`li.finance`

DNSSEC	🔒 Signed (DS record present)
A	2606:4700:3032::ac43:83eb^{🇺🇸 Cloudflare2606:4700:3032::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::6815:c1e^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.64.80.1^{🇺🇸 Cloudflare172.64.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ⚠ Not in HTTPS hints
NS	`aurora.ns.cloudflare.com` ⭐
		A	2606:4700:50::a29f:266e^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aurora.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c26e^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`aurora.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:226e^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`aurora.ns.cloudflare.com`
		A	108.162.194.110^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aurora.ns.cloudflare.com`
		A	162.159.38.110^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aurora.ns.cloudflare.com`
		A	172.64.34.110^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`aurora.ns.cloudflare.com`
NS	`zeus.ns.cloudflare.com`
		A	2606:4700:58::adf5:3bf9^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zeus.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1f9^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`zeus.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21f9^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`zeus.ns.cloudflare.com`
		A	108.162.193.249^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zeus.ns.cloudflare.com`
		A	172.64.33.249^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zeus.ns.cloudflare.com`
		A	173.245.59.249^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`zeus.ns.cloudflare.com`
MX	`aspmx.l.google.com` ⭐
		A	2607:f8b0:4004:c19::1b^{🇺🇸 Google2607:f8b0:4004::/48}
			PTR	`bk-in-f27.1e100.net`
		A	172.253.62.27^{🇺🇸 Google172.253.62.0/24}
			PTR	`bc-in-f27.1e100.net`
MX	`alt1.aspmx.l.google.com`⁽⁵⁾
		A	2607:f8b0:4003:c30::1b^{🇺🇸 Google2607:f8b0:4003::/48}
			PTR	`yutulis-in-f27.1e100.net`
		A	74.125.27.26^{🇺🇸 Google74.125.27.0/24}
			PTR	`yutulis-in-f26.1e100.net`
MX	`alt2.aspmx.l.google.com`⁽⁵⁾
		A	2607:f8b0:4001:c70::1a^{🇺🇸 Google2607:f8b0:4001::/48}
			PTR	`yucbful-in-f26.1e100.net`
		A	192.178.209.26^{🇺🇸 Google192.178.209.0/24}
			PTR	`yucbful-in-f26.1e100.net`
MX	`alt3.aspmx.l.google.com`⁽¹⁰⁾
		A	2607:f8b0:4024:c0d::1b^{🇺🇸 Google2607:f8b0::/32}
			PTR	`mj-in-f27.1e100.net`
		A	192.178.152.26^{🇺🇸 Google192.178.152.0/24}
			PTR	`mj-in-f26.1e100.net`
MX	`alt4.aspmx.l.google.com`⁽¹⁰⁾
		A	2607:f8b0:4023:403::1a^{🇺🇸 Google2607:f8b0::/32}
			PTR	`gg-in-f26.1e100.net`
		A	142.250.96.27^{🇺🇸 Google142.250.96.0/24}
			PTR	`gg-in-f27.1e100.net`
TXT	`atlassian-domain-verification=FmAfpI8wza7IDt224CvgvnyX7HaOw8FmkhFfvH8YSGckQoX...`
TXT	`google-site-verification=DgB4SEosoZNzuKf0WzDHOGOk84PBGSuqp_iCmKattzY`
TXT	`google-site-verification=X5Et8L2uiokOKIMOStcW6Ctw9t-QN4qA_pVlFV2YQgI`
TXT	`protonmail-verification=635f689b2b656dbce5bba89103b0079441a50412`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com include:_spf.google.com ~all`
HTTPS	HTTP/3, HTTP/2 ⚠ 1 unhinted📌 2 extra
		IPv4	104.21.12.30, 172.67.131.235
		IPv6	2606:4700:3032::ac43:83eb, 2606:4700:3034::6815:c1e
SOA	`aurora.ns.cloudflare.com`dns@cloudflare.com serial=2398643129

