sono.dk

HTML metadata

Title: Kontormøbler og indretning af skoler og industri | Sono
Description: Sono har leveret smarte og effektive indretninger til danske arbejdspladser i 20 år. Vores samfundsbidrag er at sørge for at din arbejdsplads bliver bedre.
Language: da
Canonical: https://www.sono.dk/

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Font Awesome

Third-party hosts loaded (8)

www.sono.no×2
helloretailcdn.com×1
js.charpstar.net×1
maxcdn.bootstrapcdn.com×1
policy.app.cookieinformation.com×1
static.zdassets.com×1
use.fontawesome.com×1
www.googletagmanager.com×1

Contact

Email

Phone

9725 2888

DNS records live

NS

ns1.hyp.net
ns2.hyp.net
ns3.hyp.net

MX

10 dk.mx1.mailanyone.net
20 dk.mx2.mx25.net
30 dk.mx3.mailanyone.net
40 dk.mx4.mx25.net

TXT

nLArXqh0yZjMGMaGCtjoJG3307k/3+zrlEoxNExaoFXQIjAQGeGiWEeSdQ0z/Zo1wJHS9ZlDPPTbfS4Z/dqFYg==

Verified for

Google
Microsoft 365

Email authentication partial

SPF

v=spf1 ip4:188.228.91.42 ip4:188.228.74.30 ip4:37.97.42.229 ip4:193.215.115.90 ip4:193.215.115.91 ip4:89.104.206.82 ip4:52.19.85.145 ip4:185.31.79.79 include:_spf.mailgun.org include:_spf.eu.mailgun.org include:spf.protection.outlook.com include:servers.mcsv.net include:spf.mailanyone.net ip4:144.76.153.200 ip4:88.99.218.86 include:_spf.powerhosting.dk include:mailgun.org -all

strict (-all)

DMARC

v=DMARC1; p=none; rua=mailto:dmarc_rua@sits.cloud,mailto:9ad98d9ef6@rua.easydmarc.eu; ruf=mailto:dmarc_ruf@sits.cloud; pct=100; fo=1

policy: none (monitoring only)

DKIM

selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCg1zn7nHumQAwPRlG3vsZtVBBtmq4cZKjKt1zhwfyLu66ry5yZGNRn5J8MDwngsrhrFLfsJI0N4H+pXQkfxS…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RmgUdNCYImirsfLBMGNdm40alO01GOkVRNufIuWZTua734XtkleZeuzCRbx/e5ywEBp4s+k/rt56R…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…

selectors probed

Certificate (current)

R12

from 2026-05-15 to 2026-08-13

Expires in 70 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sono.dk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com use.fontawesome.com v2.zopim.com *.google.com *.yotpo.com *.adobe.com https://connect.facebook.net 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.facebook.com *.yotpo.com *.adobe.com https://connect.facebook.net https://hub.meplato.de https://hub.meplato.com *.meplato.de *.meplato.com https://validator.meplato.com *.mediusflow.com https://cloud.mediusflow.com *.ivalua.com https://ivalua.com https://saabgroup.com *.saabgroup.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.n
strict-transport-security: max-age=31536000; includeSubDomains; preload