Scam Lookup
Automated Website Trust & Risk Intelligence Report
https://scamlookup.net/website/doordash.com
Generated: Fri, 13 Nov 2026 14:56:16 GMT
Target Website: doordash.com
Overall Trust Score: 93/100 (Trusted)
Is doordash.com safe?
Very Likely Safe
No major red flags found. This looks like a legitimate, established website.
Checked Nov 13, 2026
93
Trust score
Why: Main reasons: domain registered 13+ years ago; not flagged by Google Safe Browsing; no impersonation patterns detected. Minor issues: site returned HTTP 403; missing Content Security Policy.
Identity & Age100/100
Impersonation Risk100/100
Red Flags100/100
Transparency70/100
Security100/100
Email100/100
Positive highlights
- Domain registered 13+ years agoLong-established domains are far less likely to be disposable scams.
- Not flagged by Google Safe BrowsingNo malware, phishing, or unwanted-software match in Google's live threat database.
- HTTPS is enforcedAll redirects stayed on HTTPS. Traffic is encrypted end-to-end.
- HTTPS works with a valid certificateA secure connection was made on port 443. Certificate log details were unavailable at scan time.
- No impersonation patterns detectedDomain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
- Not listed on URLhaus malware blocklist
- Fast response (12ms)
- Not present in PhishStats phishing feed
- HSTS is setTells browsers to only use HTTPS for this domain.
- DMARC published (reject)
Negative highlights
- Site returned HTTP 403The server is reachable but did not return a success status.
- Missing Content Security PolicyRestricts which scripts and resources the page can load.
- Large response served uncompressedEnable gzip or brotli at the edge to cut transfer size dramatically.
Note: Registered via MarkMonitor Inc..
Note: 1 technologies detected. Cloudflare
Note: Policy pages could not be checked. The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Key facts about doordash.com
- Website
- doordash.com
- Popularity
- Not checked
- Domain created
- Jun 18, 2013 (13.4 years old)
- Domain expires
- Jun 18, 2031
- Registrar
- MarkMonitor Inc.
- Owner details
- Public in WHOIS
- IP address
- 172.64.152.226
- Hosting / CDN
- Cloudflare
- SSL certificate
- HTTPS works (certificate details unavailable)
- Email security
- SPF ✓ · DMARC ✓ (reject)
- Threat blocklists
- Not listed (clean)
- Technology
- Cloudflare
Summary
93/100 — trusted. Long-established domain (13.4 years old), clean threat reputation, no impersonation patterns.
No malware/phishing on feedsGood reputationHTTPS enabled
Full technical report
Domain Information
Registration timeline, age calculation, registrar details, and ICANN status.
Verified
- Registrar Name
- MarkMonitor Inc.
- Creation Date
- June 18, 2013 (13.4 years ago)
- Last Updated
- October 29, 2025
- Registry Expiry Date
- June 18, 2031
- WHOIS Privacy Protection
- Publicly Visible
- Domain Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
ICANN Status Badges
client delete prohibitedclient transfer prohibitedclient update prohibitedserver delete prohibitedserver transfer prohibitedserver update prohibited
Domain registered 13+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
HTTP Headers & Security
Full HTTP response headers, HSTS, Content Security Policy (CSP), and security baselines.
Good
Security Header Baseline
Strict-Transport-SecurityMissing
Content-Security-PolicyMissing
X-Frame-Options Present
X-Content-Type-Options Present
Referrer-PolicyMissing
Permissions-PolicyMissing
Recommended Missing Headers
missing: Content Security Policymissing: Permissions Policy
All Response Headers (13)
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-ray: a59e9f498efbb86e-CMH connection: close content-type: text/html; charset=UTF-8 date: Fri, 13 Nov 2026 14:56:16 GMT expires: Thu, 01 Jan 1970 00:00:01 GMT referrer-policy: same-origin server: cloudflare set-cookie: __cf_bm=PrGRdb.EjDQLCTQ1_zCNWgAA8LaNgb8yrQskMrom5F0-1794581776.8896916-1.0.1.1-np99fsy2ZBukPB4JF_FGOPNFjD57syjBMik.e91dFO1Pwi7bzKGef6A2TTs_DvxjexlESggrfMQxcbUUjw0zPXP8idacr58w.vRYZDo8rWRVAX_kjLzLSXrDDgtphjgC; HttpOnly; SameSite=None; Partitioned; Secure; Path=/; Domain=doordash.com; Expires=Fri, 13 Nov 2026 15:26:16 GMT strict-transport-security: max-age=31536000; includeSubDomains; preload transfer-encoding: chunked x-content-type-options: nosniff x-frame-options: SAMEORIGIN
HSTS is set
Tells browsers to only use HTTPS for this domain.
