santander.com

Observed 2026-07-14T01:26:41.789Z (5h ago). Every field below was attested with an Ed25519 signature at scan time.

Up right now

Runs onCloudflare

Registered withTucows Domains Inc.

Also usesFacebook/MetaGoogle Search Console

2 subdomains · push_legacy

Every line above is a signed observation. Check the math at the bottom of the page.

INFRASTRUCTURE MAPwhat santander.com actually stands on - every host below is a signed observation

santander.com

A / AAAA

45.223.176.24845.223.164.248

Cloudflareserves the site

a9-65.akam.neta14-67.akam.neta11-67.akam.neta12-65.akam.net+2 more

akam.netanswers its DNS

mx2.hc5532-55.iphmx.commx2.santandergroup.c3s2.iphmx.commx1.santandergroup.c3s2.iphmx.commx1.hc5532-55.iphmx.com

iphmx.comreceives its email

HTTPS probe

redirect Redirecting (3xx) 308 → https://www.santander.com/

HTTP status308

Servercloudflare

TLS protocolHTTP/2

TLS issuernot observed

Behind Cloudflareyes

Response time527 ms

DNS resolutionNOERROR

Redirect chain

https://www.santander.com/

Every field above is part of the same signed observation as the records below. Blank means not observed, never "none".

DNS Records

A 2

45.223.176.248
45.223.164.248

MX 4

10mx2.hc5532-55.iphmx.com
10mx2.santandergroup.c3s2.iphmx.com
10mx1.santandergroup.c3s2.iphmx.com
10mx1.hc5532-55.iphmx.com

TXT 10

globalsign-domain-verification=2e6ecfe7f79032bfde65a2f0eec701cb
MS=ms69216814
facebook-domain-verification=byty3qvuy0ophn5mimdicy1hx9mtbd
google-site-verification=YxmFpPn2d-Xkccvvxh_KIJcLHeDb5TjElyvTzki-UiQ
v=spf1 exists:%{i}.spf.as.gruposantander.com exists:%{i}.spf.us.gruposantander.com ip4:193.127.0.0/16 ip4:62.164.0.0/17 ip4:170.169.0.0/16 ip4:195.149.208.0/21 ip4:195.43.48.0/22 ip4:200.220.176.0/20 include:spf.protection.outlook.com -all
globalsign-domain-verification=C945ACA74EE62B2DFB57072C5EC15A3F
adobe-idp-site-verification=50935fffec5a7d86b33deb30987909479eb504502ef8be93f8ac75743b3e1f17
yandex-verification: 6dfe07beb489d25c
00DKI000000LXk8=1TBKI000000GmdS
v=DMARC1; p=reject; fo=1; ri=3600; rua=mailto:santander@rua.dmp.cisco.com,mailto:postmanagerdmarc@gsnetcloud.com; ruf=mailto:santander@ruf.dmp.cisco.com,mailto:postmanagerdmarc@gsnetcloud.com

NS 6

a9-65.akam.net
a14-67.akam.net
a11-67.akam.net
a12-65.akam.net
a2-65.akam.net
a1-49.akam.net

SOA 1

dns01.santandergroup.net hostmastergsc.gruposantander.com

TLS Certificates (0)

None.

Subdomains (2)

The proof

Signed at scan time. Check the math yourself. Every line above is part of one signed observation. Re-hash it and check the Ed25519 signature in your own browser; nothing leaves your machine.

Verify this receipt

Put the receipt on your own site. A live badge showing what DomainDrift observes and signs for santander.com. It updates itself. It attests a signed observation - not that the site is safe.

<a href="https://domaindrift.io/t/santander.com">
  <img src="https://domaindrift.io/badge/santander.com.svg"
       width="300" height="64" alt="DomainDrift signed observations for santander.com">
</a>

Ed25519 Receipt

Receipt ID: 2e9b6f78-5f15-4b5d-ae6c-a21faf78af3d
Output Hash: 0fbf4f65bf6fa7d1fd9f8f65bec2181abb241d263c516c04dd080c1d1f242a2a
Signature: ed25519:c745cebe652b3e98ebdd919a823292648950cbea58c280923c1459aaf69fbb4cee14f8b38ef5a6e9c306677b916df2705c044aa4f2155cca513059a063c4f401
Public Key: ed25519:d610d74ef18f683e5beb859d241d5e67dff0c122e8928b06bec1c2476f4ba27b
Parent: (genesis)
Plane: fast

Verify this in your browser

Permalink: https://domaindrift.io/t/santander.com