defender.lk - robtex.com

defender.lk

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:c0cbπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3033::6815:2c0cπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.44.12Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.192.203πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NShenry.ns.cloudflare.com ⭐
A2606:4700:58::adf5:3bb0πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenry.ns.cloudflare.com
A2803:f800:50::6ca2:c1b0πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRhenry.ns.cloudflare.com
A2a06:98c1:50::ac40:21b0πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRhenry.ns.cloudflare.com
A108.162.193.176πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenry.ns.cloudflare.com
A172.64.33.176πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenry.ns.cloudflare.com
A173.245.59.176πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhenry.ns.cloudflare.com
NSmillie.ns.cloudflare.com
A2606:4700:50::a29f:26b5πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmillie.ns.cloudflare.com
A2803:f800:50::6ca2:c2b5πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRmillie.ns.cloudflare.com
A2a06:98c1:50::ac40:22b5πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRmillie.ns.cloudflare.com
A108.162.194.181πŸ‡ΊπŸ‡Έ Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmillie.ns.cloudflare.com
A162.159.38.181Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmillie.ns.cloudflare.com
A172.64.34.181πŸ‡ΊπŸ‡Έ Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRmillie.ns.cloudflare.com
MXlayer24.privilegeserver.com ⭐
A165.140.85.130πŸ‡ΊπŸ‡Έ TIER-NET165.140.85.0/24 Tier.Net Technologies LLC
PTRlayer24.privilegeserver.com
TXTVengadasaranya Iyer
TXTgoogle-site-verification=3H8lAyXAKikzNhYtLGpPH5VmFns3-Lc7YMN1w2NdeTY
TXTgoogle-site-verification=ECNxSDZrvQjcI8NHJyy8Sr0al5Txl0aWXD4ku5ZRRdo
TXTgoogle-site-verification=niBmnvrUyH8HTk4qrDLc2tFF5ZM98dxG_mySjMPfGm8
TXTv=spf1 +mx +a +ip4:165.140.85.130 ~all
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.44.12, 172.67.192.203
IPv6 hints2606:4700:3030::ac43:c0cb, 2606:4700:3033::6815:2c0c
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=234, name=cloudflare-ech.com
SOAhenry.ns.cloudflare.comdns@cloudflare.com serial=2410533121

lk

DNSSEC⚠️ Not signed
NSns.nic.lk ⭐
NSd.nic.lk
NSh.nic.lk
NSm.nic.lk
NSns1.ac.lk
NSp.nic.lk
NSpendragon.cs.purdue.edu ⚠️ Not in parent delegation
NSt.nic.lk
NSz.nic.lk
SOAns.nic.lkhostmaster@nic.lk serial=2020453568

Same first word

Similar names

DNS History

15 records (7 active, 8 former)

