Delivery and logistics

GrubHub lookalike domains

Greyphish has recorded 59 domains that resemble GrubHub since February 2026, 5 of them in the last 90 days. Most of them (66%) are typosquats, a keystroke or two away from the real name. .com carries 92% of them, out of 6 endings in all. 1 certificate for unregistered .com.ph names (registry wildcard) is excluded: the registry answers for any name under that ending, so nobody had to register one to get a certificate for it.

Data as of . Public sources only.

Lookalikes seen
59
since February 2026
Last 90 days
5
4 in the last 30 days
Endings
6
most on .com (92%)
Typosquats
66%
the most common kind

What kind of lookalikes

Typosquats39 (66%)

One or two keystrokes away from the real name: a letter dropped, doubled, swapped or mistyped. More

Combosquats16 (27%)

The brand spelled correctly with a word added, such as login or support. More

Homoglyphs4 (7%)

A letter swapped for one that looks the same, in ASCII or in Unicode written as punycode. More

Lookalikes per week

TypoCombo
1
2
Apr 27
Jun 22
Aug 17
New lookalikes per week (UTC), by type, over the last 26 weeks. The last bar is this week so far.
Show as a table
Week ofTypoComboTotal
2026-04-27000
2026-05-04000
2026-05-11000
2026-05-18202
2026-05-25101
2026-06-01022
2026-06-08101
2026-06-15101
2026-06-22000
2026-06-29000
2026-07-06000
2026-07-13000
2026-07-20000
2026-07-27000
2026-08-03000
2026-08-10000
2026-08-17000
2026-08-24000
2026-08-31101
2026-09-07000
2026-09-14000
2026-09-21000
2026-09-28000
2026-10-05000
2026-10-12022
2026-10-19022

Endings

The 6 most used of the 6 top-level domains these lookalikes sit under.

EndingLookalikesShare
.com5491.5%
.cfd11.7%
.co.uk11.7%
.net11.7%
.org11.7%
.team11.7%

Where they are registered

For the 55 with a registrar in WHOIS (93% of all). Brand-protection registrars mostly hold defensive registrations made by brands themselves, so a domain there is more likely the brand's own than an imitation.

RegistrarLookalikesShareType
GoDaddy1018.2%Retail
Dynadot47.3%Retail
Media Elite Holdings47.3%Retail
Namecheap47.3%Retail
Above.com35.5%Retail
PDR35.5%Retail
Squarespace35.5%Retail
April Sea23.6%Retail

What the live ones do

Google Web Risk lists none of the 1 live ones checked against it.

4 were tracked while live and 0 have since gone down. See what to do about a lookalike.

Recent examples

The 10 most recent, written with [.] so they cannot be clicked. The brand's own domains and registrations held by brand-protection registrars are left out. A lookalike resembles GrubHub; it is not necessarily malicious, and none of these is a claim about who registered it or why.

  • grubhubapp[.]com
    Combo, Oct 20Serves a website
  • grubhubonline[.]co[.]uk
    Combo, Oct 19Serves a websiteMX records
  • verifymygrubhub[.]net
    Combo, Oct 17No site or mail when checked
  • verifymygrubhub[.]com
    Combo, Oct 16No site or mail when checked
  • crubhub[.]com
    Typo, Sep 6Not checked
  • gruvhub[.]com
    Typo, Jun 17Not checked
  • grubshub[.]com
    Typo, Jun 13Not checked
  • grubhub-merchant-login[.]cfd
    Combo, Jun 5Not checked
  • grubhubsupport[.]team
    Combo, Jun 1Not checked
  • grubhub0[.]com
    Typo, May 31Not checked

Or watch it free: Greyphish tells you when a new lookalike of your domain is registered or goes live.

All brands with a page

Greyphish is not affiliated with GrubHub. Domains listed resemble GrubHub by spelling; registration alone says nothing about intent. Counts cover domains first seen in public Certificate Transparency logs and ICANN zone files; domains that Greyphish customers watch are excluded.