favgrab.com

.com crawl

First seen 2026-04-14 · Last seen 2026-05-08 · ok HTTP/1.1 200 969 ms crawled 2026-05-07

US · 104.21.83.110 · AS13335 Cloudflare, Inc.

Reputation 100/100

Classifying

HTML metadata

Title: FavGrab — Food Delivery, Rides, Mart, Pharma & More | Nigeria's #1 Lifestyle App
Description: FavGrab delivers everything you need in one app: food, rides, groceries, bill payments, pharmaceuticals, and packages. Serving 200k+ users across Nigeria. Download now for iOS & Android.
Language: en
Canonical: https://favgrab.com/

Open Graph

url: https://favgrab.com/
title: FavGrab — Everything You Need, One Tap Away
description: Order food, book rides, shop groceries, pay bills, get medications, and send packages — all from one app.

Technology

CDN: Cloudflare

Fonts

Google Fonts

Third-party hosts loaded (2)

fonts.googleapis.com×3
fonts.gstatic.com×1

Social

Registration

Registrar

NameCheap, Inc.

Created

2024-08-08

Expires

2026-08-08 80 days left

Updated

2025-07-27

Name servers

arturo.ns.cloudflare.com
brenda.ns.cloudflare.com

DNS records live

NS

arturo.ns.cloudflare.com
brenda.ns.cloudflare.com

MX

48 route3.mx.cloudflare.net
60 route2.mx.cloudflare.net
98 route1.mx.cloudflare.net

TXT

google-site-verification=B_xhdnrZHzmKJMT_kb8Hny_BllNny5mfEJsmGhNbbi4
mailerlite-domain-verification=836c1518f837be199dc2623ae3745a0e52658ae6

Email authentication strong

SPF

v=spf1 include:_spf.mx.cloudflare.net ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; adkim=s; aspf=s;

policy: reject (enforced) · sp=reject

DKIM

Show 12 DKIM selectors

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvISh3zuLPX9LHwTciPtiMMk7RdZmzKW72ZKVQm95uHTjmY9r95MekOEK2QIcR0AwWRcjfOhvGhAo/q…
google: v=DKIM1; p=
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: v=DKIM1; p=
s2: v=DKIM1; p=
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

WE1

from 2026-04-29 to 2026-07-28

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 95/100 Checked live page: https://favgrab.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
permissions-policy: camera=(), microphone=(), geolocation=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self' https: data: 'unsafe-inline' 'unsafe-eval'; frame-ancestors 'self'
strict-transport-security: max-age=31536000; includeSubDomains; preload