Same first word

li.web.tr

li.ac

li.pl

li.co.nz

li.com

li.plus

li.nl

li.fi

li.co.id

li.co.th

li.si

li.taipei

li.co

li.fyi

li.lib.ms.us

li.gg

li.works

li.s3-website-us-east-1.amazonaws.com

li.co.uk

li.quest

li.vin

li.cc

li.house

li.productions

li.tl

li.com.ua

li.dk

li.com.pk

li.cl

li.st

li.vc

li.s3.amazonaws.com

li.no

li.mba

li

li.lt

li.se

li.media

li.fr

li.tv

li.rs

li.chat

li.cx

li.nu

li.io

li.com.mx

li.hn

li.net

li.be

li.kiev.ua

li.auto

li.cm

li.care

li.li

li.al

li.ws

li.s3-eu-west-1.amazonaws.com

li.gs

li.guide

li.my

li.bet

li.org

li.is

li.finance

li.gov.lv

li.at

li.ca

li.hu

li.de

li.cr

li.mn

li.md

li.ee

li.dental

li.tc

li.ly

li.ru

li.lv

li.ph

li.ma

li.cz

li.me

Similar names

il.si

il

il.lt

il.co.za

il.us.com

il.dev

il.pc.it

il.fr

il.gl

il.net

il.by

il.ph

il.wroc.pl

il.nl

il.ru

il.co.at

il.cn

il.com

il.email

il.ink

il.gs

il.if.ua

il.com.br

il.waw.pl

il.ie

il.cz

il.dk

il.lv

il.ac.mz

il.no

il.abbott

il.cl

il.mk

il.tv

il.s3-eu-west-1.amazonaws.com

il.com.tw

il.kz

il.co.uk

il.uy

il.tc

il.gov

il.cx

il.ro

il.my

il.im

il.chat

il.s3-website.eu-central-1.amazonaws.com

DNS History

18 records (10 active, 8 former)

●NSaurora.ns.cloudflare.com2026-02-14 → 2026-03-18 · 2 obs

● 2026-02-14 17:06:52
● 2026-03-18 13:20:18

●NSzeus.ns.cloudflare.com2026-02-14 → 2026-03-18 · 2 obs

● 2026-02-14 17:06:52
● 2026-03-18 13:20:18

●MXalt1.aspmx.l.google.com2026-02-14 → 2026-03-18 · 2 obs

● 2026-02-14 17:06:52
● 2026-03-18 13:20:18

●MXalt2.aspmx.l.google.com2026-02-14 → 2026-03-18 · 2 obs

● 2026-02-14 17:06:52
● 2026-03-18 13:20:18

●MXalt3.aspmx.l.google.com2026-02-14 → 2026-03-18 · 2 obs

● 2026-02-14 17:06:52
● 2026-03-18 13:20:18

●MXalt4.aspmx.l.google.com2026-02-14 → 2026-03-18 · 2 obs

● 2026-02-14 17:06:52
● 2026-03-18 13:20:18

●MXaspmx.l.google.com2026-02-14 → 2026-03-18 · 2 obs

● 2026-02-14 17:06:52
● 2026-03-18 13:20:18

○A104.21.12.302026-02-14 → 2026-03-18 · 14 obs

● 2026-02-14 17:06:52
○ 2026-02-14 23:02:06
○ 2026-02-21 07:29:04
● 2026-02-22 17:32:08
○ 2026-02-25 21:42:22
○ 2026-03-01 23:14:34
● 2026-03-02 02:37:12
● 2026-03-07 22:10:50
○ 2026-03-14 12:07:24
● 2026-03-14 17:06:34
○ 2026-03-17 20:51:24
● 2026-03-18 05:05:08
○ 2026-03-18 13:20:14
○ 2026-03-18 13:20:18

