# dhd.dk

> Domains, Hosts and DNS for the .dk zone: DNS records, hosting, mail, DNSSEC, registrar and zone-change data for every .dk domain, collected by continuous scans. Free and read-only, no key required.

Per-domain data reflects the latest scan, not a live query; every API/MCP result carries `meta.as_of`.

## MCP server

- [MCP endpoint](https://www.dhd.dk/mcp): Streamable HTTP, stateless JSON-RPC over POST, no authentication. Read-only; never triggers live scans.
- [Server card](https://www.dhd.dk/.well-known/mcp/server-card.json): transport, capabilities and full tool schemas.

Tools:

- `lookup_domain`: Current DNS profile of a .dk domain from its latest scan: NS (+IPs, ASN, PTR), A/AAAA, MX, TXT/SPF/DMARC, CAA, DNSSEC verdict, SOA, mail/web hosting. meta.last_checked is when a scanner last confirmed the zone; meta.expired_at is set once the domain left the zone. data.www_vs_apex compares www.<domain> with the bare domain (verdict same|network|www_missing|apex_missing|neither, addresses + ASNs of both; current probe, latest scan only). Pass scan_id for a historical scan.
- `domain_history`: Scan history of a domain (newest first, up to 50): when it was scanned and record counts per scan.
- `domain_timeline`: Change timeline of a domain: entering/leaving the zone, registrar moves, WHOIS status/expiry changes, NS changes, delegation (ok/lame/deactivated), DNSSEC, mail and web hosting changes.
- `reverse_lookup`: Which .dk domains use a given nameserver, mail server, IP, CIDR, ASN, ISP, country, registrar, etc. (current state). by=cidr matches every address inside the block for IPv4 /16 and IPv6 /32 or narrower (meta.match=contains); a wider block only matches an identical GeoLite2 block (exact_block). Paged; meta.count is capped at 100000.
- `leaderboard`: Zone-wide top lists: hosting ASNs, nameservers, mail servers, countries, IPs, SRV/autodiscover targets, the DNS hall of fame, dangling www CNAMEs.
- `market_changes`: Who is gaining or losing .dk domains over the last 30 days: hosting ASNs (asn), nameservers (ns) or registrars (reg).
- `zone_list`: Zone movement: newly registered domains (newcomers), domains that left the zone (expired), recently changed domains, zone-list revisions with added/removed counts, or wwwapex: domains whose www and bare name differ (kind=network: different ASNs; www_missing: only the bare domain resolves; apex_missing: only www resolves).
- `nameserver_profile`: Probe profile of an authoritative nameserver: AXFR/IXFR open, ANY handling, glue, CHAOS version, and data.protocols: protocol support (TCP, EDNS + version negotiation + unknown options, NSID, cookies, TCP keepalive, ECS, extended errors, ZONEVERSION, error reporting, refusing recursion, DoT, DoH; null until probed).

## JSON API

- [API index](https://www.dhd.dk/api/v1): self-describing endpoint list (the MCP tools map onto these endpoints)
- [API documentation](https://www.dhd.dk/?tool=api): endpoints, parameters, response envelope

## Pages

- [Domain lookup](https://www.dhd.dk/?q=example.dk): `?q=<domain>` shows a domain's DNS profile
- [Zone statistics](https://www.dhd.dk/?tool=stats)
- [Insights](https://www.dhd.dk/?tool=insights): DNSSEC algorithms, mail platforms, web hosting, SPF lint and more
- [Newcomers](https://www.dhd.dk/?tool=newcomers): newly registered .dk domains

## Optional

- [Sitemap](https://www.dhd.dk/sitemap.xml)