chipotle.com

.com toplist crawl

First seen 2026-04-11 · Last seen 2026-05-18 · ok HTTP/1.1 200 1507 ms crawled 2026-05-18

US · 151.101.67.10 · AS54113 Fastly, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: Mexican Food - Restaurant & Catering - Chipotle Mexican Grill
Description: Order tacos, burritos, salads, bowls and more at Chipotle Mexican Grill. Order online for pick up or delivery and join our rewards program today.
Language: en
Canonical: /home

Open Graph

url: https://www.chipotle.com/home
title: Mexican Food - Restaurant & Catering - Chipotle Mexican Grill
site name: Chipotle
description: Order tacos, burritos, salads, bowls and more at Chipotle Mexican Grill. Order online for pick up or delivery and join our rewards program today.

Technology

Third-party hosts loaded (3)

a40.usablenet.com×1
assets.adobedtm.com×1
vice-prod.sdiapi.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1997-04-01

Expires

2027-04-02 317 days left

Updated

2026-03-29

Name servers

ns-109.awsdns-13.com
ns-1368.awsdns-43.org
ns-2018.awsdns-60.co.uk
ns-667.awsdns-19.net

DNS records live

NS

ns-109.awsdns-13.com
ns-1368.awsdns-43.org
ns-2018.awsdns-60.co.uk
ns-667.awsdns-19.net

MX

10 mxa-00200801.gslb.pphosted.com
10 mxb-00200801.gslb.pphosted.com

TXT

Show 13 TXT records

paloaltonetworks-site-verification=a8969b01013ad89c967ab1447b2beb6e434c742bbb9ace302ae4cb2284a5fb58
pexip-ms-tenant-domain-verification=e917feab-8dce-406a-a7ff-6b9449fecb4b
vertexinc-cloud-1ab2e2f0-00e1-4ecc-b423-e1b1e148a83d
apple-domain-verification=hczwBRAUGxvb3qM0
atlassian-domain-verification=oxlM0vME6xgG2q7G1XaSlOz71gOLhZDnHdffUgqDrdSBRQY5k5tjG8wodFoUnVtP
cisco-ci-domain-verification=6aea3cc759a3a8feb03535f00c6c51448e16c996f9c56e74c8ca536e9600127c
docker-verification=e5edc09b-dc5b-408c-bec5-d1aee9423d11
docusign=434a73cf-29b1-473b-b946-af4e35b16b00
docusign=ba65768a-c44b-4f29-ba89-91a780789402
facebook-domain-verification=li6fa7y53kaqgbnv624vurfewx3jq1
google-site-verification=0hWyLZ9z9wnpufE9HTh9RgjLGcQqLIVgJGxwkycvc94
iQcRyX9/2FqbomJqZJ089S+B2CO6hSKQfo5oM8btfiH9Ek5NuDEuivxEXaOvPiR2+ntfntJdiZ0N+FT2hJnMDA==
openai-domain-verification=dv-gT9bA4Cw2vjvEFGuscuJvYGe

Email authentication strong

SPF: v=spf1 include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email include:spf.protection.outlook.com ~all
softfail (~all)
DMARC: v=DMARC1; p=quarantine; rua=mailto:dmarc_agg@vali.email
policy: quarantine
DKIM: no key found at common selectors

Certificate (current)

DigiCert Global G2 TLS RSA SHA256 2020 CA1

from 2025-10-14 to 2026-10-14

Expires in 147 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.chipotle.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: frame-ancestors 'self' sdiapi.com app.datadoghq.com; report-uri https://browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub6df94c90ac4e89b7d31cb3f4ac5cc298&dd-evp-origin=content-security-policy&ddsource=csp-report; script-src 'self' blob: 'nonce-agtM5mZ5JZyVMm6f1Q57KgAAAGg' 'strict-dynamic' 'unsafe-inline' https: http: ;object-src 'none';base-uri 'self';
strict-transport-security: max-age=31557600