sonesson.se

HTML metadata

Description: Sonesson
Language: sv

Technology

Server: nginx
CMS: Gatsby
Stack: PHP

Fonts

Google Fonts

Third-party hosts loaded (4)

cdnjs.cloudflare.com×1
fonts.googleapis.com×1
policy.app.cookieinformation.com×1
static.zdassets.com×1

Social

Contact

Phone

0317035540

DNS records live

NS

ns1.hyp.net
ns2.hyp.net
ns3.hyp.net

MX

10 dk.mx1.mailanyone.net
20 dk.mx2.mx25.net
30 dk.mx3.mailanyone.net
40 dk.mx4.mx25.net

TXT

sKh15dku0Rt3uz+F4p2ic8FE/T4+1SweTb9GaDvDp2vYfYoB2KFuvwckzIlFyJHYl7QVRp5Bg6xd7OOv8lMmOw==

Verified for

Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:62.63.218.106 ip4:193.215.115.90 ip4:52.19.85.145 ip4:185.31.79.79 include:spf.protection.outlook.com include:_spf.anpdm.com ip4:144.76.153.200 ip4:88.99.218.86 include:_spf.powerhosting.dk -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_rua@sits.cloud,mailto:9ad98d9ef6@rua.easydmarc.eu; ruf=mailto:dmarc_ruf@sits.cloud; pct=100; fo=1

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyY0SkszAqoAvlSBGT5qi7XfV6vMeHjcwdwHgJevpd8yDNxWMPKPlKoCJn2Pxq0pjBEQplgkRkf8bM0…
selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+YlbIBTQaSlYnAhmrHGdzGbRpMfLcjXvY//92LUh0bjZI1BpBRL32YMjQ5ZlqUcCxu0YL5G6F2VXh…
selector2: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDq7ZodsE6M7aeLhXZY73r6lb7nmQ8HA79/JQKllbbAFlle98A0bB8nz9MiWRjZbKSZrDSZcjxdIIlDa70+nZ…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
dkim: v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCn0uztlIpjDBCL8S366YQRe0UkrDX98si6W82omgode11ibr1xiF6TxkRwtyddgfo7LnQ89WiR6HSds…

selectors probed

Certificate (current)

E7

from 2026-05-28 to 2026-08-26

Expires in 83 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://www.sonesson.se/

present

strict-transport-security
content-security-policy
content-security-policy-report-only
x-frame-options
x-content-type-options

findings

weak frame protection
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN, SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
strict-transport-security: max-age=31536000; preload;
content-security-policy-report-only: font-src *.fontawesome.com *.yotpo.com *.googleapis.com *.gstatic.com 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.yotpo.com 'self' 'unsafe-inline'; frame-ancestors 'self' 'unsafe-inline'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.paypal.com www.sandbox.paypal.com *.amazon.com *.amazon.co.uk *.amazon.co.jp *.amazon.jp *.amazon.it *.amazon.fr *.amazon.es *.amazon.de *.payments-amazon.com *.payments-amazon.co.uk *.payments-amazon.co.jp *.payments-amazon.jp *.payments-am