sktst.dk

HTML metadata

Title: Skattestyrelsen
Description: Skattestyrelsen hører under Skatteministeriet og skal sikre, at borgere og virksomheder betaler korrekte skatter og afgifter til tiden. Kontakt Skattestyrelsens Borger- og Virksomhedsvejledning på 72 22 18 18
Language: da-dk
Canonical: https://sktst.dk

Open Graph

url: https://sktst.dk
title: Skattestyrelsen
locale: da-dk
site name: Skattestyrelsen | sktst.dk
description: Skattestyrelsen hører under Skatteministeriet og skal sikre, at borgere og virksomheder betaler korrekte skatter og afgifter til tiden. Kontakt Skattestyrelsens Borger- og Virksomhedsvejledning på 72 22 18 18

Technology

CDN: Azure Front Door
CMS: Next.js
JS framework: Next.js

Third-party hosts loaded (4)

policy.app.cookieinformation.com×1
www.facebook.com×1
www.instagram.com×1
www.linkedin.com×1

Social

DNS records live

NS

df-ns01.skat.dk
df-ns02.skat.dk
df-ns03.skat.dk
df-ns04.skat.dk
ns1-auth.csc.dk
ns2-auth.csc.dk

MX

10 sktst-dk.t-v1.mx.microsoft

TXT

Skattestyrelsen
skatteforvaltningen.azurewebsites.net
SKAT

Verified for

Apple
GlobalSign
Google
Microsoft 365
Miro

Email authentication strong

SPF

v=spf1 ip4:147.29.150.227 ip4:185.150.75.24 ip4:207.54.71.162 ip4:207.54.72.99 include:spf.protection.outlook.com include:_spf.anpdm.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:fd0c97ad@in.mailhardener.com; ruf=mailto:fd0c97ad@in.mailhardener.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNqAOHkkFJ8GytOjIn3XlzsCea1JbvGMjiE/3xUyYOw7vhuGelU+Q5gGtxSjsz/XXEqz6TWWpW9WOV…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/eBZ/35BePTZm2iL5yMzGKLoEnj4tZRsb316L9iL0KDzj3tolLwuWIUKZDV9341rFXpJnPHo7UzhL…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-10-30 to 2026-12-01

Expires in 184 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://sktst.dk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: origin-when-cross-origin
permissions-policy: camera=(),display-capture=(),fullscreen=*,geolocation=(),microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; child-src https://policy.app.cookieinformation.com blob:; connect-src 'self' *.cookieinformation.com http://prod-dxp-cms-3cd-service.line3.svc.cluster.local:8000/ undefined http://api-service.api:9000/ undefined undefined dpm.demdex.net *.sc.omtrdc.net https://udviklingsogforenk.tt.omtrdc.net *.kaltura.com *.readspeaker.com https://ufst.piwik.pro https://ufst.containers.piwik.pro https://dkd-opslag-duplaapi-main.rke-nprd-06.k8s.internal https://api.cludo.com https://supchat.skat.supwizapp.com wss://supchat.skat.supwizapp.com https://js.monitor.azure.com https://westeurope-5.in.applicationinsights.azure.com https://info.skat.dk/ https://rofusweb.spillemyndigheden.dk/ https://appserver.awork.one; font-src 'self' data:; frame-ancestors 'self' https://sktst.dk https://info.skat.dk; frame-src 'self' https://policy.app.cookieinformation.com *.kaltura.com https://skat.dk https://info.skat.dk/; img-src 'self' http://prod-dxp-cms-3cd-service.line3.svc.cluste
strict-transport-security: max-age=31536000; includeSubDomains