drybarfranchise.com

.com crawl

First seen 2026-05-14 · Last seen 2026-05-19 · ok HTTP/1.1 200 7300 ms crawled 2026-05-19

US · 34.224.10.110 · AS14618 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Blow Dry Bar Franchise | Drybar Franchise
Description: Blow away the competition with a Drybar. No cuts, no color, just blowouts—and serious business success with a leading salon franchise. Join our family today!
Language: en
Canonical: https://www.drybarfranchise.com/

Open Graph

url: https://www.drybarfranchise.com/
title: Blow Dry Bar Franchise | Drybar Franchise
site name: Drybar
description: Blow away the competition with a Drybar. No cuts, no color, just blowouts—and serious business success with a leading salon franchise. Join our family today!

Technology

Third-party hosts loaded (1)

analytics.scorpion.co×1

Social

Contact

Phone

7209999351

Address

1890 Wynkoop St, Unit 1, 80202, Denver, CO

Registration

Registrar

GoDaddy.com, LLC

Created

2025-03-19

Expires

2027-03-19 302 days left

Updated

2026-03-12

Name servers

tani.ns.cloudflare.com
walt.ns.cloudflare.com

DNS records live

NS

tani.ns.cloudflare.com
walt.ns.cloudflare.com

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificates

Loading certificate

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.drybarfranchise.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src * blob: data: cid:; img-src * data: blob: cid: 'unsafe-inline'; media-src * data: blob:; script-src * data: blob: 'unsafe-inline' 'unsafe-eval'; style-src * blob: data: 'unsafe-inline'; style-src-elem * blob: data: 'unsafe-inline', font-src * data:
strict-transport-security: max-age=63072000; includeSubDomains; preload