arval.ch

.ch crawl

First seen 2026-05-19 · Last seen 2026-05-31 · ok HTTP/1.1 200 1638 ms crawled 2026-05-30

US · 18.239.36.52 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Arval (Schweiz) AG
Description: Ob Privatperson, Kleinunternehmen oder Grossflotte: Wir bieten Mobilitätslösungen und Auto Abos für jedes Bedürfnis. Jetzt entdecken.
Language: de-ch
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.arval.ch/

Open Graph

url: https://www.arval.ch/
title: Arval
site name: Arval
description: Ob Privatperson, Kleinunternehmen oder Grossflotte: Wir bieten Mobilitätslösungen und Auto Abos für jedes Bedürfnis. Jetzt entdecken.

Technology

CDN: Amazon CloudFront
Server: nginx
CMS: Drupal

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×1
polyfill-fastly.io×1
www.googletagmanager.com×1

Social

DNS records live

NS

ns1.bnpparibas.com
ns2.bnpparibas.com
ns3.domivesta.net
ns4.domivesta.com
ns5.bnpparibas.com

MX

9 smtp-in-internet-usr-m.gslb.srv.bnpparibas

TXT

Show 5 TXT records

zscaler-verification-242570-28082025-rpIs9t
_8ec83ou0s5howzgc3cby4foo5qylcmt
_hkqvfhc0j66ujcf283eqftciciw63qf
_8rr32o4hz1v41k9h3nths36p3axzasp
MS=D444332738BAF7A93F78CF251424B519A76973ED

Verified for

Cisco
Microsoft 365

Email authentication strong

SPF: v=spf1 include:p._spf.bnpparibas.com include:_spf.salesforce.com -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:f1rg2pej@ag.eu.dmarcian.com; ruf=mailto:f1rg2pej@fr.eu.dmarcian.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Thawte EV RSA CA G2

from 2025-10-24 to 2026-10-24

Expires in 145 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.arval.ch/

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing HSTS
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'