mccormickcorporation.com

.com crawl

First seen 2026-04-13 · Last seen 2026-05-11 · ok HTTP/1.1 200 2073 ms crawled 2026-05-07

US · 3.174.113.99 · AS16509 Amazon.com, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: McCormick & Company, Foods, Ingredients and Flavors
Description: McCormick & Company, Incorporated is a global leader in flavor, seasonings and spices. The company manufactures, markets and distributes spices, seasoning mixes, condiments and other flavorful products to the entire food industry.
Language: en
Canonical: https://www.mccormickcorporation.com

Technology

CDN: Amazon CloudFront

Analytics

Google Tag Manager

Cookie consent

OneTrust

Third-party hosts loaded (3)

cdn.cookielaw.org×2
fast.fonts.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

GoDaddy Corporate Domains, LLC

Created

2007-06-27

Expires

2026-06-27 37 days left

Updated

2025-05-28

Name servers

ns-1122.awsdns-12.org
ns-140.awsdns-17.com
ns-1931.awsdns-49.co.uk
ns-821.awsdns-38.net

DNS records live

NS

ns-1122.awsdns-12.org
ns-140.awsdns-17.com
ns-1931.awsdns-49.co.uk
ns-821.awsdns-38.net

TXT

gvh00kndcwb1mhmvnp2sn45013d62710

Verified for

Google
Meta

Email authentication no MX

SPF: not published
DMARC: not published
DKIM: no key found at common selectors

Certificate (current)

GeoTrust TLS RSA CA G1

from 2025-10-10 to 2026-10-10

Expires in 142 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.mccormickcorporation.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src https: 'self'; script-src 'unsafe-eval' 'unsafe-inline' 'self' *; style-src 'unsafe-inline' 'self' *; frame-src 'self' *; object-src 'self' *; img-src 'self' data: *; media-src blob: 'self' *; font-src 'self' data: *; connect-src 'self' *; child-src blob: 'self' *; block-all-mixed-content;
strict-transport-security: max-age=31536000