hyva.io

.io crawl

First seen 2026-04-14 · Last seen 2026-05-18 · ok HTTP/1.1 200 1068 ms crawled 2026-05-08

BE · 185.76.239.242 · AS34762 Combell NV

Reputation 100/100

Classifying

HTML metadata

Title: Hyvä | Where Good eCommerce Stores Begin
Description: Explore Hyvä Commerce, Hyvä Theme, Hyvä Checkout, Hyvä UI, and Hyvä Enterprise for fast, flexible, and powerful eCommerce stores.
Language: en
Canonical: https://www.hyva.io/

Open Graph

url: https://www.hyva.io/
title: Hyvä | Where Good eCommerce Stores Begin
site name: Hyvä
description: Explore Hyvä Commerce, Hyvä Theme, Hyvä Checkout, Hyvä UI, and Hyvä Enterprise for fast, flexible, and powerful eCommerce stores.

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Social

Contact

Address: st error = tokenElement ? 'ReCaptcha\u0020

DNS records live

NS

ns0.transip.net
ns1.transip.nl
ns2.transip.eu

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

google-site-verification=Uhgzr2xlFBs3ZW76Id0bAWrkHV0K8UhvuocjRJLEdQU
google-site-verification=zPiBaG4y3DnHPmp6sCq4MkJj3lt3o62QuGJRKWaTI14

Email authentication strong

SPF

v=spf1 include:_spf.google.com a include:spf.hyvaio.hypernode.io ~all

softfail (~all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc-reports@hyva.io; ruf=mailto:dmarc-reports@hyva.io; fo=1; adkim=r; aspf=r; pct=100

policy: quarantine

DKIM

k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

from 2026-05-04 to 2026-08-02

Expires in 74 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 50/100 Checked live page: https://www.hyva.io/

present

content-security-policy-report-only
x-frame-options
x-content-type-options

findings

missing HSTS
missing Content Security Policy
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy-report-only: font-src fonts.gstatic.com use.typekit.net *.typekit.net *.gstatic.com www.paypalobjects.com *.fontawesome.com https://fonts.bunny.net data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com *.paypal.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com *.youtube.com *.youtube-nocookie.com geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com pilot-payflowlink.paypal.com player.vimeo.com https://www.google.com/recaptcha/ *.braintreegateway.com *.paypal.com google.com *.google.com bid.g.doubleclick.net js.mollie.com 'self' 'unsafe-inline'; img-src assets.ado