havascreative.com
HTML metadata
Technology
- CDN
- Cloudflare
- CMS
- WordPress
- Cookie consent
-
- OneTrust
- Social widgets
-
- Vimeo Embed
Third-party hosts loaded (3)
- cdn.cookielaw.org×2
- gmpg.org×1
- player.vimeo.com×1
Social
Registration
- Registrar
- Gandi SAS
- Created
- 2012-06-29
- Expires
- 2026-06-29 40 days left
- Updated
- 2025-05-29
- Name servers
-
- ns-175-c.gandi.net
- ns-214-b.gandi.net
- ns-28-a.gandi.net
DNS records live
- NS
-
- ns-175-c.gandi.net
- ns-214-b.gandi.net
- ns-28-a.gandi.net
- TXT
-
Show 6 TXT records
6tjmgba2laep5ceh4vnm1i9vnnepvsdfbtu44i1748apl1dr1shhcdm4cvu70fum1dp0s4296bgr4dv=spf1 -allqcbg63g5ao06a6p7uaqk0usmp2r9tpfveidjc3mua7tu2fitneh2
Certificate (current)
WE1
Expires in 31 days
HTTP security headers
- present
-
- strict-transport-security
- content-security-policy
- x-frame-options
- x-content-type-options
- referrer-policy
- permissions-policy
- findings
-
- CSP allows unsafe inline scripts/styles
- CSP uses wildcard sources
Header values
- referrer-policy
no-referrer-when-downgrade- x-frame-options
sameorigin- permissions-policy
geolocation=(self "havascrea.wpenginepowered.com" "havascrea.wpengine.com" "https://www.havascreative.com" "https://havascreative.com"), microphone=()- x-content-type-options
nosniff- content-security-policy
frame-ancestors 'self';block-all-mixed-content;default-src 'self';script-src 'self' 'report-sample' 'unsafe-eval' 'unsafe-inline' cdn.cookielaw.org *.vimeocdn.com *.youtube.com player.vimeo.com *.vimeo.com tagmanager.google.com *.googletagmanager.com *.google-analytics.com *.clarity.ms;style-src 'self' 'report-sample' 'unsafe-inline' tagmanager.google.com *.googletagmanager.com google-analytics;object-src 'self';frame-src 'self' *.youtube.com *.googletagmanager.com www.youtube-nocookie.com *.vimeo.com;child-src 'self' *.googletagmanager.com www.youtube.com;img-src 'self' data: *.ytimg.com *.youtube.com *.googletagmanager.com *.vimeocdn.com cdn.cookielaw.org;font-src 'self' data:;connect-src 'self' *.onetrust.com cdn.cookielaw.org tagmanager.google.com *.googletagmanager.com *.google-analytics.com *.clarity.ms;- strict-transport-security
max-age=31536000; includeSubdomains; preload