Every .dk domain with a nameserver whose address has the PTR name 12.27.36.192.in-addr.arpa. Data comes from our own scanners, which re-resolve every .dk domain in the zone roughly once a week.