Repsol.info

cache-control: no-cache, no-store, max-age=0, must-revalidate
content-type: text/html; charset=utf-8
date: Wed, 14 Aug 2024 05:39:01 GMT
location: https://repsol.com
pragma: no-cache
server: nginx
via: 1.1 google
x-frame-options: DENY
content-length: 53

HTTP/2 301 
content-type: text/html; charset=UTF-8
location: https://www.repsol.com/
server: 
expect-ct: enforce, max-age=300
x-i: A
permissions-policy: midi 'none';
x-frame-options: SAMEORIGIN
content-security-policy: default-src * data:; frame-src * data:;object-src * data:; media-src *; img-src * data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' flickr.com *.googleapis.com *.google.com clientes.repsol.com platform.twitter.com cdn.cookielaw.org  www.google-analytics.com cdns.eu1.gigya.com *.cookiebot.com www.googleadservices.com googleads.g.doubleclick.net connect.facebook.net  assets.adobedtm.com www.googletagmanager.com www.youtube.com  www.recaptcha.net *.gigya.com *.jquery.com *.gstatic.com *.repsol.com *.google-analytics.com *.analytics.google.com ; style-src * 'unsafe-inline'; font-src * blob: data:; connect-src *; frame-ancestors 'self' *.repsol.es *.repsol.com;
referrer-policy: no-referrer-when-downgrade
x-powered-by: 
x-aspnetwebpages-version: 
x-aspnet-version: 
x-aspnetmvc-version: 
strict-transport-security: max-age=31536000
date: Wed, 14 Aug 2024 05:39:02 GMT
content-length: 146

HTTP/2 301 
content-type: text/html; charset=iso-8859-1
content-length: 246
server: Apache
x-vhost: publish
permissions-policy: 
location: https://www.repsol.com/es/index.cshtml
date: Wed, 14 Aug 2024 05:39:02 GMT

HTTP/2 200 
content-type: text/html;charset=utf-8
content-length: 24603
server: Apache
x-vhost: publish
permissions-policy: 
x-content-type-options: nosniff
accept-ranges: bytes
content-encoding: gzip
x-xss-protection: 1; mode=block
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-security-policy: default-src 'self'; frame-ancestors 'self'; frame-src * ; media-src *; img-src * blob: data:; script-src 'self' 'unsafe-eval' 'unsafe-inline' embed.typeform.com app.sealmetrics.com flickr.com accounts.google.com optimize.google.com platform.twitter.com static.ads-twitter.com cdn.cookielaw.org  snap.licdn.com www.dev-com.repsol.com  www.repsol.com www.dev-net.repsol.com www.google-analytics.com analytics.tiktok.com cdns.eu1.gigya.com *.tribalfusion.com consent.cookiebot.com www.googleadservices.com googleads.g.doubleclick.net *.krxd.net connect.facebook.net consentcdn.cookiebot.com trc.taboola.com wave.outbrain.com tr.outbrain.com assets.adobedtm.com www.googletagmanager.com www.youtube.com *.google-analytics.com *.analytics.google.com apis.google.com www.google.com www.recaptcha.net cdn.taboola.com amplify.outbrain.com trc.taboola.com tr.outbrain.com wave.outbrain.com ads-engagement.presage.io www.gstatic.com static.hotjar.com www.static.hotjar.com script.hotjar.com www.script.hotjar.com euob.isstarsbuilding.com obs.isstarsbuilding.com obseu.isstarsbuilding.com assets.adobedtm.com; style-src * 'unsafe-inline'; font-src * blob: data:; connect-src * blob: data:
referrer-policy: origin-when-cross-origin
feature-policy: midi 'none';
cache-control: max-age=900
expires: Wed, 14 Aug 2024 05:54:02 GMT
date: Wed, 14 Aug 2024 05:39:02 GMT
vary: Accept-Encoding