santanderx.com

Live preview

This site sends "X-Frame-Options: SAMEORIGIN", which blocks embedding it here.

Since santanderx.com can't be embedded live, this is a captured screenshot instead — a snapshot from whenever it was last rendered, not necessarily this exact moment.

HTTP & security headers

Response

Server

cloudflare

Content-Type

httpd/unix-directory

Cache-Control

Not sent

Content-Encoding

Not sent

Security

Content-Security-Policy

form-action *.facebook.com; default-src 'self' data: blob: *.fls.doubleclick.net *.doubleclick.net *.hotjar.com *.hotjar.io wss://*.hotjar.com *.omtrdc.net *.twitter.com covers.odilo.io *.ads-twitter.com *.facebook.com *.facebook.net cdn.cookielaw.org *.googletagmanager.com online.bancosantander.es a.omappapi.com *.googleapis.com extend.vimeocdn.com t.co adservice.google.com *.linkedin.com *.google-analytics.com https://*.google-analytics.com *.analytics.google.com https://*.analytics.google.com region1.analytics.google.com region1.google-analytics.com region2.analytics.google.com region2.google-analytics.com region3.analytics.google.com region3.google-analytics.com *.santanderx.com *.universia.net fonts.gstatic.com in-automate.sendinblue.com z.omappapi.com api.omappapi.com snap.licdn.com images.findawayworld.com *.tiktok.com privacyportal-de.onetrust.com sibautomation.com use.typekit.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com *.googleadservices.com santander-privacy.my.onetrust.com; frame-ancestors 'self' *.santanderx.com *.googletagmanager.com; connect-src 'self' cdn.equalweb.com *.universia.net pro-becas-images-s3.s3.eu-west-1.amazonaws.com www.linkedin.com script.hotjar.com img.youtube.com px4.ads.linkedin.com t.co surveystats.hotjar.io analytics.twitter.com www.google.es mboxedge37.tt.omtrdc.net santanderuniversidad.tt.omtrdc.net www.googletagservices.com www.google.ie www.facebook.com cdn.cookielaw.org googleads.g.doubleclick.net stats.g.doubleclick.net www.google.com pagead2.googlesyndication.com *.analytics.google.com *.google-analytics.com https://*.analytics.google.com https://*.google-analytics.com region1.analytics.google.com region1.google-analytics.com region2.analytics.google.com region2.google-analytics.com region3.analytics.google.com region3.google-analytics.com vc.hotjar.io metrics.hotjar.io wss://ws.hotjar.com ws.hotjar.com content.hotjar.io px.ads.linkedin.com analytics.tiktok.com *.pangle-ads.com *.omappapi.com *.vimeo.com *.santanderx.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com maps.googleapis.com sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net *.tiktokw.us; font-src 'self' script.hotjar.com fonts.gstatic.com data:; frame-src 'self' www.youtube.com www.google.com *.doubleclick.net track.adform.net www.facebook.com *.universia.net *.santanderx.com *.vimeo.com doubleclick.net *.doubleclick.net *.googletagmanager.com; img-src 'self' data: dss.hybrid.ai *.santanderopenacademy.com *.santanderx.com su-commons-documents.s3.eu-west-1.amazonaws.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com i.ytimg.com non-productive-alfred-s3.s3.eu-west-1.amazonaws.com *.universia.net img.youtube.com cdn.cookielaw.org www.facebook.com fonts.gstatic.com www.google.ie www.google.com www.google.es *.googletagmanager.com *.google-analytics.com *.analytics.google.com https://*.google-analytics.com https://*.analytics.google.com region1.analytics.google.com region1.google-analytics.com region2.analytics.google.com region2.google-analytics.com region3.analytics.google.com region3.google-analytics.com px.ads.linkedin.com px4.ads.linkedin.com t.co analytics.twitter.com covers.odilo.io images.findawayworld.com *.doubleclick.net *.odilotk.es pro-santanderx-images-s3.s3.eu-west-1.amazonaws.com maps.gstatic.com *.googleapis.com snapchat.com *.snapchat.com *.googlesyndication.com; manifest-src 'self'; media-src 'self' data: *.santanderopenacademy.com *.santanderx.com; object-src 'none'; script-src 'self' 'nonce-dubi133358fg5g0insml' *.youtube.com emd.hybrid.ai *.hybrid.ai pixel.wp.pl www.google.com cdn.jsdelivr.net cdn.equalweb.com code.jquery.com track.adform.net s2.adform.net www.googletagservices.com cdn.cookielaw.org googleads.g.doubleclick.net connect.facebook.net static.hotjar.com metrics.hotjar.io script.hotjar.com *.googletagmanager.com *.google-analytics.com *.analytics.google.com https://*.google-analytics.com https://*.analytics.google.com region1.analytics.google.com region1.google-analytics.com region2.analytics.google.com region2.google-analytics.com region3.analytics.google.com region3.google-analytics.com snap.licdn.com static.ads-twitter.com analytics.tiktok.com *.googleapis.com pro-becas-images-s3.s3.eu-west-1.amazonaws.com *.gstatic.com *.omappapi.com unpkg.com *.santanderx.com sc-static.net *.sc-static.net snapchat.com *.snapchat.com onetrust.com *.onetrust.com omtrdc.net *.omtrdc.net analytics.google.com *.google.com *.adoberesources.net adoberesources.net *.adobedc.net adobedc.net *.demdex.net demdex.net 'sha256-OXPxsacgBmIw5zn78ax2f8vjEI5b+ZtsfBxEKeYonqg=' 'sha256-1C1cYJxLrNIbEh0HQXRmu+ibcpcstZPYQGlAXxIhJyw=' 'sha256-IgMQOOOedQeMPBl7lSreMVPmJvU62bc6l8HcsGXnbWc=' 'sha256-BBirXJiJdwXRuf4PKdCNfYQLT8mhwGu68gkk2lfCqN8=' 'sha256-U9gE8Fz3j7SAiFBrMvkUPtRyLzjqT4WSFcQ5MuOUNIs=' 'sha256-VeYzT/edoQC+d/WjaxQgwOvT0UflVabPHhCOJ27tDzc=' 'sha256-ZC4Ihfl+1sv3E25DQh090ITQKwffxiocyA9C1vaePKU=' 'sha256-HqcrltV/add35ktFKnghPtUZD86xFk2tNSOVuSxlxZI=' 'sha256-Sek2rHS7tFc6G/ZPI8W32oRYLbmGhiiwHdgTchPyruw=' 'sha256-8c3d5J5Ajlq3alyhjKCtHoY8tSEHTIF5HN1ENaHqGZI=' 'sha256-pA/dcqDF1S2zkaOTdoWUwtuLSFoxZgE94NTDt5/DWhc=' 'sha256-vqU0E2Q/amhoNPpIvilkTgM4eZL7JJIWIaOjuBK0cBM=' 'sha256-fDO6Q1uFT1P0RR756Zl6XPhT843jta0B5YtQieMPVcc=' 'sha256-d4DgsOrfoHUjMaKRQUfB17Z4aFJFWUoCUY2mGQW5u0M=' 'sha256-eZzuHNguam8mjm0juhiKx+Dfk9u7cHYWiwXSxDvlnGI=' 'sha256-vNlrzM2pAub8JenLzAWmU5Ks9W1/6M9XaJfWFs6WAsM=' 'sha256-hBnAW/FRpMXBfSf92T9Q6bZyB1TyMHApZMHW0TokdlU=' 'sha256-CKuFmF6BVHLTSJrLPAEy0hcF52xfCIQsGVoJV90RWgM=' 'sha256-2/dKaR2Q/NmoqlR2wYFDjNZh0D+acgQ+AFXVH+1CxaA=' 'sha256-/7NUH9bv2kyVNIGfH15oTZeTJkAO/XeVyxmCUyT20eA=' 'sha256-1nLwgDBREm5LaczYwY7GuW5l1ooOcTVF65UaVL7+pVQ=' 'sha256-up4JlL9lAK65TfdPoOorhenSOCaBv08Ygqq8/lUWewE=' 'sha256-eiGDnBbFInIJ6ZDwPLebVgsxSMuez3LXKJlSHBuXkoQ='; style-src 'self' 'unsafe-inline' stackpath.bootstrapcdn.com *.googletagmanager.com fonts.googleapis.com *.omappapi.com; worker-src *.universia.net

Strict-Transport-Security

max-age=63072000; includeSubdomains;

X-Frame-Options

SAMEORIGIN

X-Content-Type-Options

nosniff

Referrer-Policy

no-referrer-when-downgrade

Permissions-Policy

sync-xhr=(self "https://www.universia.net" "https://www.fundacionuniversia.net"), microphone=(), payment=(), browsing-topics=()

What each security header does

Redirect chain

1. 1.http://santanderx.com/HTTP 301

   → https://santanderx.com/

2. 2.https://santanderx.com/HTTP 301

   → https://www.santanderx.com/

3. 3.https://www.santanderx.com/HTTP 200

Meta tags

Title

Not set

Description

Not set

Canonical

Not set

Robots

Not set

Generator

Not set

Open Graph title

Not set

Open Graph description

Not set

Open Graph image

Not set

Open Graph type

Not set

Twitter card

Not set

Twitter title

Not set

Twitter image

Not set

robots.txt

Disallow rules (User-agent: *)

1

Disallow rules (other agents)

2

No Sitemap declared in robots.txt.

Technology detected

Best-effort, based on a small set of well-known signals — this may be incomplete.

• Cloudflarecdn

  Server: cloudflare

Related domains