starbucks

HackerOneView on HackerOne

RawAI Enhanced

10

In Scope

4

Out of Scope

In-Scope Assets (10)

Asset	Category	Bounty	Quick Links
Other assets	OTHER	No	-
Subdomain Takeover (SDTO)	OTHER	Yes	-
app.starbucks.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
com.starbucks.mobilecard	ANDROID	Yes	Play Store APKPure APKMirror
com.starbucks.mystarbucks	IOS	Yes	-
openapi.starbucks.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
secureui.starbucks.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
www.starbucks.ca	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
www.starbucks.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa
www.starbucksreserve.com	URL	Yes	crt.sh Google Shodan SecurityTrails Wayback DNSdumpster VirusTotal AlienVault OTX GitHub Fofa

Out-of-Scope Assets (4)

Asset	Category	Bounty
Teavana	OTHER	No
apply.starbucks.com	URL	No
careers.starbucks.com	URL	No
lsstar.starbucks.com	URL	No

Scope Changes (38)

Feb 25, 2026

Change	Asset	Category	Scope	Time
Added	secureui.starbucks.com	URL	In Scope	19:09
Added	apply.starbucks.com	URL	Out of Scope	19:09
Added	careers.starbucks.com	URL	Out of Scope	19:09
Added	teavana	OTHER	Out of Scope	19:09
Added	com.starbucks.mystarbucks	IOS	In Scope	19:09
Added	www.starbucksreserve.com	URL	In Scope	19:09
Added	www.starbucks.ca	URL	In Scope	19:09
Added	www.starbucks.com	URL	In Scope	19:09
Added	app.starbucks.com	URL	In Scope	19:09
Added	subdomain takeover (sdto)	OTHER	In Scope	19:09
Added	openapi.starbucks.com	URL	In Scope	19:09
Added	lsstar.starbucks.com	URL	Out of Scope	19:09
Added	other assets	OTHER	In Scope	19:09
Added	com.starbucks.mobilecard	ANDROID	In Scope	19:09

Feb 22, 2026

Change	Asset	Category	Scope	Time
Added	apply.starbucks.com	URL	Out of Scope	00:40
Added	lsstar.starbucks.com	URL	Out of Scope	00:40
Added	teavana	OTHER	Out of Scope	00:40
Added	other assets	OTHER	In Scope	00:40
Added	com.starbucks.mystarbucks	IOS	In Scope	00:40
Added	com.starbucks.mobilecard	ANDROID	In Scope	00:40
Added	www.starbucks.ca	URL	In Scope	00:40
Added	www.starbucks.com	URL	In Scope	00:40
Added	openapi.starbucks.com	URL	In Scope	00:40
Added	careers.starbucks.com	URL	Out of Scope	00:40
Added	www.starbucksreserve.com	URL	In Scope	00:40
Added	app.starbucks.com	URL	In Scope	00:40
Added	subdomain takeover (sdto)	OTHER	In Scope	00:40
Added	secureui.starbucks.com	URL	In Scope	00:40

Feb 21, 2026

Change	Asset	Category	Scope	Time
Removed	secureui.starbucks.com	URL	In Scope	21:38
Removed	com.starbucks.mystarbucks	IOS	In Scope	21:38
Removed	com.starbucks.mobilecard	ANDROID	In Scope	21:38
Removed	www.starbucksreserve.com	URL	In Scope	21:38
Removed	www.starbucks.ca	URL	In Scope	21:38
Removed	www.starbucks.com	URL	In Scope	21:38
Removed	app.starbucks.com	URL	In Scope	21:38
Removed	subdomain takeover (sdto)	OTHER	In Scope	21:38
Removed	openapi.starbucks.com	URL	In Scope	21:38
Added	other assets	OTHER	In Scope	19:11