Every .dk domain whose TLSRPT record sends daily SMTP TLS reports to mailto:tlsrpt+Y3Z7EPS6UUTJ2WE7V6S4VAP7FX@reports.shield.wayscloud.services, which usually identifies a shared mail-security or monitoring provider. Data comes from our own scanners, which re-resolve every .dk domain in the zone roughly once a week.