franzy.com

.com crawl

First seen 2026-04-22 · Last seen 2026-06-01 · ok HTTP/1.1 200 819 ms crawled 2026-05-31

US · 104.20.22.39 · AS13335 Cloudflare, Inc.

Reputation 89/100 weak security headers dmarc monitor-only

sector b2b services type homepage

HTML metadata

Title: Franzy: Find The Perfect Franchise Opportunity
Description: Explore franchises to invest in, find the right fit for you, and connect directly with franchisors - all right here with Franzy.
Language: en
Canonical: https://franzy.com

Open Graph

url: https://franzy.com
title: Franzy: Find The Perfect Franchise Opportunity
site name: Franzy
description: Explore franchises to invest in, find the right fit for you, and connect directly with franchisors - all right here with Franzy.

Technology

CDN: Cloudflare
CMS: Next.js

Analytics

Cloudflare Insights
Google Tag Manager

Social widgets

Vimeo Embed

Third-party hosts loaded (5)

player.vimeo.com×2
accounts.google.com×1
knock2-backend-2ba4792164c3.herokuapp.com×1
static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Amazon Registrar, Inc.

Created

2010-10-16

Expires

2026-10-16 134 days left

Updated

2026-05-13

Name servers

asa.ns.cloudflare.com
eric.ns.cloudflare.com

DNS records live

NS

asa.ns.cloudflare.com
eric.ns.cloudflare.com

MX

1 smtp.google.com

TXT

rippling-domain-verification=37157f16c8325473

Verified for

Google
Twilio

Email authentication partial

SPF

v=spf1 include:_spf.google.com include:sendgrid.net include:47654414.spf02.hubspotemail.net ~all

softfail (~all)

DMARC

v=DMARC1;p=none;sp=none;pct=100;rua=mailto:chris@franzy.com;ruf=mailto:chris@franzy.com;ri=86400;aspf=s;adkim=s;fo=1

policy: none (monitoring only) · sp=none

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCxTweD9q5HOpTSHXt6CdAKnyrnNCx56pU0RDdK7wvOGynsrwzwvOkrwgOvBHo8YS2Klxlo+tGK/AhbmHSaPu…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvHvef+ljrSfxmgon2oYWBugVkn9zzPYP41CYLxzzeYJZ+JNgG/9IMy/vpjr0WCjz4+PO7iPj2Oq5EzPAt…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWSTRq0IM4cth1C00BXQLzL3c3kG4ZIMCeHo2rtsAZkGVt52eLvI4FkggIoFVgKm922iu5Ws/r1VOgvfZq…

selectors probed

Certificate (current)

from 2026-05-08 to 2026-08-06

Expires in 63 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 45/100 Checked live page: https://franzy.com/

present

content-security-policy
referrer-policy
cross-origin-opener-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing frame protection
missing content type protection
missing Permissions Policy

Header values

referrer-policy: no-referrer-when-downgrade
content-security-policy: default-src 'self'; connect-src 'self' https://google.com https://*.google.com https://*.googleapis.com https://*.posthog.com https://*.franzy.com wss://*.posthog.com http://franzy.referralrock.com https://api.segment.io https://px.ads.linkedin.com https://*.linkedin.com https://cdn.segment.com https://forms.hscollectedforms.net https://api.hubapi.com https://*.amazonaws.com https://*.facebook.com https://connect.facebook.net https://api.avo.app https://*.growthbook.io https://nominatim.openstreetmap.org https://*.ingest.sentry.io https://*.ingest.us.sentry.io; frame-src 'self' https://*.google.com https://doubleclick.net https://*.doubleclick.net https://*.franzy.com https://www.googletagmanager.com https://player.vimeo.com https://www.youtube.com https://youtube.com https://*.youtube.com https://www.facebook.com https://meetings.hubspot.com https://open.spotify.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' blob: data: https://*.google.com https://*.googleapis.com https://*.dou
cross-origin-opener-policy: same-origin-allow-popups