+6
Missing Content Security Policy
Restricts which scripts and resources the page can load.
-4
X-Frame-Options is set
Prevents clickjacking by disallowing framing.
+3
X-Content-Type-Options is set
Blocks MIME-sniffing browser attacks.
+2
Referrer Policy is set
Controls what referrer information is sent with requests.
+2
Missing Permissions Policy
Restricts access to powerful browser features (camera, mic, etc.).
-2
DNS Records
Encrypted DoH resolution: A, AAAA, MX mail servers, authoritative NS, and TXT verification.
Resolved
- IPv4 Addresses (A)
- 172.64.152.226, 104.18.35.30
- IPv6 Addresses (AAAA)
- 2606:4700:4402::ac40:98e2, 2a06:98c1:3107::6812:231e
- Mail Servers (MX)
- aspmx.l.google.com (Priority: 1), alt1.aspmx.l.google.com (Priority: 5), alt2.aspmx.l.google.com (Priority: 5), aspmx2.googlemail.com (Priority: 10), aspmx3.googlemail.com (Priority: 10)
- Authoritative Nameservers (NS)
- ns1.doordash.com, ns2.doordash.com
- TXT Records Found
- 64 TXT verification records
A Records (IPv4)
172.64.152.226104.18.35.30
TXT Verification Records
MS=ms82589317
nintex.60aff12781259a0069a20271
CKO=cli_l63ypkrsaqsu3hka3mpgvjdfi4
dropbox-domain-verification=zqgh8mdbs1rt
apple-domain-verification=gLrbxW5eiM6T0bPk
verification_token=6ybZ8f0yH3FoqpcUADLnh512r
docusign=5b94c41e-39e0-479d-b682-d928d5cd0d54
docusign=b7b61054-c73b-4575-9bf4-e5099789cf05
jamf-site-verification=4Z_CCFpI4mte1xLpPooYsQ
canva-site-verification=xapq3TIEvpGoPpG8WzS9xA
sprout-social-e7a35fdd-495f-4fa9-8587-e2fcabbc9bfc
doordash-verification=FeD9LNDZ9CVngz0f5gKBShBnCBGaB6
1password-site-verification=VY26CAPZVRAZBPKX4IGPY6TWZE
openai-domain-verification=dv-e97JWK8OkYo02uWtJdSOZqAc
openai-domain-verification=dv-q0hIaFrQRwrXdDp7hQepzbMQ
giga-domain-verification-p1ztr7=CuIT44YPWGUrWyhp1oBJy0nDz
mongodb-site-verification=4LHJ15A3p4j9ITN4YqNIFIJTQgsaeFNk
mongodb-site-verification=wBJpmm8azJfXBzHCcmvXBRMbUmTGrauf
convey-domain-verification-whs9nc=FbuyUzD2oI8T2OuFEnAzQSCzu
facebook-domain-verification=ke0mqxx0oqg5awcoellkzi7f7oxn2u
mixpanel-domain-verify=1775a558-e864-4cb8-88c8-65d4dc91a6d8
smartsheet-site-validation=0LF7A9ADeCotFCnhI9b9cgxKvfd1_eaE
vercel-domain-verification-4cfgre=aZyC5wafFrKA4xM533qRPcTu2
teamviewer-sso-verification=d5e4fcbdd75d447ab8484ca7743d7390
make-domain-verification=0c85a408-c83c-4dde-8dd5-184bbdcdecbd
anthropic-domain-verification-cd4gyz=e3JRR8eGnY98lbCsqnN16ntwe
ALIAS for doordash-prod-lb-1965037934.us-west-2.elb.amazonaws.com
state-affairs-domain-verification-6y6v37=rsr5ReJ7dJaYg43c51sk9mEjE
monday-com-verification=9UNZE93XuFvo9TszK9IAFbwM8tDbUog5oqoNqwj-u5o
google-site-verification=2rcRsTslUdxw5DyvpqlVQDk9KxnUncNIvMIp74YRRsA
