Is yelp.com legit?
Yelp.com appears to be a highly trusted platform for reviews and business information. While a few warnings about excessive scripts and hidden content emerged, its long operational history, robust infrastructure, and strong security measures provide a solid foundation for user confidence.
Food & Dining average: 83/100 · based on 15 sites
Checked: April 18, 2026 at 1:08 PM UTC · Refresh
Is yelp.com a scam? Here's what we found.
The security setup is generally strong, featuring modern TLS 1.3, a valid SSL certificate from a reputable issuer, and robust policies like HSTS and CSP. However, the high number of external scripts is a notable concern, as it could introduce vulnerabilities.
Yelp's identity is exceptionally clear and well-established. Operating for over 22 years and registered with a major corporate registrar like MarkMonitor, there's no question about the longevity or authenticity of this domain.
With a high Tranco rank (globally top 1000) and a clean record on DNS blacklists, Yelp enjoys a very strong reputation as an established and widely recognized platform. Its extensive history reinforces its standing.
While the site has clear branding and a strong social media presence, the lack of readily visible contact information on the homepage is a minor drawback for a service that facilitates communication between consumers and businesses. The excessive hidden content raises some questions about content presentation.
Yelp provides essential legal pages like Privacy Policy and Terms of Service, which is critical for a platform handling user data and reviews. The sheer volume of hidden elements, while not necessarily malicious, is an unusual finding that could hint at practices impacting compliance with ethical transparency standards.
The site boasts a robust infrastructure, including comprehensive email authentication (SPF, DMARC), stable DNS resolution, and selective access through robots.txt. This demonstrates a well-managed and professional backend.
Signals Detected
This is one of the most visited websites globally
Site uses structured data identifying itself as: Organization, WebSite
This business has no Trustpilot presence — not unusual for smaller or newer companies
Valid certificate, expires in 231 days
Certificate issued by DigiCert Inc
Connection uses TLS 1.3
Domain created 2003-12-12T21:24:56Z (22 years, 8 months ago)
Registered through MarkMonitor Inc.
Expires in 603 days
DNSSEC status from WHOIS
Excessive number of external scripts — may indicate malicious injection
Excessive hidden content found — may indicate cloaking or deceptive content
Resolves to: 146.75.120.116
Mail servers: aspmx.l.google.com., alt1.aspmx.l.google.com., alt2.aspmx.l.google.com., alt3.aspmx.l.google.com., alt4.aspmx.l.google.com.
Domain has SPF email authentication configured
Domain has DMARC email authentication configured
DNS providers: ns02.midtowndoornailns.com., ns03.midtowndoornailns.com., ns04.midtowndoornailns.com., dns1.p06.nsone.net., dns2.p06.nsone.net., dns3.p06.nsone.net., dns4.p06.nsone.net., ns01.midtowndoornailns.com.
Site has custom branding and social media metadata
Blocks unknown crawlers by default but grants access to specific bots (142 directives)
Not found on any DNS blacklists
Site enforces HTTPS via HSTS
Site has Content Security Policy configured
Web server: envoy
No threats detected by Google Web Risk
No sitemap found — common for smaller sites
Website is live and responding
No obvious contact information found on homepage
Website has both privacy policy and terms of service pages
Website links to multiple social media platforms
Could not query Wayback Machine
Could not query certificate transparency logs
Average page load time
Stay Safe Online
Good habits to protect yourself, no matter the scan result.
Never reuse passwords across sites.
Add a second layer of security to your accounts.
Always verify unfamiliar stores before entering payment info.