Is gopuff.com legit?
GoPuff.com appears to be Mostly Safe for use, backed by a strong domain age and robust technical infrastructure. However, significant concerns around transparency and legal compliance, particularly the missing privacy policy and terms of service, warrant caution.
Food & Dining average: 83/100 · based on 15 sites
Checked: April 18, 2026 at 11:56 AM UTC · Refresh
Is gopuff.com a scam? Here's what we found.
The site boasts a modern and valid SSL certificate from a reputable issuer, utilizing the latest TLS version. It's clean on Google Web Risk and has good clickjacking protection, indicating a strong baseline for security.
With a domain age of over 15 years, GoPuff has a long-established online presence. While the missing favicon is a minor branding oversight, the fundamental identity markers are solid.
The site isn't listed on any DNS blacklists, suggesting a clean reputation from a technical standpoint. Its moderate global traffic also points to a known, active entity.
This is a weak point. The lack of clear contact information and social media links on the homepage makes it difficult for users to engage or seek support, which is concerning for a consumer-facing service.
The complete absence of essential legal documents like a privacy policy and terms of service is a major issue. This is non-negotiable for a business that collects user data and processes transactions.
The technical setup is largely sound, featuring multiple name servers, proper email authentication (SPF/DMARC), and a fast page load. The HTTP 203 status is a minor technical quirk rather than a critical flaw.
Signals Detected
This site has moderate global traffic
No structured data markup found
Domain created 2010-11-21T05:26:01Z (15 years, 7 months ago)
Registered through Nom-iq Ltd. dba COM LAUDE
Expires in 216 days
DNSSEC status from WHOIS
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 61 days
Certificate issued by Google Trust Services
Connection uses TLS 1.3
Site maintains a proper sitemap with 5 indexed pages
No favicon found — unusual for an established business
Resolves to: 162.159.134.55, 162.159.133.55
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., alt3.aspmx.l.google.com., alt4.aspmx.l.google.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns2-02.azure-dns.net., ns3-02.azure-dns.org., ns4-02.azure-dns.info., ns1-02.azure-dns.com.
Website returned status 203
No obvious contact information found on homepage
No privacy policy or terms of service found
No social media links found on homepage
robots.txt has 124 directives and references a sitemap
Not found on any DNS blacklists
X-Frame-Options: SAMEORIGIN
Web server: cloudflare
No threats detected by Google Web Risk
Could not query Wayback Machine
Could not query certificate transparency logs
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.