trangoworld.com

HTML metadata

Title

Aventura y montaña | Trangoworld

Description

Especialistas en productos y material técnico de montaña. Equípate para la aventura: alpinismo, escalada, trail running, boulder, trekking, esquí, acampada...

Language

es

Translations

en-gb
es-es
fr-fr

Technology

CDN: Cloudflare
CMS: Gatsby

Analytics

Cloudflare Insights
Google Tag Manager

Third-party hosts loaded (3)

eu1-config.doofinder.com×1
static.cloudflareinsights.com×1
www.googletagmanager.com×1

Social

Contact

Address: Pol. Ind. Malpica, 50016, Zaragoza, ES

Registration

Registrar

Arsys Internet, S.L. dba NICLINE.COM

Created

1999-06-23

Expires

2026-06-23 34 days left

Updated

2025-09-30

Name servers

ace.ns.cloudflare.com
aitana.ns.cloudflare.com

DNS records live

NS

ace.ns.cloudflare.com
aitana.ns.cloudflare.com

MX

0 trangoworld-com.mail.protection.outlook.com
100 correo.trangoworld.com

TXT

Show 5 TXT records

sophos-domain-verification=ac2e006aa670e23e17d0116e93502a3669ba5d795c7a61c251538ac11c026fdd
vjl0kddtf10g0gpfb4292v3lhb
MS=42D6B1DE77A113262BFFF7957F0919576CE8972E
amazon-business-verification=1d18bc5af4b531f3a56d8ccdd474a291a9fb6e6efc8028df07542a8759ed09cd
google-site-verification=adFKdcpT3ug_cY_YMX4NvJyrSNJ5x9S0a2CK7AvlZvQ

Email authentication strong

SPF

v=spf1 include:spf.ipzmarketing.com ip4:37.187.226.210 ip4:54.38.176.211 ip4:46.105.250.110 ip4:51.15.15.85 ip4:213.0.52.50 ip4:213.0.52.54 include:spf.protection.outlook.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:cbb4f453e94844df9b21f30ffaf3671a@dmarc-reports.cloudflare.net;

policy: quarantine

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC6fQd/nEULfyvh2V+bD1owlZd5L+dS+zI2LRgOPRRa6AroWQuGszdNSeiSyVEYAsQj/1WZYAavtNkeNKjMZa…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrK4UqG6c4Yw27YNtMc+YoF0Fy1DyKeanVUpKU7OscJaX1EHwPKego2fBQnu3mJU2FMyCwVu+wyv12Rhaw…
s2: k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC8IvlcMsN9RXdO8hAU1l10JS0P78WziVPL1OKLEnPQmB6I+nr4G3YmdpHrmONGF3n3jNYQOdHA0Fakny46M2zPm+…

selectors probed

Certificate (current)

WE1

from 2026-03-26 to 2026-06-24

Expires in 35 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.trangoworld.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src fonts.gstatic.com use.typekit.net *.development.scalapay.com *.staging.scalapay.com *.integration.scalapay.com *.scalapay.com *.googleapis.com *.gstatic.com *.fontawesome.com *.fonts.googleapis.com data: *.cloudflare.com data: 'self' 'unsafe-inline'; form-action geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com pilot-payflowlink.paypal.com www.paypal.com www.sandbox.paypal.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.redsys.es *.redsys.es:25443 *.cardinalcommerce.com *.paypal.com 3ds-secure.cardcomplete.com www.clicksafe.lloydstsb.com pay.activa-card.com *.wirecard.com acs.sia.eu *.touchtechpayments.com www.securesuite.co.uk rsa3dsauth.com *.monzo.com *.arcot.com *.wlp-acs.com * 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net *.adobe.com bid.g.doubleclick.net geostag.cardinalcomme
strict-transport-security: max-age=31536000;