indexo.dev

arrivagroup.com

.com crawl

First seen 2026-04-23 · Last seen 2026-05-17 · ok HTTP/1.1 200 11354 ms crawled 2026-05-17

IE · 52.17.142.199 · AS16509 Amazon.com, Inc.

Reputation 92/100 no dmarc policy

sector b2b services type homepage

HTML metadata

Title
Arriva
Description
Delivering for and on behalf of our clients
Language
en
Canonical
https://www.arrivagroup.com/

Open Graph

url
https://www.arrivagroup.com/
title
Home

Technology

CDN
Cloudflare
Analytics
  • Cloudflare Insights
  • Google Tag Manager
Third-party hosts loaded (9)
  • cdn.jsdelivr.net×3
  • assets.investisdigital.com×2
  • www.googletagmanager.com×2
  • cdnjs.cloudflare.com×1
  • code.jquery.com×1
  • otp.tools.investis.com×1
  • static.cloudflareinsights.com×1
  • viz.tools.investis.com×1
  • www.youtube.com×1

Social

Registration

Registrar
CSC Corporate Domains, Inc.
Created
2011-05-01
Expires
2027-05-01 345 days left
Updated
2026-04-27
Name servers
  • ns1.netnames.net
  • ns2.netnames.net
  • ns5.netnames.net
  • ns6.netnames.net

DNS records live

NS
  • ns1.netnames.net
  • ns2.netnames.net
  • ns5.netnames.net
  • ns6.netnames.net
MX
  • 10 relay1.netnames.net
  • 20 relay2.netnames.net
TXT
  • _sgn86pb1yfouns5a1va96txqwuiemee
  • 323nlybzqnb157dt849p5mfkkv582tdb

Email authentication weak

SPF
not published
DMARC
not published
DKIM
no key found at common selectors

Certificate (current)

Thawte TLS RSA CA G1
from 2025-09-10 to 2026-10-10
Expires in 142 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.arrivagroup.com/

present
  • strict-transport-security
  • content-security-policy
  • x-frame-options
  • x-content-type-options
  • referrer-policy
  • permissions-policy
findings
  • CSP allows unsafe inline scripts/styles
  • CSP uses wildcard sources
Header values
referrer-policy
strict-origin-when-cross-origin
x-frame-options
SAMEORIGIN
permissions-policy
accelerometer=(),ambient-light-sensor=(), battery=(), camera=(), display-capture=(), document-domain=(), encrypted-media=(), gyroscope=(), magnetometer=(), midi=(), payment=(), picture-in-picture=(), publickey-credentials-get=(), usb=(), web-share=(), xr-spatial-tracking=()
x-content-type-options
nosniff
content-security-policy
default-src *.myidx.cloud 'self' ajax.googleapis.com fonts.googleapis.com use.typekit.net *.analytics.google.com *.google.com *.google-analytics.com google-analytics.com code.highcharts.com viz.tools.investis.com edge.api.brightcove.com *.brightcovecdn.com cdn.jsdelivr.net; img-src *.myidx.cloud 'self' data: 'unsafe-inline' * data: www.w3.org; frame-src *.myidx.cloud 'self' td.doubleclick.net viz.tools.investis.com *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net *.google.com irs.tools.investis.com otp.tools.investis.com connectidfeed.com *.connectidfeed.com ir.connectidfeed.com www.youtube.com *.vimeo.com; frame-ancestors 'self' connectidfeed.com *.connectidfeed.com ir.connectidfeed.com https: http:; style-src *.myidx.cloud 'self' 'unsafe-inline' 'unsafe-eval' use.typekit.net *.typekit.net *.zscaler.net *.zscalerone.net *.zscalertwo.net *.zscalerthree.net *.zscloud.net google-analytics.com fonts.googleapis.com viz.tools.investis.com cdnjs.cloudflare.com
strict-transport-security
max-age=31536000; includeSubDomains; preload

Links to (6)

Linked from (1)