.dk domains whose latest scan are unsigned — no DNSSEC (the common, expected case for most zones). See the full breakdown on the statistics page.