google-site-verification=B8pCSLSrKW8YlJmzi7Yy_dN7RJL4kDl9y-rgC6w7IpE
google-site-verification=BfQohc0cUj3zZA1BKisF3t97WFPfcn1stcvZu6o1kF4
google-site-verification=GWpsrxG0KS4wrPZn6vo6cPpWi54VuA32W0qMrGT1esM
google-site-verification=HPUl-zyMzA0yQq-wMPBFfmDyagaxMi3367A0FSWpY7U
google-site-verification=IxltO7NjEjSGULS-Txeg7Qu2T6qohZv8zHEgJ8I3Rl0
google-site-verification=UcYKd6s6kOERFeXTToUDRNxtKRG8HfH_0xMGdQyFMWg
google-site-verification=ZIL_hda6Iiuc38NCbYP_YNbWuTLlaNna2jKulvPDkfU
google-site-verification=_nhAl3u-62bMXOhq8kHCRalYgz_jjgCvNuE9j_3nVDw
google-site-verification=a-Jdw2m-MOpK7B8CMb_J_XbJSXSbNIa_gF2t-LaJZrc
google-site-verification=oinRvdblMV4Ncm6r26vumPZi8wTqvV3myYzProiPB1M
google-site-verification=pE5HdbYNwhG6Ajwm--kYjO-HSojW7qY90GaxIgsLq0s
google-site-verification=rdKNCS9n0YSMdrp6GFqZcA882UrLU3FWNHqMzHTaHUk
google-site-verification=tq7ETwu0VHF69NUkJI8HQ8XESVwoKDuxPz7gxz5hBj4
apple-domain-verification=auLx8cBOBvSGINCMixgMgEEQ25ZHSoil-aoBhd31nac
cloudbees-domain-verification=465857a9eee140720ace1308ce419d23b24d6062
liveramp-site-verification=5wszPKkOhBCtvJ7UeYngVL_HJT8TLIidFz_ZDTuLfm4
neat-pulse-domain-verification-njM2wKN=cab352c6-5874-4fd8-b6e0-c440953cb19c
hubspot-domain-verification=ZGYzNGFkYmUtZWFkMi00MzJmLWI2ZTQtZWZhZmI3OWNmN2Ez
pardot1074543=d97a51eb532ec8bc893efc57d90a4af2cc95d3b1c2db1d007f4c9ca082bf5a81
stripe-verification=0601d7fe338b4c47028041de35c36823eab7dfa6da541d7b3f922a4296d4b3f8
stripe-verification=2dfbad05d1e9a184ee421836e03cc4a8275b0043a70e9aa3c499136141b07444
stripe-verification=36113287339DD6525555BE006FE320333C49B5E5E8CEA9707BB109A45E2D50DB
stripe-verification=4AAEF79B22A408ECE2464053B0BCFCB4A755D81588A43756DBD4088C6D41DC86
stripe-verification=80559cf6e421e37c6322149535e5ee37d6683aacf844c3a9d3c41d9783e1ca63
stripe-verification=972a79921adf9a3d42e966695a8abe1a145b5eb4d7c2373d05ba7a1bbd535fb4
stripe-verification=97ac764ba6c3b23b21b7fa92d59e7c456481fb088387d487de140a0e8ec2fc16
stripe-verification=99e9a754dd65028a2a92d1bbfc20d20c58caec59c2202c21bee836b97ff00f9c
stripe-verification=AFA5C2C820879CC0428BF81B398AD7BA733E43246B112B0AA1B33960AA6F3BB5
stripe-verification=fc0a51eed89484d07c775ff7cc99a8267651b02c0ce4c7b23bc0940e6f04fbe1
wiz-domain-verification=a33b0c33b75178dff9857e0245ebfbe24b57a9043184e68597b0d6649293199d
adobe-idp-site-verification=4c435e2e07ad31e38e2b8eef37ddd3422b6eaf6decb8746a240258dd8a2f96e9
atlassian-domain-verification=WynfBPojkTHuEFbQh1YiVrhBd+YgTvHLyK7+H7ZbQojdYSieNeHVzWxKFA5kU6RB
atlassian-domain-verification=nNhx5JpLiPH2KCXSAAYeMsQTjODdBCbNf5J0GQ9SK09LhSOZeu2J0t9HF0DtiQG/
v=spf1 include:doordash.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
4 address record(s) resolved
+4
IPv6 (AAAA) available
Modern dual-stack setup.
