toyotafinance.cz

HTML metadata

Title: Toyota Financial Services Czech s.r.o.
Language: cs

Open Graph

url: https://www.toyotafinance.cz/
title: Toyota Financial Services Czech s.r.o.
site name: Toyota Financial Services Czech s.r.o.

Technology

Server: xxxxxx

Analytics

Google Tag Manager

Third-party hosts loaded (1)

www.googletagmanager.com×1

Contact

Email

Phone

+420222998300

Address

Bavorská 2662/1, 155 00, Praha 5, Česká republika

Registration

Registrar

REG-INTERNET-CZ

Created

2000-06-07

Expires

2027-06-06 370 days left

Updated

2016-12-07

Name servers

ns.grdns.cz
ns.grdns.it

DNS records live

NS

ns.grdns.cz
ns.grdns.it

MX

10 cluster8.eu.messagelabs.com
20 cluster8a.eu.messagelabs.com

TXT

knowbe4-site-verification=dbc98eb06da83a655ff87eb18c2e1e09

Email authentication strong

SPF

v=spf1 include:_spf.toyotafinance_cz._d.easydmarc.pro -all

strict (-all)

DMARC

v=DMARC1;p=reject;pct=100;rua=mailto:ba4c6b2110@rua.easydmarc.eu;ruf=mailto:ba4c6b2110@ruf.easydmarc.eu;ri=86400;fo=1;

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8ZdlE+6JkBMhH1EePoamUSTE9M2BhwQnBn7NRWtAPHjmsgE5EiSrV3/YPW9VDssO/srSggtdP8yXd9…

selectors probed

Certificate (current)

E8

from 2026-04-26 to 2026-07-25

Expires in 55 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.toyotafinance.cz/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: accelerometer=(), camera=(), fullscreen=(self), geolocation=(self), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' data: *.fg.cz *.local;font-src 'self' data: fonts.gstatic.com *.fg.cz *.local *.toyotafinance.sk;connect-src 'self' *.google.com *.googleapis.com *.google-analytics.com *.doubleclick.net *.facebook.com *.fg.cz;script-src 'self' 'unsafe-inline' 'unsafe-eval' *.google.com *.google.cz *.googleapis.com www.googletagmanager.com *.google-analytics.com *.gstatic.com *.adform.net *.seznam.cz *.fg.cz *.toyotafinance.sk;form-action 'self' *.facebook.com *.facebook.net *.fg.cz *.local;frame-src 'self' blob: www.youtube.com *.fg.cz *.local;worker-src 'self' blob: www.youtube.com *.fg.cz *.local;frame-ancestors 'self' *.fg.cz *.local;img-src 'self' data: blob: *.gstatic.com *.googleapis.com *.googlecode.com www.googletagmanager.com *.google-analytics.com *.doubleclick.net *.google.com *.google.co.uk *.google.cz *.google.sk *.google.de *.google.at *.google.fr *.google.it *.google.sk *.google.pl *.google.nl *.google.ie via.placeholder.com *.fg.cz *.local *.toyotafinance.s
strict-transport-security: max-age=31536000