Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/doordash
Generated: Sat, 05 Sep 2026 11:16:50 GMT
Target Website: doordash.com
Overall Trust Score: 89/100 (Trusted)
doordash.com
Trusted
Scanned: Sep 5, 11:16 AMTRUST SCORE
89
CONFIDENT
Low Risk
89/100
TRUST SCORE
CONFIDENT
Low Risk
SAFETY
100/100
100/100
TRANSPARENCY
15/100
15/100
DOMAIN RISK
LowLow Tier
LowRisk
SSL SECURITY
100/100
100/100
PAYMENT RISK
NoNo Risk
NoRisk
VERDICT
Trusted
Trusted
AI Security Summary
89/100 — trusted. Long-established domain (13.2 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
No malware/phishing on feedsGood reputationHTTPS enabled
HTTPS & SSL
SecureSecure
Standard Trusted CA
Threat Status
CleanClean
No blacklists or malware
Domain Age
13.2 years13.2 years
Registered 6/18/2013
Reputation
High TrustHigh Trust
Based on 65+ verified signals
IP & Server
104.18.35.30104.18.35.30
cloudflare
Email Security
ProtectedProtected
SPF, DMARC, MX active
Performance
89 / 10089 / 100
Fast response time
Redirects
DirectDirect
No redirect hops
Top Priority RecommendationAction Needed
Site returned HTTP 403
The server is reachable but did not return a success status.
Why it matters
Addressing this signal prevents trust downgrades and potential security risks.
View Glossary GuidePositive Signals
- HTTPS is enforced
- Fast response (37ms)
- Served through Cloudflare
- 4 address record(s) resolved
- IPv6 (AAAA) available
- 2 authoritative nameservers
- Domain registered 13+ years ago
- Owner information disclosed
Warnings
- Site returned HTTP 403
- Missing Content Security Policy
- No privacy policy found
- No terms of service found
- No contact page found
- Large response served uncompressed
Critical Issues
No critical issues found
Domain passes all high-risk checks
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- June 18, 2013 (13.2 years ago)
- Last Updated
- October 29, 2025
- Registry Expiry Date
- June 18, 2031
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 13+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Content Security Policymissing: Permissions Policy
All Response Headers (13)
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
- IPv4 Addresses (A)
- 104.18.35.30, 172.64.152.226
- IPv6 Addresses (AAAA)
- 2606:4700:4402::ac40:98e2, 2a06:98c1:3107::6812:231e
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
- Authoritative Nameservers (NS)
- ns1.doordash.com, ns2.doordash.com
- TXT Records Found
- 57 TXT verification records
A Records (IPv4)
104.18.35.30172.64.152.226
TXT Verification Records
MS=ms82589317
nintex.60aff12781259a0069a20271
dropbox-domain-verification=zqgh8mdbs1rt
apple-domain-verification=gLrbxW5eiM6T0bPk
docusign=5b94c41e-39e0-479d-b682-d928d5cd0d54
docusign=b7b61054-c73b-4575-9bf4-e5099789cf05
jamf-site-verification=4Z_CCFpI4mte1xLpPooYsQ
canva-site-verification=xapq3TIEvpGoPpG8WzS9xA
sprout-social-e7a35fdd-495f-4fa9-8587-e2fcabbc9bfc
doordash-verification=FeD9LNDZ9CVngz0f5gKBShBnCBGaB6
1password-site-verification=VY26CAPZVRAZBPKX4IGPY6TWZE
openai-domain-verification=dv-e97JWK8OkYo02uWtJdSOZqAc
openai-domain-verification=dv-q0hIaFrQRwrXdDp7hQepzbMQ
giga-domain-verification-p1ztr7=CuIT44YPWGUrWyhp1oBJy0nDz
mongodb-site-verification=4LHJ15A3p4j9ITN4YqNIFIJTQgsaeFNk
mongodb-site-verification=wBJpmm8azJfXBzHCcmvXBRMbUmTGrauf
facebook-domain-verification=ke0mqxx0oqg5awcoellkzi7f7oxn2u
smartsheet-site-validation=0LF7A9ADeCotFCnhI9b9cgxKvfd1_eaE
vercel-domain-verification-4cfgre=aZyC5wafFrKA4xM533qRPcTu2
teamviewer-sso-verification=d5e4fcbdd75d447ab8484ca7743d7390
make-domain-verification=0c85a408-c83c-4dde-8dd5-184bbdcdecbd
anthropic-domain-verification-cd4gyz=e3JRR8eGnY98lbCsqnN16ntwe
ALIAS for doordash-prod-lb-1965037934.us-west-2.elb.amazonaws.com
monday-com-verification=9UNZE93XuFvo9TszK9IAFbwM8tDbUog5oqoNqwj-u5o
google-site-verification=2rcRsTslUdxw5DyvpqlVQDk9KxnUncNIvMIp74YRRsA
google-site-verification=B8pCSLSrKW8YlJmzi7Yy_dN7RJL4kDl9y-rgC6w7IpE
google-site-verification=BfQohc0cUj3zZA1BKisF3t97WFPfcn1stcvZu6o1kF4
google-site-verification=GWpsrxG0KS4wrPZn6vo6cPpWi54VuA32W0qMrGT1esM
google-site-verification=HPUl-zyMzA0yQq-wMPBFfmDyagaxMi3367A0FSWpY7U
google-site-verification=IxltO7NjEjSGULS-Txeg7Qu2T6qohZv8zHEgJ8I3Rl0
google-site-verification=UcYKd6s6kOERFeXTToUDRNxtKRG8HfH_0xMGdQyFMWg
google-site-verification=ZIL_hda6Iiuc38NCbYP_YNbWuTLlaNna2jKulvPDkfU
google-site-verification=_nhAl3u-62bMXOhq8kHCRalYgz_jjgCvNuE9j_3nVDw
google-site-verification=a-Jdw2m-MOpK7B8CMb_J_XbJSXSbNIa_gF2t-LaJZrc
google-site-verification=oinRvdblMV4Ncm6r26vumPZi8wTqvV3myYzProiPB1M
google-site-verification=pE5HdbYNwhG6Ajwm--kYjO-HSojW7qY90GaxIgsLq0s
google-site-verification=rdKNCS9n0YSMdrp6GFqZcA882UrLU3FWNHqMzHTaHUk
