toldst.dk

HTML metadata

Title

Kun lovlige varer over grænsen

Description

Toldstyrelsen beskytter det danske samfund og det europæiske marked mod ulovlige varer. Samtidig sikrer vi, at borgere og virksomheder betaler den korrekte told.

Language

da-dk

Canonical

https://toldst.dk

Translations

en

Open Graph

url: https://toldst.dk
title: Kun lovlige varer over grænsen
locale: da-dk
site name: Toldstyrelsen | toldst.dk
description: Toldstyrelsen beskytter det danske samfund og det europæiske marked mod ulovlige varer. Samtidig sikrer vi, at borgere og virksomheder betaler den korrekte told.
locale:alternate: en_us

Technology

CDN: Azure Front Door
CMS: Next.js
JS framework: Next.js

Third-party hosts loaded (2)

policy.app.cookieinformation.com×1
www.linkedin.com×1

Social

DNS records live

NS

df-ns01.skat.dk
df-ns02.skat.dk
df-ns03.skat.dk
df-ns04.skat.dk
ns1-auth.csc.dk
ns2-auth.csc.dk

MX

10 toldst-dk.v-v1.mx.microsoft

TXT

SKAT
Toldstyrelsen
skatteforvaltningen.azurewebsites.net

Verified for

Apple
GlobalSign
Google
Microsoft 365
Miro

Email authentication strong

SPF

v=spf1 ip4:147.29.150.227 ip4:185.150.75.24 ip4:207.54.71.162 ip4:207.54.72.99 include:spf.protection.outlook.com include:_spf.anpdm.com -all

strict (-all)

DMARC

v=DMARC1; p=reject; rua=mailto:fd0c97ad@in.mailhardener.com; ruf=mailto:fd0c97ad@in.mailhardener.com

policy: reject (enforced)

DKIM

selector1: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uHuifJbxFvYSSVVhZx01g655ZJQ9QSePcZgaVg5Pq+iJle+4inQt5RtGvgIw0DoX0YoOh9lbhAMck…
selector2: v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFNz6uWgKj3S8xZO02ebXdpZ9qyfhOLBlxkZyB27ZjGlQDvKT0a1lljhn+Wr699EaZRKVb8P1erfYq…

selectors probed

Certificate (current)

GlobalSign RSA OV SSL CA 2018

from 2025-10-29 to 2026-11-24

Expires in 177 days

Full certificate history on crt.sh ↗

HTTP security headers

Header hygiene 85/100 Checked live page: https://toldst.dk/

present

strict-transport-security
content-security-policy
x-content-type-options
referrer-policy
permissions-policy

findings

CSP uses wildcard sources
missing frame protection

Header values

referrer-policy: origin-when-cross-origin
permissions-policy: camera=(),display-capture=(),fullscreen=*,geolocation=(),microphone=()
x-content-type-options: nosniff
content-security-policy: default-src 'self'; base-uri 'self'; child-src https://policy.app.cookieinformation.com blob:; connect-src 'self' *.cookieinformation.com http://prod-dxp-cms-3cd-service.line3.svc.cluster.local:8000/ undefined http://api-service.api:9000/ undefined undefined dpm.demdex.net *.sc.omtrdc.net https://udviklingsogforenk.tt.omtrdc.net *.kaltura.com *.readspeaker.com https://ufst.piwik.pro https://ufst.containers.piwik.pro https://dkd-opslag-duplaapi-main.rke-nprd-06.k8s.internal https://api.cludo.com https://supchat.skat.supwizapp.com wss://supchat.skat.supwizapp.com https://js.monitor.azure.com https://westeurope-5.in.applicationinsights.azure.com https://info.skat.dk/ https://rofusweb.spillemyndigheden.dk/ https://appserver.awork.one; font-src 'self' data:; frame-ancestors 'self' https://sktst.dk https://info.skat.dk; frame-src 'self' https://policy.app.cookieinformation.com *.kaltura.com https://skat.dk https://info.skat.dk/; img-src 'self' http://prod-dxp-cms-3cd-service.line3.svc.cluste
strict-transport-security: max-age=31536000; includeSubDomains