NShenry.ns.cloudflare.commillie.ns.cloudflare.comMXlayer24.privilegeserver.comA104.21.44.12172.67.192.2032606:4700:3030::ac43:c0cb2606:4700:3033::6815:2c0c188.114.96.0188.114.96.4188.114.97.0188.114.97.42606:4700:3034::ac43:c0cb2606:4700:3037::6815:2c0c2a06:98c1:3120::2a06:98c1:3121::
●NShenry.ns.cloudflare.com2026-05-12 β†’ 2026-07-31 Β· 2 obs
● 2026-05-12 04:28:48
● 2026-07-31 19:01:42
●NSmillie.ns.cloudflare.com2026-05-12 β†’ 2026-07-31 Β· 2 obs
● 2026-05-12 04:28:48
● 2026-07-31 19:01:42
●MXlayer24.privilegeserver.com2026-05-12 β†’ 2026-07-31 Β· 2 obs
● 2026-05-12 04:28:48
● 2026-07-31 19:01:42
●A104.21.44.122026-05-12 β†’ 2026-07-31 Β· 6 obs
● 2026-05-12 04:28:48
● 2026-06-13 09:50:22
β—‹ 2026-06-18 15:12:16
● 2026-06-18 15:59:38
β—‹ 2026-07-18 02:18:16
● 2026-07-31 19:01:42
●A172.67.192.2032026-05-12 β†’ 2026-07-31 Β· 6 obs
● 2026-05-12 04:28:48
● 2026-06-13 09:50:22
β—‹ 2026-06-18 15:12:16
● 2026-06-18 15:59:38
β—‹ 2026-07-18 02:18:16
● 2026-07-31 19:01:42
β—‹A188.114.96.02026-07-18 β†’ 2026-07-18 Β· 3 obs
β—‹ 2026-07-18 02:18:16
● 2026-07-18 02:50:10
β—‹ 2026-07-31 19:01:42
β—‹A188.114.96.42026-06-18 β†’ 2026-07-18 Β· 6 obs
β—‹ 2026-06-13 09:50:22
● 2026-06-18 15:12:16
β—‹ 2026-06-18 15:59:38
● 2026-07-18 02:18:16
β—‹ 2026-07-18 02:50:10
β—‹ 2026-07-31 19:01:42
β—‹A188.114.97.02026-07-18 β†’ 2026-07-18 Β· 3 obs
β—‹ 2026-07-18 02:18:16
● 2026-07-18 02:50:10
β—‹ 2026-07-31 19:01:42
β—‹A188.114.97.42026-06-18 β†’ 2026-07-18 Β· 6 obs
β—‹ 2026-06-13 09:50:22
● 2026-06-18 15:12:16
β—‹ 2026-06-18 15:59:38
● 2026-07-18 02:18:16
β—‹ 2026-07-18 02:50:10
β—‹ 2026-07-31 19:01:42
●A2606:4700:3030::ac43:c0cb2026-06-27 β†’ 2026-07-31 Β· 4 obs
β—‹ 2026-06-18 15:59:38
● 2026-06-27 14:35:20
β—‹ 2026-07-18 02:18:16
● 2026-07-31 19:01:42
●A2606:4700:3033::6815:2c0c2026-06-27 β†’ 2026-07-31 Β· 4 obs
β—‹ 2026-06-18 15:59:38
● 2026-06-27 14:35:20
β—‹ 2026-07-18 02:18:16
● 2026-07-31 19:01:42
β—‹A2606:4700:3034::ac43:c0cb2026-05-12 β†’ 2026-06-18 Β· 6 obs
● 2026-05-12 04:28:48
● 2026-06-13 09:50:22
β—‹ 2026-06-18 15:12:16
● 2026-06-18 15:59:38
β—‹ 2026-06-27 14:35:20
β—‹ 2026-07-31 19:01:42
β—‹A2606:4700:3037::6815:2c0c2026-05-12 β†’ 2026-06-18 Β· 6 obs
● 2026-05-12 04:28:48
● 2026-06-13 09:50:22
β—‹ 2026-06-18 15:12:16
● 2026-06-18 15:59:38
β—‹ 2026-06-27 14:35:20
β—‹ 2026-07-31 19:01:42
β—‹A2a06:98c1:3120::2026-06-18 β†’ 2026-07-18 Β· 5 obs
β—‹ 2026-06-13 09:50:22
● 2026-06-18 15:12:16
β—‹ 2026-06-18 15:59:38
● 2026-07-18 02:18:16
β—‹ 2026-07-31 19:01:42
β—‹A2a06:98c1:3121::2026-06-18 β†’ 2026-07-18 Β· 5 obs
β—‹ 2026-06-13 09:50:22
● 2026-06-18 15:12:16
β—‹ 2026-06-18 15:59:38
● 2026-07-18 02:18:16
β—‹ 2026-07-31 19:01:42

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
lkh.nic.lk, m.nic.lk, pendragon.cs.purdue.edu, ns1.ac.lk...15 records
defender.lkhenry.ns.cloudflare.com, millie.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.193.176

NS records: henry.ns.cloudflare.com, millie.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for defender.lk (unsigned zone)

⏱️ Timing

Total: 2286ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2172.67.192.203, 104.21.44.12
AAAA22606:4700:3030::ac43:c0cb, 2606:4700:3033::6815:2c0c
NS2henry.ns.cloudflare.com, millie.ns.cloudflare.com
MX1layer24.privilegeserver.com (pri: 0)
TXT5Vengadasaranya Iyer, google-site-verification=3H8lAyXAKikzNhY...
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1henry.ns.cloudflare.com dns.cloudflare.c

πŸ“Œ Glue Records Collected

Total: 15

In-bailiwick: 14 (d.nic.lk, h.nic.lk, m.nic.lk...)

Out-of-bailiwick: 1 (pendragon.cs.purdue.edu)

Analysis

IP Addresses

defender.lk points to the four IP addresses 104.21.44.12, 172.67.192.203, 2606:4700:3030::ac43:c0cb and 2606:4700:3033::6815:2c0c.

fortrose.info, pgprantau.org, allesrum.de and two other host names share IP numbers with defender.lk.

Name Servers

defender.lk uses two name servers for its delegation: henry.ns.cloudflare.com and millie.ns.cloudflare.com.

defender.lk uses the same name servers as several other domains β€” among them bushka.net, hub.lk, goog1e.us and two more.

There is at least partial name server overlap between defender.lk and other domains β€” relayparts.com, 83125.net, adityastudio.in and two more among them.

These name servers tend to appear in combination with the name servers zainab.ns.cloudflare.com, jade.ns.cloudflare.com, candy.ns.cloudflare.com and alex.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

Hostname henry.ns.cloudflare.com directs to 108.162.193.176, 172.64.33.176 and 173.245.59.176 along with 3 other IP addresses.

Hostname millie.ns.cloudflare.com directs to 108.162.194.181, 162.159.38.181 and 172.64.34.181 along with 3 other IP addresses.

Mail Servers

Mail for defender.lk is handled by a single mail server, layer24.privilegeserver.com.

defender.lk uses an identical mail server configuration to several other domains β€” among them autospa.lk, gk-techmedia.com, energywebring.com and two more.

Some mail servers of defender.lk are also used by other domains, notably extreme-seo.net and sharanyan.com.

layer24.privilegeserver.com directs to just one IP number, 165.140.85.130.