+2
2 authoritative nameservers
+2
WHOIS & Identity Lookup
Domain ownership status, registry lifecycle, nameservers, and privacy redaction.
Found
- Registrable Domain
- doordash.com
- Registrar Organization
- MarkMonitor Inc.
- WHOIS Privacy Status
- Public Registration Data
- Registry Status Codes
- client delete prohibited, client transfer prohibited, client update prohibited, server delete prohibited, server transfer prohibited, server update prohibited
- Delegated Authoritative Nameservers
- ns1.doordash.com, ns2.doordash.com
- Registration Lifecycle
- Registered: 2013 → Expires: 2031
Nameservers (NS)
ns1.doordash.comns2.doordash.com
Domain registered 13+ years ago
Long-established domains are far less likely to be disposable scams.
+15
Registered via MarkMonitor Inc.
Owner information disclosed
The domain publishes registrant contact info — a small positive transparency signal.
+2
Email Security & Deliverability
SPF record validation, DMARC policy enforcement, DKIM selectors, and MX reputation.
Protected
- SPF Record
- v=spf1 include:doordash.com._nspf.vali.email include:%{i}._ip.%{h}._ehlo.%{d}._spf.vali.email ~all
- DMARC Policy Mode
- Policy: REJECT
- DMARC Raw Record
- v=DMARC1; p=reject; rua=mailto:dmarc_agg@vali.email
- DKIM Selectors Detected
- google, s1, s2
Email Protection Summary: This domain has strong email authentication configured to prevent spammers from sending emails impersonating this brand.
SPF record published
+5
DMARC published (reject)
+6
DKIM configured (google, s1, s2)
+3
Threat Intelligence & Blocklists
Multi-source malware feeds (URLhaus), phishing checks (PhishStats, Safe Browsing), and typosquats.
Clean
URLhaus Malware
Clean / Not Listed
PhishStats Feed
Clean / Not Listed
Google Safe Browsing
Clean / Verified
- Root Domain Label
- doordash
- Top-Level Domain (TLD)
- .com (Standard TLD)
- Punycode Obfuscation
- No (Standard ASCII)
- Homoglyph / Lookalike Script
- No mixed scripts
- Brand Match Analysis
- No recognized brand impersonation
- Typosquatting Risk
- Clean
No impersonation patterns detected
Domain doesn't look like a typosquat, doesn't embed a well-known brand, and uses ASCII characters.
+8
Technology Stack & Metadata
Detected CMS, JavaScript frameworks, analytics tags, CDN providers, and page metadata.
Detected
Detected Technologies by Category
cdn
Cloudflare
Page Metadata & Fingerprint
- HTML Title
- DoorDash
- Meta Description
- —
- Document Language
- en
- Character Encoding
- utf-8
- Viewport Setting
- width=device-width, initial-scale=1.0
- Generator Software
- —
1 technologies detected
Cloudflare
Mobile viewport configured
+2
Page Performance & Compression
Server response time, content payload size, Brotli/Gzip compression, and caching rules.
12ms
Items to Fix & Optimize
Text compression (Brotli/Gzip)
MUCH NEEDEDEnable on server or CDN
Modern image formats (WebP/AVIF/SVG)
OPTIONALConvert heavy images to WebP/AVIF
Protocol
HTTP/2
Binary framing, multiplexed
Compression
NONE
No compression detected
Optimization Signals (From Detectable Headers & Assets)
Image Formats
Legacy / Unchecked
Transfer
Uncompressed
Transport
HTTP/2
These are server-side signals. Actual Core Web Vitals (LCP, INP, CLS) require real-user measurement via PageSpeed Insights.
