fonzip.com

HTML metadata

Title

Membership & Fundraising Platform | Fonzip

Description

The most advanced NGO / charity / association management software. Membership, subscription and donation management with a single platform. Track and collect online donations and association dues. Get started with reporting and automation features.

Language

en

Translations

de
es
fr
it
nl
pt
ru
tr

Open Graph

url: https://fonzip.com/en
title: Membership & Fundraising Platform | Fonzip
locale: en_US
description: The most advanced NGO / charity / association management software. Membership, subscription and donation management with a single platform. Track and collect online donations and association dues. Get started with reporting and automation features.
image:secure: https://s.fonzip.com/dist/public/img/logo/logo.svg
locale:alternate: ru_RU

Technology

CDN: Cloudflare

Analytics

Google Tag Manager

Fonts

Google Fonts

Third-party hosts loaded (4)

assets.capterra.com×1
fonts.googleapis.com×1
www.facebook.com×1
www.googletagmanager.com×1

Social

Contact

Address: Kolektif House, Esentepe Mah. Harman Sk. No:5, Levent, İstanbul

Registration

Registrar

GoDaddy.com, LLC

Created

2015-12-14

Expires

2027-12-14 574 days left

Updated

2022-12-09

Name servers

amir.ns.cloudflare.com
val.ns.cloudflare.com

DNS records live

NS

amir.ns.cloudflare.com
val.ns.cloudflare.com

MX

1 aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 4 TXT records

Sendinblue-code:40f0f5a54ef929fa58ede77b01ec25b3
google-site-verification=qD4fiQDbBT1ckGMw9cHYDHfEspHb0GMTa4POiQLSyM4
google-site-verification=x6fb2vSjD_qdseErHPDoGH7pLfnLBqQXlxqWjNtXfIQ
MS=ms30236262

Email authentication strong

SPF

v=spf1  ip4:209.85.208.54 ip4:31.210.93.184 ip4:31.210.93.175 +a include:spf.brevo.com include:_spf.google.com include:spf.useinbox.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:info@fonzip.com; ruf=mailto:info@fonzip.com; rf=afrf; pct=100; ri=86400

policy: reject (enforced) · sp=reject

DKIM

google: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuButCu8bMKHBfS6PVGpUcP/xnXveQ9cpS8ehW1YSlTEC10KlL2VKqGdesGesgPHYcFfZoIeE5lN4Bf…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
mail: k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z…

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA OV R36

from 2025-12-23 to 2026-12-24

Expires in 219 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://fonzip.com/en

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
cross-origin-opener-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: same-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: object-src none; frame-src 'self' data: https://fonzip.com https://s.fonzip.com https://yonetim.fonzip.com https://www.youtube.com https://www.google.com https://google.com https://*.googletagmanager.com https://td.doubleclick.net https://tpc.googlesyndication.com https://www.facebook.com https://js.stripe.com https://hooks.stripe.com https://h.online-metrix.net https://ode.iyzico.com https://challenges.cloudflare.com; style-src 'self' 'unsafe-inline' https://s.fonzip.com https://www.gstatic.com https://onesignal.com https://fonts.googleapis.com https://maps.googleapis.com; media-src 'self' https://js.intercomcdn.com https://downloads.intercomcdn.com https://downloads.intercomcdn.eu https://downloads.au.intercomcdn.com; default-src 'self' https://s.fonzip.com https://cdn.fonzip.com; connect-src 'self' https://s.fonzip.com https://cdn.fonzip.com https://uploads.intercomusercontent.com https://api-iam.au.intercom.io https://api-iam.eu.intercom.io https://api-iam.intercom.io https://api-p
strict-transport-security: max-age=31536000;
cross-origin-opener-policy: same-origin