●A172.64.80.12026-03-18 → 2026-03-18 · 3 obs

○ 2026-03-18 05:05:08
● 2026-03-18 13:20:14
● 2026-03-18 13:20:18

○A172.67.131.2352026-02-14 → 2026-03-18 · 14 obs

○A188.114.96.02026-02-14 → 2026-03-17 · 13 obs

○ 2026-02-14 17:06:52
● 2026-02-14 23:02:06
● 2026-02-21 07:29:04
○ 2026-02-22 17:32:08
● 2026-02-25 21:42:22
● 2026-03-01 23:14:34
○ 2026-03-02 02:37:12
○ 2026-03-07 22:10:50
● 2026-03-14 12:07:24
○ 2026-03-14 17:06:34
● 2026-03-17 20:51:24
○ 2026-03-18 05:05:08
○ 2026-03-18 13:20:18

○A188.114.97.02026-02-14 → 2026-03-17 · 13 obs

●A2606:4700:3032::ac43:83eb2026-02-14 → 2026-03-18 · 13 obs

●A2606:4700:3034::6815:c1e2026-02-14 → 2026-03-18 · 13 obs

○A2a06:98c1:3120::2026-02-14 → 2026-03-17 · 13 obs

○ 2026-02-14 17:06:52
● 2026-02-14 23:02:06
○ 2026-02-21 07:29:04
○ 2026-02-22 17:32:08
● 2026-02-25 21:42:22
● 2026-02-28 14:32:16
○ 2026-03-01 23:14:34
○ 2026-03-07 22:10:50
● 2026-03-14 12:07:24
○ 2026-03-14 17:06:34
● 2026-03-17 20:51:24
○ 2026-03-18 05:05:08
○ 2026-03-18 13:20:18

○A2a06:98c1:3120::42026-02-21 → 2026-03-01 · 7 obs

○ 2026-02-14 23:02:06
● 2026-02-21 07:29:04
○ 2026-02-22 17:32:08
○ 2026-02-28 14:32:16
● 2026-03-01 23:14:34
○ 2026-03-02 02:37:12
○ 2026-03-18 13:20:18

○A2a06:98c1:3121::2026-02-14 → 2026-03-17 · 13 obs

○A2a06:98c1:3121::42026-02-21 → 2026-03-01 · 7 obs

○ 2026-02-14 23:02:06
● 2026-02-21 07:29:04
○ 2026-02-22 17:32:08
○ 2026-02-28 14:32:16
● 2026-03-01 23:14:34
○ 2026-03-02 02:37:12
○ 2026-03-18 13:20:18

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
finance	v0n3.nic.finance, v2n1.nic.finance, v0n1.nic.finance, v0n2.nic.finance...	-
li.finance	zeus.ns.cloudflare.com, aurora.ns.cloudflare.com	-

✅ Authoritative Response

Server: 108.162.194.110

NS records: zeus.ns.cloudflare.com, aurora.ns.cloudflare.com

🔒 DNSSEC Status

❌ Bogus (DNSSEC validation failed)

Validation error at finance: Error: DNS query timeout: 161.232.10.10 for DNSKEY finance

⏱️ Timing

Total: 3564ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.131.235, 104.21.12.30`
AAAA	2	`2606:4700:3032::ac43:83eb, 2606:4700:3034::6815:c1e`
NS	2	`aurora.ns.cloudflare.com, zeus.ns.cloudflare.com`
MX	5	`aspmx.l.google.com (pri: 1), alt3.aspmx.l.google.com (pri: 10)...`
TXT	5	`atlassian-domain-verification=FmAfpI8wza, google-site-verification=DgB4SEosoZNzuKf...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`aurora.ns.cloudflare.com dns.cloudflare.`

Analysis

IP Addresses

li.finance points to IPs: 2606:4700:3032::ac43:83eb, 2606:4700:3034::6815:c1e and 172.64.80.1.

