Is postmates.com legit?
Postmates appears to be a trusted platform with a strong online presence and good security practices. While there are a couple of minor warnings regarding external scripts and discount practices, the overall impression is positive with robust infrastructure and clear identity.
Food & Dining average: 83/100 · based on 15 sites
Checked: April 27, 2026 at 8:21 PM UTC
Is postmates.com a scam? Here's what we found.
The site uses a valid SSL certificate with modern TLS and has a Content Security Policy, indicating a good baseline for security. However, the high number of external scripts presents a possible, albeit moderate, vulnerability concern.
Postmates has a well-established domain with significant age and is registered through a reputable registrar. This contributes to a strong sense of legitimacy and stability for the platform.
The site has moderate global traffic and appears clean on Google Web Risk and DNS blacklists, suggesting a good reputation. However, the presence of potentially unrealistic discounts is a slight concern that could tarnish consumer trust for some.
Postmates provides clear contact information, complete branding, and a presence on multiple social media platforms, showing good transparency about its operations and how to reach them.
The site has both a privacy policy and terms of service, which are essential for legal compliance and consumer trust. The presence of robots.txt also indicates good webmaster practices.
The robust DNS configuration, strong email authentication (SPF/DMARC), and fast page load time indicate a well-maintained infrastructure. The lack of DNSSEC, while not critical, is a minor area for improvement.
Signals Detected
This site has moderate global traffic
Site uses structured data identifying itself as: WebSite
Site advertises discounts over 70% — common in fraudulent e-commerce
Excessive number of external scripts — may indicate malicious injection
Domain created 2011-04-12T19:11:17Z (15 years, 3 months ago)
Registered through MarkMonitor Inc.
Expires in 349 days
DNSSEC status from WHOIS
This business has no Trustpilot presence — not unusual for smaller or newer companies
Resolves to: 69.48.218.1
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., aspmx2.googlemail.com., aspmx3.googlemail.com., aspmx5.googlemail.com., aspmx4.googlemail.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: edns126.ultradns.biz., edns126.ultradns.com., edns126.ultradns.net., edns126.ultradns.org.
Valid certificate, expires in 295 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
crt.sh returned status 429
Site has custom branding and social media metadata
robots.txt has 2257 directives
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
X-Frame-Options: ALLOW-FROM https://www.nimblerx.com
Web server: cloudflare
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Not found on any DNS blacklists
Could not query Wayback Machine
Website is live and responding
Website appears to have contact information
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Fast page load
Embed This Badge
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.