Is doordash.com legit?
DoorDash appears to be a trusted platform with robust security and infrastructure. However, there are some minor transparency concerns due to bot protection blocking automated checks for key information like contact details and legal pages, as well as a lack of a Trustpilot profile.
Food & Dining average: 83/100 · based on 15 sites
Checked: April 27, 2026 at 2:31 PM UTC
Is doordash.com a scam? Here's what we found.
Excellent security measures are in place, including modern TLS 1.3, an SSL certificate from Google Trust Services, HSTS, Content Security Policy, and clickjacking protection. Google Web Risk confirms no threats.
The domain has been active for 12 years, demonstrating a well-established online presence. The registrar, MarkMonitor Inc., is a reputable choice for large corporations. WHOIS information appears standard and complete.
The site holds a very high Tranco Rank (#2494), indicating significant traffic and recognition. It is clean on DNS blacklists, reinforcing its positive standing. However, the inability to query Web Archive or Trustpilot means some external reputation signals couldn't be fully assessed.
Transparency is somewhat hindered by the bot protection blocking checks for contact information, legal pages, and social media presence. The absence of a Trustpilot profile also limits public review visibility for a company of this scale.
While specific legal pages couldn't be automatically verified due to bot protection, it's expected that a company of DoorDash's size would have comprehensive compliance in place. This score partly reflects the inability to confirm but also the general expectation for such a business.
The site has a solid infrastructure with DNSSEC enabled, multiple IP resolutions, robust email authentication through DMARC and Google mail servers, and fast page load times. The absence of robots.txt and a sitemap are minor issues for a site of this stature.
Signals Detected
This is a well-known, high-traffic website
No structured data markup found
Domain created 2013-06-18T19:11:18Z (12 years, 0 months ago)
Registered through MarkMonitor Inc.
Expires in 1878 days
DNSSEC status from WHOIS
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 40 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Resolves to: 2a06:98c1:310c::ac40:98e2, 2a06:98c1:310b::6812:231e, 172.64.152.226, 104.18.35.30
Mail servers: aspmx.l.google.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., aspmx3.googlemail.com., aspmx2.googlemail.com.
Domain has DMARC email authentication configured
DNS providers: ns1.doordash.com., ns2.doordash.com.
Site has a favicon but no social sharing metadata
No robots.txt file — common for small sites
No sitemap found — common for smaller sites
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
Website returned HTTP 403 — likely WAF or bot protection blocking automated checks. The site is online but restricts non-browser access.
Bot protection prevented page inspection
Bot protection prevented checking legal pages
Bot protection prevented page inspection
Could not query Wayback Machine
Not found on any DNS blacklists
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.