arabbank.com

.com crawl

First seen 2026-04-21 · Last seen 2026-05-18 · ok HTTP/1.1 200 6709 ms crawled 2026-05-15

JO · 37.75.144.226 · AS59451 Al-Bank Al-Arabi PLC. CO.

Reputation 100/100

Classifying

HTML metadata

Title: Home
Language: en
Canonical: https://arabbank.com

Technology

CMS: Ghost

Analytics

Google Tag Manager

Third-party hosts loaded (3)

www.facebook.com×2
www.googletagmanager.com×2
cdn-af.readspeaker.com×1

Social

Registration

Registrar

Network Solutions, LLC

Created

1996-01-25

Expires

2028-01-26 617 days left

Updated

2026-02-25

Name servers

ns1.arabbank.com.jo
ns2.arabbank.com.jo
ns3.arabbank.com.jo
ns4.arabbank.com.jo
ns5.arabbank.com.jo

DNS records live

NS

ns1.arabbank.com
ns1.arabbank.com.jo
ns2.arabbank.com.jo
ns3.arabbank.com.jo
ns4.arabbank.com
ns4.arabbank.com.jo
ns5.arabbank.com.jo

MX

10 inetsrv.arabbank.com.jo
20 inetsrv2.arabbank.com.jo
30 inetgw3.arabbank.com.jo
40 inetgw4.arabbank.com.jo
50 inetsrv3.arabbank.com.jo
80 mail1.arabbank.ae

TXT

facebook-domain-verification=0tb9tysyb3a3zwse62ub9ffwgxa38v

Email authentication strong

SPF: v=spf1 mx ip4:94.200.22.251 ip4:94.56.109.197 ip4:37.75.144.175 ip4:37.75.144.57 ip4:37.75.144.154 ip4:37.75.147.122 ip4:37.75.147.124 -all
strict (-all)
DMARC: v=DMARC1;p=reject;sp=reject;pct=100;rua=mailto:Quarantine.Admin@arabbank.com.jo;ruf=mailto:Quarantine.Admin@arabbank.com.jo,mailto:SECIR@Arabbank.com.jo;ri=86400;aspf=s;adkim=s;fo=1
policy: reject (enforced) · sp=reject
DKIM: no key found at common selectors

Certificate (current)

DigiCert EV RSA CA G2

from 2026-02-24 to 2027-03-28

Expires in 313 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.arabbank.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' 'unsafe-inline' 'unsafe-eval' *.googleadservices.com *.gstatic.com *.hotjar.com *.doubleclick.net *.arabbank.com *.google.com *.facebook.net *.facebook.com *.googleapis.com www.arabbank.ae arabbank.ae arabbank.com.lb www.arabbank.com.lb arabbank.dz www.arabbank.dz www.arabbank.bh arabbank.bh www.arabbank.com arabbank.com arabbank.com.eg www.arabbank.com.eg www.arabbank.jo arabbank.com.jo arabbank.jo www.arabbank.com.jo www.arabbank.com.lb arabbank.com.lb arabbank.ma arabbank.ma www.arabbank.ps arabbank.ps www.arabbank.com.qa arabbank.com.qa *.google-analytics.com google-analytics.com www.googletagmanager.com www.youtube.com www.linkedin.com linkedin.com instagram.com twitter.com *.typeform.com geo-tracker.ads.memob.com 10.1.30.170 *.readspeaker.com data:; frame-src 'self' 'unsafe-inline' 'unsafe-eval' *.hotjar.com *.doubleclick.net *.google.com 10.1.228.170 10.1.228.172 www.youtube-nocookie.com youtube-nocookie.com www.youtube.com platform.twit
strict-transport-security: max-age=15552001; includeSubDomains; preload