sono.se

HTML metadata

Title: Kontorsmöbler och inredning för skolor och industri | Sono
Description: Sono Sverige är ledande inom inredningslösningar för arbetsplatser. Här kan du köpa produkter som gör din arbetsvardag bättre inom kontor, skola och industri.
Language: sv
Canonical: https://www.sono.se/

Technology

Server: nginx
CMS: Gatsby

Analytics

Google Tag Manager

Fonts

Font Awesome

Third-party hosts loaded (7)

www.sono.no×2
helloretailcdn.com×1
js.charpstar.net×1
maxcdn.bootstrapcdn.com×1
policy.app.cookieinformation.com×1
use.fontawesome.com×1
www.googletagmanager.com×1

Contact

Email

info@sono.se

Phone

010-161 54 00

DNS records live

NS

ns1.hyp.net
ns2.hyp.net
ns3.hyp.net

MX

10 sono-se.mx1.staysecuregroup.com
20 sono-se.mx2.staysecuregroup.net

TXT

N9I40wbZN633c5wkziHJAiy+m2J4RU4/Gd51TCtxui0=
6uL0LPAmjq+yzShjV3ctChnwLUcMiOyKmC4mjWymr4nd/51zmWvDsPJkvkLk8mCx0CvejexklBmVcwFh3bPAPA==
l04tqk7seunvvr854akba2i2rl

Verified for

Google
Meta
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:193.215.115.90 ip4:193.215.115.91 ip4:52.19.85.145 include:spf.protection.outlook.com include:servers.mcsv.net include:spf.mailanyone.net include:_spf.powerhosting.dk -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:dmarc_rua@sits.cloud,mailto:9ad98d9ef6@rua.easydmarc.eu; ruf=mailto:dmarc_ruf@sits.cloud; pct=100; fo=1

policy: reject (enforced)

DKIM

Show 4 DKIM selectors

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+wDUOf2MIrHd1ZkUHKRZhdoZo2pP1Yt5REiQWG1q9qAcyyaL/EqooDKwqKeSUl5LU3g1LfZzBuCcc…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMMuIHjUyhnyeroYb++OsRzhjpN9pHviP4mdBdTW6huVzrEx1+IGryBxO2eSiqjBnqdsx0xAZuUxOo…
k2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv2aC2KjGKLOwTweBY5A9RpjsxaBXR9r7OAU6U8/zn92ivImI75naUujWbItRI/QmL1jy5PWGqLwoUA…
dkim: v=DKIM1; g=*; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCn0uztlIpjDBCL8S366YQRe0UkrDX98si6W82omgode11ibr1xiF6TxkRwtyddgfo7LnQ89WiR6HSds…

selectors probed

Certificate (current)

R13

from 2026-05-14 to 2026-08-12

Expires in 69 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 80/100 Checked live page: https://www.sono.se/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources
missing Referrer Policy
missing Permissions Policy

Header values

x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: font-src *.fontawesome.com maxcdn.bootstrapcdn.com fonts.gstatic.com fonts.googleapis.com *.gstatic.com 'self' data: *.doubleclick.net *.facebook.com use.fontawesome.com v2.zopim.com *.google.com *.yotpo.com *.adobe.com https://connect.facebook.net *.kundo.se 'self' 'unsafe-inline'; form-action secure.authorize.net test.authorize.net geostag.cardinalcommerce.com geo.cardinalcommerce.com 1eafstag.cardinalcommerce.com 1eaf.cardinalcommerce.com centinelapistag.cardinalcommerce.com centinelapi.cardinalcommerce.com www.facebook.com connect.facebook.net graph.facebook.com business.facebook.com *.google.com *.facebook.com *.yotpo.com *.adobe.com https://connect.facebook.net https://hub.meplato.de https://hub.meplato.com *.meplato.de *.meplato.com https://validator.meplato.com *.mediusflow.com https://cloud.mediusflow.com *.ivalua.com https://ivalua.com https://saabgroup.com *.saabgroup.com https://env04-pre.ivalua.app https://hansa.saab.com https://www.proceedo.net 'self' 'unsafe-inline'; fra
strict-transport-security: max-age=31536000; includeSubDomains; preload