bankfab.com

HTML metadata

Title: Personal Banking & Financial Services | FAB UAE
Description: FAB is offering personal and private banking services, ranging from credit cards to Islamic banking, investment, loans, and mortgages in the UAE.
Language: en
Canonical: https://www.bankfab.com/en-ae/personal

Technology

CMS: Gatsby

Social

Contact

Phone

Registration

Registrar

GoDaddy.com, LLC

Created

1999-02-09

Expires

2029-02-09 996 days left

Updated

2025-10-06

Name servers

a1-17.akam.net
a13-66.akam.net
a20-67.akam.net
a22-64.akam.net
a3-65.akam.net
a6-66.akam.net

DNS records live

NS

a1-17.akam.net
a13-66.akam.net
a20-67.akam.net
a22-64.akam.net
a3-65.akam.net
a6-66.akam.net

MX

Show 8 MX records

10 bankfab-mail1.bankfab.com
10 bankfab-mail2.bankfab.com
10 bankfab-mail5.bankfab.com
10 bankfab-mail6.bankfab.com
20 bankfab-mail3.bankfab.com
20 bankfab-mail4.bankfab.com
20 bankfab-mail7.bankfab.com
20 bankfab-mail8.bankfab.com

TXT

Show 11 TXT records

safebreach-domain-verification=203b97e5-006b-4b98-ab44-de2e6ac42d72
google-site-verification=gp33pmq0beBAFuLZs7YBbBk5-USHIb2_whobRQIcm2M
google-site-verification=HoRwbOJf2vmCq_cF2mn-crxqeV-Qb-hqfByLWRZIaM0
VISA= E27FD578604D0C1326B2C7F8A6E7316D
google-site-verification=yIuCyf4ZSB_hqZkZcEsvR8OtpToblPvrNLMgcupph8k
cloudflare_dashboard_sso=7b1c13182b6c69bafb4558da7ca62172
facebook-domain-verification=tih0r7bd4wg9m7s3uak2u5ediwh5gi
VISA= 75445FEDC0C9E05C315087C63EAE11E1
VISA= 67E92EF5132CCEA49011B7542C06B5C9
MS=ms87374213
v=DMARC1; p=none; rua=mailto:rua@bankfab.com,mailto:rua.bankfab@emailauth.in; ruf=mailto:ruf@bankfab.com;

Email authentication strong

SPF: v=spf1 mx ip4:81.16.133.71 ip4:81.16.135.71 ip4:81.16.132.85 ip4:81.16.132.86 ip4:81.16.134.85 ip4:4.226.46.197 ip4:74.161.89.181 -all
strict (-all)
DMARC: v=DMARC1; p=reject; rua=mailto:rua@bankfab.com,mailto:rua.bankfab@emailauth.in; ruf=mailto:ruf@bankfab.com; fo=1; pct=100; sp=quarantine;
policy: reject (enforced) · sp=quarantine
DKIM: no key found at common selectors

Certificate (current)

Entrust OV TLS Issuing RSA CA 2

from 2025-11-11 to 2026-12-13

Expires in 207 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.bankfab.com/en-ae/personal

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Permissions Policy

Header values

referrer-policy: strict-origin-when-cross-origin
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: default-src 'self' data:; script-src 'unsafe-inline' 'unsafe-eval' 'self' *.google.com https://c.amazon-adsystem.com https://www.clarity.ms *.clarity.ms extapi.bankfab.com https://tools.eurolandir.com https://tools.euroland.com https://bat.bing.com https://trk.platformance.co https://tagmanager.google.com *.gstatic.com consent.cookiebot.com consentcdn.cookiebot.com maps.googleapis.com *.googleapis.com analytics.twitter.com connect.facebook.net consent.cookiebot.com consentcdn.cookiebot.com googleads.g.doubleclick.net https://www.googleadservices.com maps.googleapis.com *.googleapis.com sc-static.net script.hotjar.com snap.licdn.com static.ads-twitter.com static.hotjar.com *.google-analytics.com https://ssl.google-analytics.com https://www.google.com/recaptcha/api.js https://www.googleadservices.com/pagead/conversion_async.js https://platform.twitter.com/oct.js https://websdk.appsflyer.com *.bankfab.com *.googletagmanager.com https://extend.vimeocdn.com https://player.vimeo.com/api/play
strict-transport-security: max-age=31536000; includeSubDomains