sono.no

HTML metadata

Title: Kontormøbler og innredning for industri og verksted | Sono
Description: Velkommen til Sono, din leverandør av møbler til kontor, skole og barnehage, garderobeskap, lagerinnredning og industrimøbler som gjør din arbeidsplass bedre.
Language: nb
Canonical: https://www.sono.no/

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Font Awesome

Third-party hosts loaded (6)

helloretailcdn.com×1
js.charpstar.net×1
maxcdn.bootstrapcdn.com×1
policy.app.cookieinformation.com×1
use.fontawesome.com×1
www.googletagmanager.com×1

Contact

Email

Phone

6916 5500

DNS records live

NS

ns1.hyp.net
ns2.hyp.net
ns3.hyp.net

MX

10 sono-no.mx1.comendosystems.com
20 sono-no.mx2.comendosystems.net

TXT

VR7/7nVEhYhSg0cKXyLTdz2T5OB1Gv+UsXBunsQBYrmZXJ/a9eOtyeylC9/n4wsHyVFhJl7AyDXUh1Xtc+fzaw==

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:193.215.115.90 ip4:193.215.115.91 ip4:52.19.85.145 ip4:185.31.79.79 include:spf.protection.outlook.com include:mailgun.org include:servers.mcsv.net include:spf.mailanyone.net ip4:52.19.85.145 ip4:144.76.153.200 ip4:88.99.218.86 include:_spf.powerhosting.dk -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_rua@sits.cloud,mailto:9ad98d9ef6@rua.easydmarc.eu; ruf=mailto:dmarc_ruf@sits.cloud; pct=100; fo=1

policy: reject (enforced)

DKIM

Show 5 DKIM selectors

default: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/lkzW4264FK7h8c6UPzXKJQ1ZFsND4NPOZtmIwACup1W18X4+8gIQhbRKOw37YTkJjiDfXTKvgVm3…
selector1: v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDE5zQ/HRrU1ixSfHcUS1mgbZlkkJaksAi2E8Ak9/ViqoVSG6dtbcvNI7HLqAQNsVSPS7bsUlnwfn77ICB9h4…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv8gJyIpq4T5WBHfpeORolv4D7yozHE8X2lvpF4YPoKyFVFrToo1suEat55MBcbmq8/90BAEalgwcd…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
dkim: v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCn0uztlIpjDBCL8S366YQRe0UkrDX98si6W82omgode11ibr1xiF6TxkRwtyddgfo7LnQ89WiR6HSds…

selectors probed

Certificate (current)

R12

from 2026-04-20 to 2026-07-19

Expires in 45 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sono.no/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com use.fontawesome.com v2.zopim.com *.google.com *.yotpo.com *.adobe.com https://connect.facebook.net 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.facebook.com *.yotpo.com *.adobe.com https://connect.facebook.net https://hub.meplato.de https://hub.meplato.com *.meplato.de *.meplato.com https://validator.meplato.com *.mediusflow.com https://cloud.mediusflow.com *.ivalua.com https://ivalua.com https://saabgroup.com *.saabgroup.com 'self' 'unsafe-inline'; frame-ancestors 'self'; frame-src fast.amc.demdex.net secure.authorize.net test.authorize.n
strict-transport-security: max-age=31536000; includeSubDomains; preload