The nameserver ns-338.awsdns-42.com appears in the delegation of 33 .dk domains in our dataset — <0.01% of every scanned .dk domain. The full list is below — here is how those domains look under the hood.

On the DNSSEC side, 3 (9.1%) validate as secure — below the zone-wide average of 62.7%, while 23 (69.7%) are unsigned, with none failing validation outright — a further 7 come back indeterminate.

One thing worth flagging: 3 of these domains (9.1%) look like lame delegations — the .dk registry still points them here, but this nameserver doesn't answer authoritatively for the zone, which usually means the hosting was cancelled and the delegation was left dangling.