Detected Asset & Image Formats
WebPAVIFSVGJPEGPNG
- HTTP Response Time
- 12 ms
- Payload Body Size
- 271.5 KB
- Compression Status
- Uncompressed
- Cache Directives
- private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Large response served uncompressed
Enable gzip or brotli at the edge to cut transfer size dramatically.
-3
AI Content Safety & Red Flags
High-pressure language, payment gateway safety, disposable domain analysis, and deceptive tactics.
Safe
AI Content Evaluation
93/100 — trusted. Long-established domain (13.4 years old), clean threat reputation, no impersonation patterns. Main reasons: domain registered 13+ years ago; not flagged by Google Safe Browsing; no impersonation patterns detected. Minor issues: site returned HTTP 403; missing Content Security Policy.
- Payment Red Flags
- None (No suspicious payment requests)
- High-Pressure Language
- None (No artificial urgency detected)
- Disposable Domain Risk
- No (Established infrastructure)
- Text Scanned Depth
- 159 characters verified
No scam-correlated language found on the home page
No crypto-only / gift-card / wire-only payment demands, and no obvious urgency tactics.
+6
Server & Hosting Infrastructure
Primary IP address, web server software, CDN edge network, and redirect hop chain.
cloudflare
- Primary Web Server
- cloudflare
- CDN / Cloud Provider
- Cloudflare
- Primary IP Address
- 172.64.152.226
- HTTP Status Code
- 403 OK
- Final Landing Destination
- https://doordash.com/
- Redirect Hop Count
- 0 hops
Site returned HTTP 403
The server is reachable but did not return a success status.
-6
HTTPS is enforced
All redirects stayed on HTTPS. Traffic is encrypted end-to-end.
+10
Fast response (12ms)
+6
Served through Cloudflare
Sites behind a major CDN benefit from DDoS protection and edge caching.
+4
SSL / TLS Certificate
Active Certificate Authority, Common Name, validity period, expiration countdown, and SANs.
Secure
- Certificate Authority (Issuer)
- Not available (certificate logs did not respond)
- Subject Common Name (CN)
- —
- Validity Period
- Not available
- Subject Alternative Names (SANs)
- 1 domain protected
- Certificates Logged (CT)
- Verified in live TLS
Subject Alternative Names (Sample)
doordash.com
HTTPS works with a valid certificate
A secure connection was made on port 443. Certificate log details were unavailable at scan time.
+8
Content & Transparency Policies
Linked privacy policy, terms of service, about page, social channels, and published contacts.
Warning
Key Legal & Transparency Pages
privacy PageNot linked
terms PageNot linked
contact PageNot linked
about PageNot linked
refund PageNot linked
shipping PageNot linked
cookies PageNot linked
- Published Contact Emails
- favicon@2x.ico
- Published Phone Numbers
- 422461195, 0 0 260 183, 6.68285 106.504, 78.9341 88.5085, 0.00135501, 104.933 108.364
Policy pages could not be checked
The site showed our scanner a bot-check or short page, so privacy, terms and contact pages were not verified. This is common for large sites and is not counted against them.
Robots.txt & Sitemap Discoverability
Search engine crawler directives, indexability, and declared XML sitemaps.
Missing
- Robots.txt Directives
- Not Found
- Sitemaps Declared
- None in robots.txt
- Disallow Rules Count
- 0 rules
No findings.
Export & Share Intelligence
Download the complete official PDF verification report (all sections and technical signals expanded), or export raw JSON telemetry.
Scan Engine Performance
Automated multi-signal inspection pipeline
Signals Analyzed
32
This scan
Sources Checked
19
Live security feeds
Scan Duration
2.53s
Fast scan
Last Scan
11/13/2026
Live timestamp
Overall Risk
Low Risk
User reviews of doordash.com
No reviews yet. Be the first to share your experience.