starbucks.com

HTML metadata

Title: Starbucks Coffee Company
Description: Explore our menu of handcrafted drinks, order ahead, sign up for Starbucks® Rewards, manage your gift card and more.
Language: en-US

Open Graph

url: https://www.starbucks.com/
title: Starbucks Coffee Company
description: Explore our menu of handcrafted drinks, order ahead, sign up for Starbucks® Rewards, manage your gift card and more.

Technology

CDN: Azure Front Door
CMS: Next.js

Analytics

Google Tag Manager

Cookie consent

TrustArc

Third-party hosts loaded (3)

cdn.optimizely.com×1
consent.trustarc.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

CSC Corporate Domains, Inc.

Created

1993-10-25

Expires

2026-10-24 158 days left

Updated

2025-10-20

Name servers

udns1.cscdns.net
udns2.cscdns.uk

DNS records live

NS

udns1.cscdns.net
udns2.cscdns.uk

MX

100 mx1.starbucks.iphmx.com
200 mx2.starbucks.iphmx.com

TXT

Show 29 TXT records

MS=ms69354212
N9PFmbSsXNDwreizyPEPncunYquA013T1N4ECj4CI/JjBauNRfAEsEdA5fcNKmjkAnNQEgV0srFZPb60mvEJGQ==
google-site-verification=1wdfJOvnvwDwsjUihr1aONTvej4_YU0aPGbPNjf6v7I
infoblox-domain-mastery=dd4538b82c0b7adfad07a4d55cb331cc55e9e067dc0263adcd80a08097eb1e819a
apple-domain-verification=qG2EDykFV67aLREd
docker-verification=87b73db4-b13b-4b12-a30f-cc4beb5142c4
facebook-domain-verification=dvhkybgmq3631p5uivpvzx0vhpe1xl
5288bb6397ee58880703a12f1db98c6c6cf25072029bc39db52da1aeb228cdf5
wrike-verification=NDAwNDE2OTo5ZTNhODcxNDRkYmYzNTliZThkNGQ3NzllZWM1ZDAyMzI4MzI0ZTVlMTYxYmVjYTMxNjAxN2I3NGYwZDk2Y2Ix
intersight=ca02378ec1bd962e0d53c242e1f8a7d59f6725e18f0cf3d7ac3380217fd93bcc
48ds1q9t73yj6g4f181j95hzrf1dqkd3
miro-verification=bb774a5c93c8685b1bacf66212124c0610e2a276
1142563
fastly-domain-delegation-3ofkfpp322-433001-2021-09-16
cloudflare_dashboard_sso=e1868c558854cbf0320ef1eaef770fcd
cursor-domain-verification-ss7a74=JPIWY1cT0fn9GX8KUliQKjFZh
mongodb-site-verification=g1q8eE7r9erqdXdv7kenwT1QqSxNNupW
google-site-verification=QFlotoY7uUKhhC9asIM9YGV0aAI3NXUqE4r1Q9tgVdc
cloudflare_dashboard_sso=03801556e33112a7107036e615aa170b
mongodb-site-verification=aMLkGghfmdo0fynB0AIPv8uwk2H4J6q7
wiz-domain-verification=d55f7d8d667639d6b585d8d5f589612b4d274b3cc251f8e59b275135b52dd0a9
hcp-domain-verification=c963a536f627ab82d56916226e669c6c17ea1ab884b1591083fd5f1e425034be
s65SXGErvGm+cplTTb33Qjt0r8uf4cYX/0KtxqAoQ/BKXVAHUgePR0WGgGwFZX07HBHz+qwYCxurZ0LXUAjxCg==
atlassian-domain-verification=fKuRngpxk5U8SqMw0FNheA958JfxbkkgY6ZH8jaLZvtKv12R3QHvXNX85OXkWaZM
MS=ms69826482
postman-domain-verification=64c246354393461dc9421c9ec8f59aac52b3bc6cbeb6081650db2f30a344d86159aed0d4229409665dd396add22cac7e58c6beceb4a3823e4cd0f1ba5069ea9b
jamf-site-verification=PTESmz_qcu8FT4u9OHJAXw
adobe-idp-site-verification=4270c7f7-047a-43a8-bfce-927adc927376
vmware-cloud-verification-12c35ecd-895f-4643-b6a2-e8d18a71621c

Email authentication strong

SPF

v=spf1 exists:%{i}.spf.starbucks.iphmx.com ip4:68.233.76.14 ip4:12.18.76.135 ip4:12.18.76.138 ip4:208.86.168.7 include:spf.protection.outlook.com include:mail.zendesk.com include:sendgrid.net -all

strict (-all)

DMARC

v=DMARC1; p=reject; sp=none; fo=1; ri=3600; rua=mailto:aggrep@starbucks.com; ruf=mailto:authfail@starbucks.com;

policy: reject (enforced) · sp=none

DKIM

s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyz1nD21hfmVSWYaIqsUaESt7jkiOWSWbDz+X2kx9F2Qh/08UdEPGo76SgYM1Bb9iCwOLbnsAZE15Yk1dZo…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqiDcGqr9Y6tPTiCwdrzFPlu5EkNqDx47JtsGGf0zz9J8Hcc9xej2zLNbKC4Lfx1LMnZRn7IsMePLymCAO…

selectors probed

Certificate (current)

DigiCert Global G3 TLS ECC SHA384 2020 CA1

from 2025-07-05 to 2026-07-08

Expires in 50 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 75/100 Checked live page: https://www.starbucks.com/

present

strict-transport-security
content-security-policy
x-content-type-options

findings

CSP uses wildcard sources
missing frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-content-type-options: nosniff
content-security-policy: default-src 'self' *.starbucks.com *.starbucks.ca; child-src 'self' *.starbucks.com *.starbucks.ca *.doubleclick.net *.optimizely.com *.trustarc.com; connect-src 'self' *.starbucks.com *.starbucks.ca https://fonts.gstatic.com *.akamaihd.net *.akstat.io *.doubleclick.net *.go-mpulse.net *.google.com *.google-analytics.com *.googletagmanager.com *.googlevideo.com *.mparticle.com *.nr-data.net *.optimizely.com *.pinterest.com *.trustarc.com *.xg4ken.com; font-src 'self' *.starbucks.com *.starbucks.ca https://fonts.googleapis.com https://fonts.gstatic.com *.trustarc.com; img-src 'self' data: *.starbucks.com *.starbucks.ca https://*.gstatic.com *.adsrvr.org *.agkn.com *.akamaihd.net *.appcast.io *.bing.com *.doubleclick.net *.facebook.com *.ggpht.com *.google.com *.google-analytics.com *.googletagmanager.com *.mparticle.com *.nr-data.net *.pinterest.com *.snapchat.com *.trustarc.com *.truste.com *.videoamp.com *.xg4ken.com *.ytimg.com; manifest-src 'self' *.starbucks.com *.starbucks.ca; med
strict-transport-security: max-age=31536000; includeSubDomains; preload