bankaletihad.com

HTML metadata

Title

خدمات مصرفية للأفراد والأعمال | بنك الاتحاد - الأردن

Description

يقدم بنك الاتحاد مجموعة متميزة من الخدمات المصرفية للأفراد والأعمال بما في ذلك الحسابات المصرفية وبطاقات الائتمان والقروض وغيرها. أعرف أكثر

Language

ar

Canonical

https://www.bankaletihad.com/ar/

Translations

ar-jo
en-jo

Open Graph

url: https://www.bankaletihad.com/ar/
title: خدمات مصرفية للأفراد والأعمال | بنك الاتحاد - الأردن
locale: ar
site name: Bank al Etihad - Jordan
description: يقدم بنك الاتحاد مجموعة متميزة من الخدمات المصرفية للأفراد والأعمال بما في ذلك الحسابات المصرفية وبطاقات الائتمان والقروض وغيرها. أعرف أكثر

Technology

CDN: Amazon CloudFront
CMS: Next.js

Analytics

Google Tag Manager

Third-party hosts loaded (2)

www.facebook.com×1
www.googletagmanager.com×1

Social

Registration

Registrar

MarkMonitor Inc.

Created

2010-10-21

Expires

2026-10-21 154 days left

Updated

2024-03-19

Name servers

dns1.p08.nsone.net
dns2.p08.nsone.net
dns3.p08.nsone.net
dns4.p08.nsone.net
edns8.ultradns.biz
edns8.ultradns.com
edns8.ultradns.net
edns8.ultradns.org

DNS records live

NS

dns1.p08.nsone.net
dns2.p08.nsone.net
dns3.p08.nsone.net
dns4.p08.nsone.net
edns8.ultradns.biz
edns8.ultradns.com
edns8.ultradns.net
edns8.ultradns.org

MX

1 aspmx.l.google.com
10 alt3.aspmx.l.google.com
10 alt4.aspmx.l.google.com
5 alt1.aspmx.l.google.com
5 alt2.aspmx.l.google.com

TXT

Show 16 TXT records

h1-domain-verification=GJjYSqG8e6pdfz9vMp9nwprbp9VyasJdzK4PzdCkU41BHPYQ
cisco-ci-domain-verification=2bd28391c3aeb6fd26a28d8be11d64cd61ffeb5334b5c2be0dbd4b907879ac49
atlassian-domain-verification=/enaLjLY5n+xuIUWRT/gpnqa3tR/lzQX2Qgs0ToKOxPhW06F3TA+SqHhQHKMrA9k
v=spf1 ip4:94.142.32.114 ip4:185.197.178.15 ip4:185.197.177.4 ip4:185.197.177.15 ip4:212.35.72.242 include:_spf.google.com include:spf_c.oraclecloud.com include:spf-00212401.pphosted.com ~all
google-site-verification=7GOGHqL96GWoW8xoMy7OvNJH5cfE8gNLy7zuEiNPhs8
ZOOM_verify_fRfha4EJRVGLtJmB5e55zw
2fcfb8451fde4197be77a96601675380.bankaletihad.com
_globalsign-domain-verification=PILG2L7GR-2KecCXJkC9QC-kzXA2GQir70Rw22Bv9C
oo1bjg8r3dlntufc3n8pkqda21
MS=ms51001995
google-site-verification=ruUxBYODKZkdgTm6MLoqHg1faOKmbktOgc16AxluHKQ
atlassian-domain-verification=H/cr2q6je6cTjckQFIUneVg+LyBACn5UNhPFZeELNojX1kLFtCAJ33RSO/UW6Vid
google-site-verification=qci8EVt53vK0SCVl4WhQTeMIPE8UoQFKqqeuqjXO7IE
_globalsign-domain-verification=PO95qR5HARP3zbvcQ1WFBVyLGBUvgjmgc16ENjCtmy
globalsign-domain-verification=8ypaCNeEup1Ijil7mO-8OI6rIBUiSuNnjQzE3dWmMv
Dynatrace-site-verification=67b3d31d-7361-45e0-ab84-2274f96c47ec__j4nf6l5khkeletk8g3tf77bf5r

Certificate (current)

Amazon RSA 2048 M01

from 2025-09-22 to 2026-10-22

Expires in 155 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://www.bankaletihad.com/ar/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(),midi=(),sync-xhr=(self),microphone=(),camera=(),magnetometer=(),gyroscope=(),fullscreen=(self),payment=()
x-content-type-options: nosniff
content-security-policy: default-src 'self' https://stats.g.doubleclick.net https://w.soundcloud.com https://omny.fm https://*.baelab.net https://*.bankaletihad.com https://o1343449.ingest.sentry.io https://o954969.ingest.sentry.io https://*.google.com https://*.googleapis.com https://*.googletagmanager.com https://connect.facebook.net https://www.facebook.com https://itunes.apple.com https://player.vimeo.com https://*.google-analytics.com https://*.equalweb.com https://flex.cybersource.com/microform/bundle/* https://flex.cybersource.com/ https://centinelapistag.cardinalcommerce.com https://secure-devicefp-cte.visa.com https://centinelapi.cardinalcommerce.com/ ; font-src 'self' https://*.bankaletihad.com https://fonts.googleapis.com https://fonts.gstatic.com https://flex.cybersource.com/microform/bundle/* https://flex.cybersource.com/ https://secure-devicefp-cte.visa.com https://centinelapistag.cardinalcommerce.com data: 'unsafe-inline';img-src 'self' https://www.google.jo https://*.equalweb.com https://
strict-transport-security: max-age=31536000; includeSubDomains; preload

Links to (6)

Linked from (1)

intlbm.com×2