanager.com×2
ae-prod-assets.s3.eu-west-1.amazonaws.com×1
cdn-images.mailchimp.com×1
px.ads.linkedin.com×1
s3.amazonaws.com×1
www.google.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1998-10-20

Expires

2029-10-19 1248 days left

Updated

2024-10-05

Name servers

ns-1170.awsdns-18.org
ns-1603.awsdns-08.co.uk
ns-447.awsdns-55.com
ns-541.awsdns-03.net

DNS records live

NS

ns-1170.awsdns-18.org
ns-1603.awsdns-08.co.uk
ns-447.awsdns-55.com
ns-541.awsdns-03.net

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

Amazon RSA 2048 M04

from 2026-01-29 to 2027-02-28

Expires in 284 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.cresta-awards.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
weak frame protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: allow-from *
x-content-type-options: nosniff
content-security-policy: default-src * data: mediastream: blob: filesystem: about: ws: wss: 'unsafe-eval' 'wasm-unsafe-eval' 'unsafe-inline'; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; script-src-elem * data: blob: 'unsafe-inline' 'unsafe-eval'; connect-src * data: blob: 'unsafe-inline'; img-src * data: blob: 'unsafe-inline'; media-src * data: blob: 'unsafe-inline'; frame-src * data: blob: ; style-src * data: blob: 'unsafe-inline';font-src * data: blob: 'unsafe-inline';frame-ancestors * data: blob:;
strict-transport-security: max-age=31536000; includeSubdomains;