apple-domain-verification=auLx8cBOBvSGINCMixgMgEEQ25ZHSoil-aoBhd31nac
cloudbees-domain-verification=465857a9eee140720ace1308ce419d23b24d6062
liveramp-site-verification=5wszPKkOhBCtvJ7UeYngVL_HJT8TLIidFz_ZDTuLfm4
neat-pulse-domain-verification-njM2wKN=cab352c6-5874-4fd8-b6e0-c440953cb19c
hubspot-domain-verification=ZGYzNGFkYmUtZWFkMi00MzJmLWI2ZTQtZWZhZmI3OWNmN2Ez
pardot1074543=d97a51eb532ec8bc893efc57d90a4af2cc95d3b1c2db1d007f4c9ca082bf5a81
stripe-verification=0601d7fe338b4c47028041de35c36823eab7dfa6da541d7b3f922a4296d4b3f8
stripe-verification=2dfbad05d1e9a184ee421836e03cc4a8275b0043a70e9aa3c499136141b07444
stripe-verification=36113287339DD6525555BE006FE320333C49B5E5E8CEA9707BB109A45E2D50DB
stripe-verification=4AAEF79B22A408ECE2464053B0BCFCB4A755D81588A43756DBD4088C6D41DC86
stripe-verification=80559cf6e421e37c6322149535e5ee37d6683aacf844c3a9d3c41d9783e1ca63
stripe-verification=972a79921adf9a3d42e966695a8abe1a145b5eb4d7c2373d05ba7a1bbd535fb4
stripe-verification=97ac764ba6c3b23b21b7fa92d59e7c456481fb088387d487de140a0e8ec2fc16
stripe-verification=99e9a754dd65028a2a92d1bbfc20d20c58caec59c2202c21bee836b97ff00f9c
stripe-verification=AFA5C2C820879CC0428BF81B398AD7BA733E43246B112B0AA1B33960AA6F3BB5
stripe-verification=fc0a51eed89484d07c775ff7cc99a8267651b02c0ce4c7b23bc0940e6f04fbe1
adobe-idp-site-verification=4c435e2e07ad31e38e2b8eef37ddd3422b6eaf6decb8746a240258dd8a2f96e9
atlassian-domain-verification=WynfBPojkTHuEFbQh1YiVrhBd+YgTvHLyK7+H7ZbQojdYSieNeHVzWxKFA5kU6RB
atlassian-domain-verification=nNhx5JpLiPH2KCXSAAYeMsQTjODdBCbNf5J0GQ9SK09LhSOZeu2J0t9HF0DtiQG/
v=spf1 include:doordash.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
4 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
2 authoritative nameservers
+2
- Registrable Domain
- doordash.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- ns1.doordash.com, ns2.doordash.com
- Registration Lifecycle
- Registered: 2013 → Expires: 2031
Nameservers (NS)
ns1.doordash.comns2.doordash.com
Domain registered 13+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
- SPF Record
- v=spf1 include:doordash.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google, s1, s2)
+3
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Not checked
- Root Domain Label
- doordash
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- DoorDash
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1.0
- Generator Software
- —
1 technologies detected
Cloudflare
Mobile viewport configured
+2
Missing meta description
-2
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 37 ms
- Payload Body Size
- 271.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Evaluation
89/100 — trusted. Long-established domain (13.2 years old), clean threat reputation, no impersonation patterns. Verdict driven by: no privacy policy found; no terms of service found; no contact page found — worth extra caution before trusting.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 159 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 104.18.35.30
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://doordash.com/
- Redirect Hop Count
- 0 hops
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (37ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
- Certificate Authority (Issuer)
- Standard Trusted CA
- Subject Common Name (CN)
- doordash.com
- Validity Period
- 60 days remaining (Expires: 2026-11-04T11:16:54.427Z)
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- 1 certs recorded
Subject Alternative Names (Sample)
doordash.com
HTTPS encryption active & verified
Live TLS connection established successfully on port 443 with valid cipher suites.
+8
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Contact Emails
- favicon@2x.ico
- Published Phone Numbers
- 422461195, 0 0 260 183, 6.68285 106.504, 78.9341 88.5085, 0.00135501, 104.933 108.364
No privacy policy found
Legally required in most jurisdictions. Its absence is a real red flag.
-4
No terms of service found
Reputable sites usually publish a terms of service.
-4
No contact page found
Reputable sites usually publish a contact page.
-4
No about page found
Reputable sites usually publish a about page.
-3
No refund/return policy found
Reputable sites usually publish a refund/return policy.
-3
No cookie policy found
Reputable sites usually publish a cookie policy.
-2
Contact email published
+2
Phone number published
+2
- Robots.txt Directives
- Not Found
- Sitemaps Declared
- None in robots.txt
- Disallow Rules Count
- 0 rules
No findings.
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
39
This scan
Sources Checked
18
Live security feeds
Scan Duration
3.60s
Ultra-fast
Last Scan
9/5/2026
Live timestamp
Overall Risk
Low Risk