DK domain is behaving oddly

It seems the domain hasn't been verified yet on cloudflare yet https://whois.domaintools.com/ekspresbetalinger.dk shows the correct cloudflare nameservers.
No description
23 Replies
Martin
Martin7mo ago
One thing I have noticed is that the whois info is very concise, unlike other TLDs i've used before. Cloudflare usually verifies my .CZ domains within about 5 minutes of me registering and changing dns. On this DK domain, the changing of nameservers was done pretty quickly, I checked on https://punktum.dk after about 10 minutes, it was changed. However, on whois.domaintools.com it took about a day to update.
Martin
Martin7mo ago
It's been 3 days since the domain was registered, after many rechecks, no luck Potentially, however that issue has impacted me elsewhere (verifying via txt records on google search console, took about 30 minutes as opposed to the usual 30 seconds)
Chaika
Chaika7mo ago
oh I see opps, jumped the gun on that. They are set right in whois, but the ns servers for dk don't return them
Martin
Martin7mo ago
This issue was reported 28 minutes ago, I've had this nameserver issue for the past 3 days
Chaika
Chaika7mo ago
;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; QUESTION SECTION: ;ekspresbetalinger.dk. IN NS ;; AUTHORITY SECTION: ekspresbetalinger.dk. 300 IN NS nonexistent.punktum.dk.
Martin
Martin7mo ago
yeah no worries Where did you find this?
Martin
Martin7mo ago
No description
Chaika
Chaika7mo ago
I just queried the nameservers for dk
Martin
Martin7mo ago
That's from punktum.dk
Chaika
Chaika7mo ago
dig ns dk

;; QUESTION SECTION:
;dk. IN NS

;; ANSWER SECTION:
dk. 86400 IN NS a.nic.dk.
dk. 86400 IN NS b.nic.dk.
dk. 86400 IN NS c.nic.dk.
dk. 86400 IN NS d.nic.dk.
dk. 86400 IN NS l.nic.dk.
dk. 86400 IN NS s.nic.dk.
dig ns dk

;; QUESTION SECTION:
;dk. IN NS

;; ANSWER SECTION:
dk. 86400 IN NS a.nic.dk.
dk. 86400 IN NS b.nic.dk.
dk. 86400 IN NS c.nic.dk.
dk. 86400 IN NS d.nic.dk.
dk. 86400 IN NS l.nic.dk.
dk. 86400 IN NS s.nic.dk.
dig ns ekspresbetalinger.dk @a.nic.dk

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> ns ekspresbetalinger.dk @a.nic.dk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23036
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;ekspresbetalinger.dk. IN NS

;; AUTHORITY SECTION:
ekspresbetalinger.dk. 300 IN NS nonexistent.punktum.dk.

;; Query time: 116 msec
;; SERVER: 2001:1580:0:180d::122#53(a.nic.dk) (UDP)
;; WHEN: Thu Nov 30 16:11:38 GMT 2023
;; MSG SIZE rcvd: 83
dig ns ekspresbetalinger.dk @a.nic.dk

; <<>> DiG 9.18.19-1~deb12u1-Debian <<>> ns ekspresbetalinger.dk @a.nic.dk
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23036
;; flags: qr rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; QUESTION SECTION:
;ekspresbetalinger.dk. IN NS

;; AUTHORITY SECTION:
ekspresbetalinger.dk. 300 IN NS nonexistent.punktum.dk.

;; Query time: 116 msec
;; SERVER: 2001:1580:0:180d::122#53(a.nic.dk) (UDP)
;; WHEN: Thu Nov 30 16:11:38 GMT 2023
;; MSG SIZE rcvd: 83
I checked a few, they all seem to think the domain doesn't exist
Martin
Martin7mo ago
I've contacted the registry and hopefully they'll get back to me
Chaika
Chaika7mo ago
The whois status shows
Status: Reserved
which may be of interest
Martin
Martin7mo ago
That might be it
Chaika
Chaika7mo ago
https://help.eurodns.com/s/article/my-dk-domain-is-in-reserved-status?language=en_US
Thank you for registering your .DK domain name with us. Your registration is on hold as the .DK registry requires that the Registrant (Domain owner) validates the registration. The .DK registry asks that .DK domain names are activated within 25 days of receipt of the email confirming their reservation. Following activation, the registry will assign the name to you. If the domain is not activated within 30 days of receiving the email from the registry, the domain will be deleted by the registry. To activate your domain name, please find your user ID and PIN code in the confirmation email sent by the .DK registry. We ask that you log into your DK-Hostmaster account or sent us the login and password via the contact form from your account so that we can activated for you. We urge you to respond promptly; regrettably, if you fail to respond within the given time, the .DK registry will cancel the reservation without warning and the domain name will become available to everyone.
It's a bit weird though as usually when an action like this is taken the domain doesn't resolve at all, but ccTLDs have a bit more freedom and that seems to be the cause
bowie
bowie7mo ago
@Martin i use this to check NS propagation: https://www.whatsmydns.net/#NS/ekspresbetalinger.dk
DNS Propagation Checker - Global DNS Checker Tool
Instant DNS Propagation Check. Global DNS Propagation Checker - Check DNS records around the world.
Chaika
Chaika7mo ago
If you're debugging a ns issue I would query the tld ns rather then use that, those are recursive resolvers so you can end up with issues like the user didn't change the nameservers at their registrar, but instead at their dns host, and that would "look" correct
bowie
bowie7mo ago
that makes sense, its more of a "sanity check" to see if the issue is upstream
Chaika
Chaika7mo ago
For sure, it still has it uses. For DNSSEC issues as well, if you're using a tool like that, you'd see a few ISP Resolvers who don't check DNSSEC work and may falsely think its a propagation issue. If you dig a resolver like 1.1.1.1 or 8.8.8.8 that supports extended dns errors it would show you the error instantly. In dig we trust lol
DarkDeviL
DarkDeviL7mo ago
Just to confirm - It is the reserved state that makes the problem here, because you haven't yet activated your new domain. Exact same issue as over here: -> https://community.cloudflare.com/t/is-nameserver-check-broken/581782/7
Martin
Martin7mo ago
Awww crap, I need a danish ID to verify This'll be interesting
DarkDeviL
DarkDeviL7mo ago
Danish ID should only be mandatory, if you actually appear to be from Denmark.
Martin
Martin7mo ago
Well the registrar I used say that there is a way to do it with foreign ID, via customer support, so we shall see