Is grubhub.com legit?
Grubhub.com appears to be a legitimate and trustworthy platform for food delivery, backed by a long-standing domain and robust technical security. While it could improve user accessibility by making contact and social media information more prominent, these are minor concerns for a well-established service.
Food & Dining average: 83/100 · based on 15 sites
Checked: April 18, 2026 at 1:08 PM UTC · Refresh
Is grubhub.com a scam? Here's what we found.
Grubhub demonstrates strong security practices with modern TLS 1.3 encryption, a valid SSL certificate from a reputable issuer, and protection against common web vulnerabilities like clickjacking. Google Web Risk also finds no threats, indicating a safe browsing environment.
The domain's age of over 23 years clearly establishes a long-term presence and credibility. While the registrar details are standard, the history itself speaks volumes about Grubhub's established identity in the market.
Grubhub's high Tranco rank confirms its status as a widely recognized and frequently visited website. Clean DNS blacklists further reassure users that the site is not associated with malicious activities, aligning with what one would expect from a major player in its industry.
While legal pages are present, the notable absence of readily available contact information and social media links on the homepage is a slight hurdle for users seeking direct communication or support. For a service relying on real-time interactions, this could be an area for improvement.
The presence of both a privacy policy and terms of service pages indicates Grubhub meets essential legal and ethical standards for data handling and user agreements, which is crucial for a platform dealing with personal information and transactions.
The robust infrastructure, including a fast page load time, present robots.txt, and comprehensive email authentication (SPF and DMARC), signals a professional and well-maintained backend. This secure setup helps ensure reliable service delivery and email communication.
Signals Detected
No structured data markup found
This is a well-known, high-traffic website
This business has no Trustpilot presence — not unusual for smaller or newer companies
Domain created 2002-11-06T15:52:27Z (23 years, 9 months ago)
Registered through GoDaddy Corporate Domains, LLC
Expires in 1298 days
DNSSEC status from WHOIS
Valid certificate, expires in 219 days
Certificate issued by GlobalSign nv-sa
Connection uses TLS 1.3
Site has a favicon but no social sharing metadata
robots.txt has 18 directives
Website is live and responding
No obvious contact information found on homepage
Website has both privacy policy and terms of service pages
No social media links found on homepage
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: SAMEORIGIN
Web server: openresty
No threats detected by Google Web Risk
Not found on any DNS blacklists
Resolves to: 151.101.1.160
Mail servers: aspmx.l.google.com., aspmx4.googlemail.com., alt2.aspmx.l.google.com., alt1.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com., aspmx5.googlemail.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns03.5naans.com., ns04.5naans.com., dns1.p03.nsone.net., dns2.p03.nsone.net., dns3.p03.nsone.net., dns4.p03.nsone.net., ns01.5naans.com., ns02.5naans.com.
No sitemap found — common for smaller sites
crt.sh returned status 502
Could not query Wayback Machine
Fast page load
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.