drivenbrands.com

HTML metadata

Title: Top Automotive Franchises
Description: If you are considering purchasing a franchise in the automotive industry, then fasten your seat belt and get ready for an exciting road ahead!
Language: en
Canonical: https://www.drivenbrands.com/

Open Graph

title: Top Automotive Franchises
locale: en_US
site name: Driven Brands
description: If you are considering purchasing a franchise in the automotive industry, then fasten your seat belt and get ready for an exciting road ahead!

Technology

CDN: Vercel
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (3)

cdn-prod.securiti.ai×3
kit.fontawesome.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

2006-06-20

Expires

2027-06-20 397 days left

Updated

2026-04-13

Name servers

ns1.brandsight-dns.com
ns1.brandsight-dns.net
ns2.brandsight-dns.com
ns2.brandsight-dns.net

DNS records live

NS

ns1.brandsight-dns.com
ns1.brandsight-dns.net
ns2.brandsight-dns.com
ns2.brandsight-dns.net

MX

0 drivenbrands-com.mail.protection.outlook.com

TXT

Show 11 TXT records

gitkraken-domain-verification=2232596ce7e63d48e8a411fc2955e42c4224e1e26b720b588884d09f53bcbb24
smartsheet-site-validation=4aGr-zoDClmeg0v4ska1wGLniaErTuod
adobe-idp-site-verification=0f23f1bb36c28d8c638a8c75438b4cab0d073a42317ee3ef20bafabac5e8bdbf
google-site-verification=XnxAqmxbFq9odVvRV7TA22RWWcCV6wE1qkLvFqsha8Q
Validity-Domain-Verification=aXkYRYjc0lNqUhBcMRunjpfwOGA=
atlassian-domain-verification=IweytGg70EEJaLMOSO6OeG88dL1kjEaY4PLjNUaJZOHFrJCdO2yYQJskbD0VviX+
google-site-verification=OCXk96SuXmU7HHXC_oVjmrM9wvnAxbSKIiWJkXIT_44
MS=ms87684988
logmein-verification-code=1cf3496e-ac2d-454c-90ef-a07f122a7b1a
google-site-verification=vl470zjKWs-muqhpRpY40k5cECA3THcygYgmppBfnlE
apple-domain-verification=u6qyNpHlRvIEyfPw

Email authentication partial

SPF

v=spf1 include:spf.protection.outlook.com ip4:64.246.141.117 ip4:216.134.192.243 ip4:74.219.14.128 ip4:64.239.243.200 ip4:64.239.243.199 ip4:64.239.243.196 ip4:209.249.129.45 ip4:209.249.129.22 ip4:199.15.229.100 ip4:66.38.154.32/27 ip4:208.185.229.0/24 ip4:208.185.235.0/24 include:sendgrid.net include:docebosaas.com include:jangomail.com include:_spf.psm.knowbe4.com include:mail.zendesk.com include:spf_c.oraclecloud.com -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc@drivenbrands.uriports.com; ruf=mailto:dmarc@drivenbrands.uriports.com; fo=1:d:s

policy: none (monitoring only)

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyatdqkXNLDj8vCs8FwVXmSrv1C6zYacfATwFBnViU9Ql7m8xDHwMSI5jqVCk5a9qUqW7SYHQEWXPtPEIYb…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCtwO3uTyRsX3SJLHGlsfmNGkOscqBL6qnftquf0uET62AqV6BqjvkFzLmBimE8srTd7FJ8vMYbNdG/4CTSvEC6pW…

selectors probed

Certificate (current)

R13

from 2026-04-24 to 2026-07-23

Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.drivenbrands.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: no-referrer
x-frame-options: DENY
permissions-policy: accelerometer=(), camera=(), fullscreen=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), sync-xhr=(), usb=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://www.googletagmanager.com https://cdn-prod.securiti.ai https://kit.fontawesome.com; style-src 'self' 'unsafe-inline' https://cdn-prod.securiti.ai; img-src 'self' data: https://images.ctfassets.net https://downloads.ctfassets.net https://www.google-analytics.com; connect-src 'self' https://www.google-analytics.com https://graphql.contentful.com https://cdn-prod.securiti.ai; font-src 'self' data: https://kit.fontawesome.com; frame-src 'self' https://www.googletagmanager.com; object-src 'none'; base-uri 'self'; form-action 'self'; frame-ancestors 'none'
strict-transport-security: max-age=31536000; includeSubDomains