goya.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-18 · ok HTTP/1.1 200 5676 ms crawled 2026-05-06

US · 141.193.213.21 · AS209242 Cloudflare London, LLC

Reputation 100/100

Classifying

HTML metadata

Title

Goya Foods | Authentic Latino Food & Recipes

Description

America’s largest Hispanic-owned food company and the premier source for authentic Latin cuisine.

Language

en-US

Generator

WPML ver:4.6.15 stt:1,2;

Canonical

https://www.goya.com/en/

Translations

Open Graph

url: https://www.goya.com/en/
title: Home
locale: en_US
site name: Goya Foods
description: America’s largest Hispanic-owned food company and the premier source for authentic Latin cuisine.

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Third-party hosts loaded (7)

cdn-ilddihb.nitrocdn.com×8
img.youtube.com×2
cdn.jsdelivr.net×1
gmpg.org×1
static.addtoany.com×1
unpkg.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1995-09-14

Expires

2030-09-13 1577 days left

Updated

2025-07-15

Name servers

a1-9.akam.net
a14-67.akam.net
a20-66.akam.net
a24-65.akam.net
a3-65.akam.net
a5-67.akam.net

DNS records live

NS

a1-9.akam.net
a14-67.akam.net
a20-66.akam.net
a24-65.akam.net
a3-65.akam.net
a5-67.akam.net

MX

5 goya-com.mail.protection.outlook.com

TXT

Show 11 TXT records

apple-domain-verification=5ibhNACpl7OBT15c
citrix-verification=hr-_l1AN1ToxpDY4IqUi
3n1stgh364v5ea2qqhfb95l93g
v=spf1 include:spf.protection.outlook.com include:mail.zendesk.com include:authsmtp.com -all
cisco-ci-domain-verification=336e1b59661fb5851a55d9e4cf99bc14be8a4338ba297cc453a979b7686d255d
rp41r1ekcceugk229043hlqisg
MS=ms25828890
duo_sso_verification=yClYMCFDtFbtz8tVcVPLSC6ZByp8t6YIRDlKf05H8gGXHOFqwD1tzWHrvQ8bWdqk
lk4aaesotbrq1m5vjocvqhb75s
sophos-domain-verification=d265b44dcef40247e7ce74bb852541467624a2d1
atlassian-sending-domain-verification=ac615867-ba32-4273-a1ad-988016835470

Certificate (current)

WE1

from 2026-04-24 to 2026-07-23

Expires in 65 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://www.goya.com/en/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: autoplay=(self "https://www.youtube.com" "https://www.youtube-nocookie.com"), encrypted-media=(self "https://www.youtube.com" "https://www.youtube-nocookie.com")
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https: blob:; style-src 'self' 'unsafe-inline' https: blob: 'unsafe-eval'; font-src 'self' https: data:; img-src 'self' https: data:; frame-src 'self' https: data:; connect-src 'self' https:; media-src 'self' https: data:; worker-src 'self' blob: https://cdn-ilddihb.nitrocdn.com/; child-src 'self' blob:
strict-transport-security: max-age=63072000