sprouts.com

HTML metadata

Title: Healthy Grocery, Organic Food & Supplements | Sprouts Farmers Market
Description: Our neighborhood grocery stores offer thousands of natural, organic & gluten-free foods. Discover fresh produce, meats, vitamins, supplements & more.
Language: en-US
Canonical: https://www.sprouts.com/

Open Graph

url: https://www.sprouts.com/
title: Healthy Grocery, Organic Food & Supplements | Sprouts Farmers Market
locale: en_US
site name: Sprouts Farmers Market
description: Our neighborhood grocery stores offer thousands of natural, organic & gluten-free foods. Discover fresh produce, meats, vitamins, supplements & more.
updated time: 2026-05-18T12:20:52-07:00

Technology

CDN: Cloudflare
CMS: WordPress

Analytics

Google Tag Manager

Fonts

Adobe Fonts

Third-party hosts loaded (6)

ajax.googleapis.com×2
dboktu48tbzl9.cloudfront.net×2
static.addtoany.com×2
a40.usablenet.com×1
use.typekit.net×1
www.googletagmanager.com×1

Social

Registration

Registrar

Cloudflare, Inc.

Created

1999-09-27

Expires

2026-09-27 131 days left

Updated

2025-08-28

Name servers

angela.ns.cloudflare.com
brad.ns.cloudflare.com

DNS records live

NS

angela.ns.cloudflare.com
brad.ns.cloudflare.com

MX

0 mxa-00224301.gslb.pphosted.com
0 mxb-00224301.gslb.pphosted.com

TXT

Show 26 TXT records

nod6rjsmgma8b2lnru0b4qim4q.
3hsfk66f9lsldc9ekbmpa1qs0b
87d4fbcf-538b-4d1e-9faf-8e350dbb5e4e
intersight=6664d7afeae2d1a941011cb6ff93a522a9a055b8ac3d9258dfa57d600a52dcb6
atlassian-domain-verification=d1VVhzJFJf3YxaQRkIjxziDzkOaakeNX1EBVxiXtm5G1tNiGj3bIi2azEEAOD5hK
qi7o1pivjjpmpe4o4kptl55chs.
vmware-cloud-verification-f6f9e736-5b32-4764-bc37-660c06bf806e
slack-domain-verification=x875iZwA5A8IMxLWDX9Z6SL6uFYdHC0FDKQBNrwu
openai-domain-verification=dv-n1XQYD3iRl993DkX5EG5496Z
smkmgck3tjssj8hitirft0pm27
clickup-verification=hbg9NGlRU4/W3xKek1QvigTKKElYeo7BVxCU4axqENA=
google-site-verification=mo3PCc9HVmj2p3bMsA9xxWC7AhdrM6BtwV0JhJcAucM
anthropic-domain-verification-sr3vwc=C3Z5rdoq4mk9ruAvBSZV08NGz
v=verifydomain MS=8157861
google-site-verification=MxYcAbDeYShJyvr85D3NEfLg8utgpHvrOw5JICMqhms
google-site-verification=HeJNCABy_5xzjLF81FzMP9F4thSJc2cZwuPLA56M6qo
SFMC-TRXZreMigm0oN1EP9lR_niDGpcDpwxFoW8p0yTpK
MS=ms71400054
docusign=d7222a49-4634-4599-8500-cfe8b579001e
SFMC-hx8HzotMHrx9KfLFC1opAY03WgVsfr-hDPbb7NCl
ongs1211j7vifgnvkp9kq2kcc7
8b2d3bb756ab7f8711238fce8e65e495cbd5ce5bb1c7cff34db1bafd580a3d6
scnv-verification=d30060d9af4a7a304166f4dedb891ddb:cd2c5a1a94998a19690db018503cb34d:5e00873b728644d1b1ee9cb3ff0d1911
1password-site-verification=2LFSNSSJANGRNPAXQJVJQHTK2Y
neat-pulse-domain-verification-9v88WDv=d042d3cd-248c-4715-b974-27f1502e2f1b
google-site-verification=2s4uf115RnWVWLSdczITR5q7Q79Lb8togJfc7Ri9Wl0

Email authentication strong

SPF

v=spf1 include:%{ir}.%{v}.%{d}.spf.has.pphosted.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; fo=1; rua=mailto:dmarc_rua@emaildefense.proofpoint.com; ruf=mailto:dmarc_ruf@emaildefense.proofpoint.com

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDrKfW6tbJRP9G/EnAWW8tbiBUDcl5wsv5Wf+ZfJSX1nDR3JUupULAPK18iLIX6zsIM6fOoTPZaEUFQhFI5q+…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI1v4XHaw8ECePnv3V1j3hMxgK6+ATL74VQ+o1eqeEGF9jBLWVfQWK3Kbx1T1Said8HwYSsalF5hzhYoKD…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC4/ic+ZC8Ms1Knx7zg5YmNt8HEP4tgoy7+faqh9h25a8phlkmt9WJ9sD0bXXvekiaNeUdYHLh6yNvX2h0t+aOddm…

selectors probed

Certificate (current)

E8

from 2026-05-12 to 2026-08-10

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.sprouts.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(), microphone=(), camera=(), fullscreen=(self), payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; script-src 'self' 'strict-dynamic' 'unsafe-hashes' 'nonce-6vKiQAhGYSoiv4cC57ijgQ==' 'strict-dynamic' 'unsafe-inline' 'unsafe-eval' 'sha256-Z7GB6WC22Sr/DqKrw5aXf29OhzqBgM8VxNMh40DGscY=' 'sha256-TZ1azSSMI8GXjtt3imG0LBTXJ7uNtC5uzfZJzF8jVwo=' 'sha256-+H0pDVW3X4UHkoyzQt1w7pVFQgfyqu/zRyY1WzYgc3w=' 'sha256-TiTQ0AZAsb77QdaUy2YQt3tRK4SO7rrRC4UCjnbUo1A=' 'sha256-TtIvDMJ8K4rRze17g58BlmSRfk39JXQcitjljrHska0=' https://www.googletagmanager.com https://securepubads.g.doubleclick.net/tag/js/gpt.js https://www.googletagservices.com https://ajax.googleapis.com https://dboktu48tbzl9.cloudfront.net https://a40.usablenet.com https://js-agent.newrelic.com https://www.googleadservices.com https://*.trustarc.com https://*.yahoo.com https://*.bazaarvoice.com https://aq.flippenterprise.net https://api.mapbox.com https://bat.bing.com https://cdn.attn.tv https://cdn.browsiprod.com https://connect.facebook.net https://cdn.segment.com https://graph.facebook.com https://google-analytics.com https
strict-transport-security: max-age=15552000; includeSubDomains; preload