sonaesierra.com

HTML metadata

Title

Sonae Sierra | Open mind Greater value

Description

We pursue an integrated approach to real estate.

Language

en

Generator

WordPress 6.9.4

Canonical

https://www.sonaesierra.com/

Translations

de
en
es
fr
it
pt

Open Graph

url: https://www.sonaesierra.com/
title: Sonae Sierra | Open mind Greater value
locale: en_US
site name: Sonae Sierra: Real estate services | Property investment
description: We pursue an integrated approach to real estate.
locale:alternate: it_IT

Technology

Server: nginx
CMS: WordPress

Analytics

Google Tag Manager

Cookie consent

Cookiebot

Third-party hosts loaded (6)

www.googletagmanager.com×4
www.gstatic.com×2
cdnjs.cloudflare.com×1
consent.cookiebot.com×1
maps.googleapis.com×1
www.google.com×1

Social

Registration

Registrar

Realtime Register B.V.

Created

2005-01-14

Expires

2027-01-14 238 days left

Updated

2026-01-15

Name servers

ns1.sonaesierra.com
ns2.novis.pt

DNS records live

NS

ns1.sonaesierra.com
ns2.novis.pt

MX

0 sonaesierra-com.mail.protection.outlook.com

TXT

Show 6 TXT records

c6cd736c59fff831b79863ea9bdb7cde8a4e45a8a32bdc43ad35093d148b0fb
5t7k9b6zdwm2ch5mx58s55q5h8s2fvck
g5290o5vtq5617jpicpah24ja3
118k3ltnqpetfli9a664vnh33s
67abae9e45305657f1e744f1e4658ec7fdf47a08b5d508b8d39c8a9698fc755
ad7de3d3edb9c38032ce9741d4bacd993e6b70e8684dbea7969a6bea793a4d1

Verified for

Brevo
Google
Microsoft 365
OpenAI

Email authentication strong

SPF

v=spf1 ip4:213.205.84.210 ip4:20.67.142.106 ip4:20.13.180.24 ip4:135.236.195.2 ip4:48.209.163.173 ip4:4.207.239.250 include:spf.protection.outlook.com include:_spf.psm.knowbe4.com include:spf.mandrillapp.com -all

strict (-all)

DMARC

v=DMARC1; p=quarantine; rua=mailto:dmarcreports@sonaesierra.com,mailto:rua@dmarc.brevo.com,mailto:dmarc_agg@vali.email; ruf=mailto:dmarcreports@sonaesierra.com; fo=1; pct=100;

policy: quarantine

DKIM

Show 5 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUmDl5pB+Lie7AIc8NIefae0Mv/AaQ3Tn13vjWjuJTFxZosyGUz/F8TLM+w1kzr9z7t49rp3X4L9E/…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HSZ2nBiHVo44qeijapvZk3GyRlDSZlFh1ahK550RjcpaZjNmlGaifj4T9L/dO/mLQ9c/AA+CHIfqw…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
s1: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDfkdhWhSM8/vGBRZymxOsudvXKqFUtOOwU+g1Uklq4kj2X9eRmmAv+krfTiAY9amSYGhtEO3PbgP1f/1c…
s2: k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWEkNTnSRuUgJiY5nJlNJQF9IwNSBXk49PhlwxMfEzpnzC3exwm99c3GXVfEw5B2/z+6kVa5k+h0JBsQhD…

selectors probed

Certificate (current)

Sooma Digital Trust Validation

from 2025-10-13 to 2026-10-13

Expires in 146 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://sonaesierra.com/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

short HSTS max-age
CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
permissions-policy: geolocation=(self), fullscreen=(self)
x-content-type-options: nosniff
content-security-policy: default-src 'self'; worker-src 'self' blob:; img-src 'self' https://www.googletagmanager.com https://mapsresources-pa.googleapis.com https://imgsct.cookiebot.com https://www.wpo365.com https://secure.gravatar.com https://maps.gstatic.com https://maps.googleapis.com data:; connect-src 'self' https://www.sonaesierra.com https://sonaesierra.com https://unpkg.com https://mapsresources-pa.googleapis.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com https://region1.google-analytics.com https://www.wpo365.com https://yoast.com https://consentcdn.cookiebot.com https://maps.googleapis.com https://webanalytics.sonaesierra.com; font-src 'self' https://fonts.gstatic.com data:; frame-src 'self' https://embed.figma.com https://www.figma.com https://*.figma.com https://consentcdn.cookiebot.com https://www.google.com; child-src https://www.figma.com https://*.figma.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.googleapis.com https://
strict-transport-security: max-age=2592000