goal.com

HTML metadata

Title

Football News, Live Scores, Results & Transfers | Goal.com

Description

The latest football news, live scores, results, rumours, transfers, fixtures, tables and player profiles from around the world, including Champions League.

Language

en

Canonical

https://www.goal.com/en

Translations

ar
ar-eg
ar-sa
de
en
en-ae
en-ag
en-as
en-au
en-bd
en-bs
en-bt
en-bz
en-ca
en-cc
en-dm
en-gb
en-gh
en-in
en-jm
en-ke
en-kh
en-la
en-mv
en-my
en-ng
en-np
en-nz
en-om
en-qa
en-sa
en-sg
en-ug
en-us
en-vi
en-za
en-zw
es
es-ad
es-ar
es-bo
es-cl
es-cr
es-cu
es-do
es-ec
es-es
es-gt
es-hn
es-mx
es-ni
es-pa
es-pe
es-pr
es-py
es-sv
es-us
es-uy
fr
hu
id
it
ja
ko
pt
pt-br
th
tr
vi

Open Graph

title: Football News, Live Scores, Results & Transfers | Goal.com
description: The latest football news, live scores, results, rumours, transfers, fixtures, tables and player profiles from around the world, including Champions League.

Technology

CMS: Next.js

Third-party hosts loaded (1)

cdn.sportfeeds.io×23

Social

Registration

Registrar

SafeNames Ltd.

Created

1995-04-18

Expires

2027-04-19 334 days left

Updated

2026-04-19

Name servers

ns-1409.awsdns-48.org
ns-1803.awsdns-33.co.uk
ns-484.awsdns-60.com
ns-971.awsdns-57.net

DNS records live

NS

ns-1409.awsdns-48.org
ns-1803.awsdns-33.co.uk
ns-484.awsdns-60.com
ns-971.awsdns-57.net

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 15 TXT records

MS=ms66107762
_el9nkf28gcwzlnceezqzzevbxsurkcl
cfqwrhfjdxmn6r9nrfqmhnp1h709m3qn
firebase=goal-app-31435
firebase=goal-live-scores-438bc
firebase=goal-news-77a5c
google-site-verification=YtB2aT0v9TMyLG57QqeX39b3zVwBnefTNgOv_k8hxfI
google-site-verification=jUFSt2GRHHOQ2jNVgQO1twiiBZNEdMJsB7MK9Dwmn7w
klaviyo-site-verification=VYBQby
openai-domain-verification=dv-tbM3K98AKAFuKYnwJSN9AqsG
tollbit-domain-verification=560eb5b46f8c3b921498b533969d7734e2530dc1785de9ac716eebe6433076e3
wzh66szlrcmprkh9jpf26mbl4y3pchmg
3E47297E4F
4cny8p8zkx7tzgnhbjkqy5rlzjxpxksr
MS=ms18685212

Email authentication strong

SPF

v=spf1 include:_spf.google.com include:_spf.firebasemail.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email, mailto:dmarc@footballco.com

policy: quarantine

DKIM

google: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCsJibmyafj0rMqSzYaXiZ2rKL3hhUIBcyjsSAiawe5M+UWEEtSXnS0KT3m9FF/xr6Gf/Tmog8nU005Nc7zK0…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

Amazon RSA 2048 M01

from 2025-11-03 to 2026-12-03

Expires in 197 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.goal.com/en

present

content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

missing HSTS
CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), camera=(), microphone=()
x-content-type-options: nosniff
content-security-policy: default-src https:; script-src https: 'unsafe-inline' 'unsafe-eval'; style-src https: 'unsafe-inline'; img-src https: data:; connect-src https: wss:; font-src https: data:; media-src https: blob: data:; worker-src https: blob:; object-src 'none';