lfst.dk

HTML metadata

Title: Landbrugs- og Fiskeristyrelsen - LFST
Language: da
Canonical: https://lfst.dk/

Open Graph

url: https://lfst.dk/
title: Landbrugs- og Fiskeristyrelsen

Technology

Third-party hosts loaded (2)

consent.cookiebot.eu×1
siteimproveanalytics.com×1

Social

Contact

Email

fisketegn@lfst.dk

Phone

5798000986008

DNS records live

NS

ns6.sitnet.dk
ns7.sitnet.dk

MX

Show 8 MX records

10 mx01.statens-it.dk
10 mx02.statens-it.dk
10 mx03.statens-it.dk
10 mx04.statens-it.dk
10 mx05.statens-it.dk
10 mx06.statens-it.dk
10 mx07.statens-it.dk
10 mx08.statens-it.dk

TXT

+kd5fARhvAPx9RTnyEa97VUA/wdczRuB48BMSG0Wbna0Q4rBBcr157xrx0g6n45ODsDBmFwvCsT/8o9awfH6qQ==

Verified for

Google
Microsoft 365

Email authentication strong

SPF

v=spf1 ip4:194.182.109.192/26 ip4:188.64.157.0/28 include:spf.ubivox.com ~all

softfail (~all)

DMARC

v=DMARC1; p=reject; sp=reject; rua=mailto:tcod1eh2@ag.eu.dmarcadvisor.com;

policy: reject (enforced) · sp=reject

DKIM

Show 12 DKIM selectors

default: v=DKIM1; p=
google: v=DKIM1; p=
selector1: v=DKIM1; p=
selector2: v=DKIM1; p=
k1: v=DKIM1; p=
k2: v=DKIM1; p=
mail: v=DKIM1; p=
dkim: v=DKIM1; p=
s1: v=DKIM1; p=
s2: v=DKIM1; p=
mxvault: v=DKIM1; p=
smtpapi: v=DKIM1; p=

selectors probed

Certificate (current)

Sectigo Public Server Authentication CA DV R36

from 2025-09-09 to 2026-09-10

Expires in 101 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 90/100 Checked live page: https://lfst.dk/

present

strict-transport-security
content-security-policy
x-frame-options
x-content-type-options
referrer-policy
permissions-policy

findings

CSP allows unsafe inline scripts/styles
CSP uses wildcard sources

Header values

referrer-policy: strict-origin
x-frame-options: SAMEORIGIN
permissions-policy: fullscreen=(*), accelerometer=(), camera=(), geolocation=(), gyroscope=(), magnetometer=(), microphone=(), payment=(), usb=()
x-content-type-options: NOSNIFF
content-security-policy: default-src 'self' https://* data: blob:; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://* data: blob:; style-src 'self' 'unsafe-inline' https://* data: blob:; frame-src 'self' https://*; img-src 'self' https://* data: blob: ;media-src 'self' https://* data: blob: ;font-src 'self' https://* data: blob:;frame-ancestors 'self';
strict-transport-security: max-age=31536000;