diff.li - dns.ninja

πŸ›‘οΈDomain Reputation CheckBlocklist, phishing & malware statusβ†’

diff.li

DNSSEC⚠️ Not signed
A2606:4700:3033::ac43:c021πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A2606:4700:3037::6815:51f4πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A104.21.81.244Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
A172.67.192.33πŸ‡ΊπŸ‡Έ Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US βœ“ In HTTPS hints
NScloe.ns.cloudflare.com ⭐
A2606:4700:50::adf5:3a56πŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcloe.ns.cloudflare.com
A2803:f800:50::6ca2:c056πŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRcloe.ns.cloudflare.com
A2a06:98c1:50::ac40:2056πŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRcloe.ns.cloudflare.com
A108.162.192.86πŸ‡ΊπŸ‡Έ Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcloe.ns.cloudflare.com
A172.64.32.86πŸ‡ΊπŸ‡Έ Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcloe.ns.cloudflare.com
A173.245.58.86πŸ‡ΊπŸ‡Έ Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRcloe.ns.cloudflare.com
NSguss.ns.cloudflare.com
A2606:4700:58::adf5:3bacπŸ‡ΊπŸ‡Έ Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguss.ns.cloudflare.com
A2803:f800:50::6ca2:c1acπŸ‡¨πŸ‡· Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRguss.ns.cloudflare.com
A2a06:98c1:50::ac40:21acπŸ‡ΊπŸ‡Έ Cloudflare2a06:98c1:50::/45
PTRguss.ns.cloudflare.com
A108.162.193.172πŸ‡ΊπŸ‡Έ Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguss.ns.cloudflare.com
A172.64.33.172πŸ‡ΊπŸ‡Έ Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguss.ns.cloudflare.com
A173.245.59.172πŸ‡ΊπŸ‡Έ Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRguss.ns.cloudflare.com
MXmx.hover.com.cust.hostedemail.com ⭐
A216.40.42.4πŸ‡¨πŸ‡¦ TUCOWS216.40.32.0/20 Tucows International
PTRmx.hostedemail.com
HTTPSHTTP/3, HTTP/2 βœ“ hints match
IPv4 hints104.21.81.244, 172.67.192.33
IPv6 hints2606:4700:3033::ac43:c021, 2606:4700:3037::6815:51f4
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=246, name=cloudflare-ech.com
SOAcloe.ns.cloudflare.comdns@cloudflare.com serial=2415279256

li

DNSSECπŸ”’ Signed (DS record present)
NSa.nic.li ⭐
NSb.nic.li
NSd.nic.li
NSe.nic.li
NSf.nic.li
SOAa.nic.lidns-operation@switch.ch 2026-09-28 #4

Same first word

Similar names

Previous names

Next names

DNS History

7 records (7 active, 0 former)

NScloe.ns.cloudflare.comguss.ns.cloudflare.comMXmx.hover.com.cust.hostedemail.comA104.21.81.244172.67.192.332606:4700:3033::ac43:c0212606:4700:3037::6815:51f4
●NScloe.ns.cloudflare.com2026-09-19 β†’ 2026-09-28 Β· 2 obs
● 2026-09-19 04:57:48
● 2026-09-28 00:32:50
●NSguss.ns.cloudflare.com2026-09-19 β†’ 2026-09-28 Β· 2 obs
● 2026-09-19 04:57:48
● 2026-09-28 00:32:50
●MXmx.hover.com.cust.hostedemail.com2026-09-19 β†’ 2026-09-28 Β· 2 obs
● 2026-09-19 04:57:48
● 2026-09-28 00:32:50
●A104.21.81.2442026-09-19 β†’ 2026-09-28 Β· 2 obs
● 2026-09-19 04:57:48
● 2026-09-28 00:32:50
●A172.67.192.332026-09-19 β†’ 2026-09-28 Β· 2 obs
● 2026-09-19 04:57:48
● 2026-09-28 00:32:50
●A2606:4700:3033::ac43:c0212026-09-19 β†’ 2026-09-28 Β· 2 obs
● 2026-09-19 04:57:48
● 2026-09-28 00:32:50
●A2606:4700:3037::6815:51f42026-09-19 β†’ 2026-09-28 Β· 2 obs
● 2026-09-19 04:57:48
● 2026-09-28 00:32:50

πŸ” DNS Trace

πŸ“‹ Delegation Chain

ZoneNameserversGlue
lia.nic.li, b.nic.li, d.nic.li, e.nic.li...10 records
diff.liguss.ns.cloudflare.com, cloe.ns.cloudflare.com-

βœ… Authoritative Response

Server:108.162.193.172

NS records: guss.ns.cloudflare.com, cloe.ns.cloudflare.com

πŸ”’ DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for diff.li (unsigned zone)

⏱️ Timing

Total: 2920ms | Queries: -

πŸ“„ Records

TypeCountSample Data
A2104.21.81.244, 172.67.192.33
AAAA22606:4700:3033::ac43:c021, 2606:4700:3037::6815:51f4
NS2cloe.ns.cloudflare.com, guss.ns.cloudflare.com
MX1mx.hover.com.cust.hostedemail.com (pri:
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1cloe.ns.cloudflare.com dns.cloudflare.co

πŸ“Œ Glue Records Collected

Total: 10

In-bailiwick: 10 (a.nic.li, a.nic.li, b.nic.li...)

Analysis

IP Addresses

diff.li points to the four IP addresses 104.21.81.244, 172.67.192.33, 2606:4700:3033::ac43:c021 and 2606:4700:3037::6815:51f4.

iwskc.cc, 92793.net, comoloewrutoewq.xyz and two other host names share IP numbers with diff.li.

Name Servers

The NS records for diff.li delegate to cloe.ns.cloudflare.com and guss.ns.cloudflare.com.

diff.li uses the same name servers as several other domains β€” among them zeuscore.online, test-club.com, crazpetfood.asia and two more.

The name servers of diff.li overlap at least partially with those of other domains β€” among them eternalcdn.com, xiyantv44.cfd, minichefrecipes.com and two more.

The name servers emerie.ns.cloudflare.com, darl.ns.cloudflare.com and norman.ns.cloudflare.com are commonly seen alongside these name servers.

Hostnames that resolve to 6 IP addresses:

cloe.ns.cloudflare.com maps to 108.162.192.86, 172.64.32.86, 173.245.58.86 and 3 additional IP addresses.

guss.ns.cloudflare.com maps to 108.162.193.172, 172.64.33.172, 173.245.59.172 and 3 additional IP addresses.

Mail Servers

Mail for diff.li is handled by a single mail server, mx.hover.com.cust.hostedemail.com.

diff.li uses an identical mail server configuration to several other domains β€” among them remedylandscaping.com, findlaytuffy.com, aasiconsulting.com and two more.

mx.hover.com.cust.hostedemail.com resolves to 216.40.42.4 and no other IP number.