arval.cz

HTML metadata

Title: Auta na operativní leasing | Operák bez starostí | Arval.cz
Description: Prozkoumejte nabídky aut na operativní leasing. Ať už jste fyzická osoba, podnikatel nebo velká korporace, každý si přijde na své. Zjistěte více.
Language: cs
Generator: Drupal 10 (https://www.drupal.org)
Canonical: https://www.arval.cz/

Open Graph

url: https://www.arval.cz/
title: Czech Republic
site name: Czech Republic
description: Prozkoumejte nabídky aut na operativní leasing. Ať už jste fyzická osoba, podnikatel nebo velká korporace, každý si přijde na své. Zjistěte více.

Technology

CDN: Amazon CloudFront
CMS: Drupal

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×1
polyfill-fastly.io×1
www.googletagmanager.com×1

Social

Contact

Email

retail@arval.cz

Phone

+420 261 109 007

DNS records live

NS

ns1.bnpparibas.com
ns2.bnpparibas.com
ns3.domivesta.net
ns4.domivesta.com

MX

5 smtp-in-internet-usr-m.gslb.srv.bnpparibas

TXT

Show 6 TXT records

_woq30kded3jv84mcrlixto3lo2ucg51
_s5f21vz27udpayjtumvj2yezkvggc3v
58D3-7F31-5F2E-DC91-ECDF-4523-DDE4-6234
A7E9-1081-19D8-87B4-76F0-EEA9-ABD8-CAA0
zscaler-verification-242570-28082025-rpIs9t
_v5ccuer2gmu7xxyf0yg9p3grbe53e76

Verified for

Adobe
Cisco
Meta
Microsoft 365

Email authentication strong

SPF: v=spf1 include:pns._spf.bnpparibas.com include:_spf.salesforce.com ip4:81.91.84.179 a:ais.arval.cz ip4:194.228.62.110 -all
strict (-all)
DMARC: v=DMARC1; p=reject; fo=1; rua=mailto:f1rg2pej@ag.eu.dmarcian.com; ruf=mailto:f1rg2pej@fr.eu.dmarcian.com
policy: reject (enforced)
DKIM: no key found at common selectors

Certificate (current)

Thawte EV RSA CA G2

from 2025-10-24 to 2026-10-24

Expires in 145 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.arval.cz

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self'
strict-transport-security: max-age=31536000; includeSubDomains