🔄 Reverse NS Lookup

The nameserver ns1.dns.services appears in the delegation of 7,512 .dk domains in our dataset — 0.57% of every scanned .dk domain. The full list is below — here is how those domains look under the hood.

On the DNSSEC side, 4,206 (56.0%) validate as secure — below the zone-wide average of 64.0%, while 3,141 (41.8%) are unsigned, and 22 (0.3%) currently fail validation outright (bogus) — a further 143 come back indeterminate.

One thing worth flagging: 100 of these domains (1.3%) look like lame delegations — the .dk registry still points them here, but this nameserver doesn't answer authoritatively for the zone, which usually means the hosting was cancelled and the delegation was left dangling.

Response time: across 7,412 timed domains, our resolver needed 60 ms on average to answer an A query and 56 ms for an NS query. Per nameserver set below.

Times are the scanner's own lookups through its resolver on each domain's latest scan, so they include resolver overhead; compare sets with each other rather than reading them as raw authoritative round-trip times.

in-addr.arpa / ip6.arpa zones delegated to ns1.dns.services, found from the SOA of the reverse name of each IPv4 /24 behind the zone's websites (and any CIDR page viewed), so the zone is the real delegation point, at whatever prefix length it sits. A /24 whose reverse delegation is broken (SERVFAIL) is not credited to anyone.