yavaint.com

HTML metadata

Title

Custom Web Development & Shopify Stores | YavaInt

Description

Full-stack web development studio building custom websites, Shopify stores, and web applications.

Language

en

Canonical

https://yavaint.com

Translations

en
fr

Feeds

YavaInt Technologies Blog RSS Feed RSS

Open Graph

url: https://yavaint.com
title: Full-Stack Web Development Company | YavaInt
locale: en_US
site name: YavaInt
description: Full-stack web development company building custom websites, Shopify stores, and web applications. Production-ready code, reliable support.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (8)

api.microlink.io×11
carrefourdelaudition.com×2
heronwatches.com×2
hrconnexionrh.ca×2
lockangelesla.com×2
miracleplumbing.net×2
nhhostas.com×2
www.googletagmanager.com×2

Social

Contact

Email

info@yavaint.com

Phone

+18557658004

Address

7901 4th St N STE 300, 33702, St. Petersburg, FL, US

Registration

Registrar

HOSTINGER operations, UAB

Created

2025-09-30

Expires

2028-09-30 848 days left

Updated

2025-11-12

Name servers

johnny.ns.cloudflare.com
rafe.ns.cloudflare.com

DNS records live

NS

johnny.ns.cloudflare.com
rafe.ns.cloudflare.com

MX

1 smtp.google.com

Verified for

Google
Google Workspace

Email authentication partial

SPF

v=spf1 include:_spf.google.com ~all

softfail (~all)

DMARC

v=DMARC1; p=none; rua=mailto:79790120940245159524c86a200285ac@dmarc-reports.cloudflare.net

policy: none (monitoring only)

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6vRQSWVUE2BAQ5PIW4jIP3tL0yWoJLp1EgEhjNBllgDWNiSBhkidqsT7jKVRJt61ZFoxq8XsffTqt…

selectors probed

Certificate (current)

WE1

from 2026-05-25 to 2026-08-23

Expires in 79 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://yavaint.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy
cross-origin-embedder-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://www.google-analytics.com https://static.cloudflareinsights.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; img-src 'self' data: https: blob:; font-src 'self' data: https://fonts.gstatic.com; connect-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://api.microlink.io https://*.yavaint.com https://cloudflareinsights.com; frame-src 'self' https://www.googletagmanager.com
strict-transport-security: max-age=63072000; includeSubDomains; preload, max-age=31536000; includeSubDomains
cross-origin-opener-policy: same-origin
cross-origin-embedder-policy: credentialless