Other host names, for instance www.livecasinogo.ca, dobrestrony.info, danjohnston.net, 098f0c691ec2.a1a13fdb651d.098f0c691ec2.098f0c691ec2.098f0c691ec2.098f0c691ec2.098f0c691ec2.098f0c691ec2.a1a13fdb651d.098f0c691ec2.a1a13fdb651d.a1a13fdb651d.098f0c691ec2.a1a13fdb651d.098f0c691ec2.a1a13fdb651d.cotrministry.com and fwmas.info share IP numbers with li.finance.

Name Servers

Two name servers aurora.ns.cloudflare.com and zeus.ns.cloudflare.com are delegated to li.finance.

li.finance uses the same name server configuration as other domains, such as inetbetcasino1.com, alshing.com, li.fi, li.quest and philippzentner.de.

li.finance at least partially shares name servers with other domains such as bonushighroller.top, plumber.cheap, custhelp.nl, agiledistributed.com and vitarost.hu.

these name servers are commonly used with the name servers rustam.ns.cloudflare.com.

Host names with six IP numbers: Host name aurora.ns.cloudflare.com points to 2606:4700:50::a29f:266e, 2803:f800:50::6ca2:c26e, 2a06:98c1:50::ac40:226e, 108.162.194.110, 162.159.38.110 and 172.64.34.110; host name zeus.ns.cloudflare.com points to 2606:4700:58::adf5:3bf9, 2803:f800:50::6ca2:c1f9, 2a06:98c1:50::ac40:21f9, 108.162.193.249, 172.64.33.249 and 173.245.59.249.

Mail Servers

li.finance is handled by five mail servers: aspmx.l.google.com, alt1.aspmx.l.google.com, alt2.aspmx.l.google.com, alt3.aspmx.l.google.com and alt4.aspmx.l.google.com.

li.finance shares mail servers with other domains at least in part, for instance stoccasa.com, ns500754.ns500742.ns500731.ns500671.ns500731.ns500742.ns500731.ns500671.ns500688.ns500688.ns500688.ns500649.ns500291.ns500671.ns500649.tenderladiesbz.com, ns500742.ns500731.ns500754.ns500671.ns500731.ns500731.ns500671.ns500688.ns500678.ns500688.ns500649.ns500678.ns500291.ns500131.lustychickser.com, ns500698.ns500758.ns500759.ns500758.ns500698.ns500698.ns500735.ns500736.ns500736.ns500698.ns500708.ns500576.ns500698.ns500576.ns500576.ns500652.trackreceptor.com and fusionplastics.com.au.

These mail servers are often used together with aspmx2.googlemail.com, aspmx3.googlemail.com, aspmx4.googlemail.com and aspmx5.googlemail.com.

Two IPs per host name:

aspmx.l.google.com points to: 2607:f8b0:4004:c19::1b and 172.253.62.27

alt1.aspmx.l.google.com points to: 2607:f8b0:4003:c30::1b and 74.125.27.26

alt2.aspmx.l.google.com points to: 2607:f8b0:4001:c70::1a and 192.178.209.26

alt3.aspmx.l.google.com points to: 2607:f8b0:4024:c0d::1b and 192.178.152.26

alt4.aspmx.l.google.com points to: 2607:f8b0:4023:403::1a and 142.250.96.27

Pattern: left IDs ascend by 9 (12, 21, 30, 39, 48); each pair of targets ascend by 9 (15/18, 24/27, 33/36, 42/45, 51/54)

li.finance - robtex.com

`li.finance`

`finance`

Same first word

Similar names

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

Analysis

IP Addresses

Name Servers

Mail Servers

	DNSSEC	🔒 Signed (DS record present)
	NS	`v0n0.nic.finance` ⭐
	NS	`v0n1.nic.finance`
	NS	`v0n2.nic.finance`
	NS	`v0n3.nic.finance`
	NS	`v2n0.nic.finance`
	NS	`v2n1.nic.finance`
	SOA	`v0n0.nic.finance`hostmaster@donuts.email serial=1773839299