lean.ltd - dns.ninja

🛡️Domain Reputation CheckBlocklist, phishing & malware status

lean.ltd

DNSSEC⚠️ Not signed
A2606:4700:3030::ac43:8ebc🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A2606:4700:3036::6815:1b88🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A104.21.27.136Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
A172.67.142.188🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US ✓ In HTTPS hints
NShans.ns.cloudflare.com
A2606:4700:58::adf5:3baf🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
A2803:f800:50::6ca2:c1af🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRhans.ns.cloudflare.com
A2a06:98c1:50::ac40:21af🇺🇸 Cloudflare2a06:98c1:50::/45
PTRhans.ns.cloudflare.com
A108.162.193.175🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
A172.64.33.175🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
A173.245.59.175🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRhans.ns.cloudflare.com
NSkarina.ns.cloudflare.com
A2606:4700:50::adf5:3ab2🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkarina.ns.cloudflare.com
A2803:f800:50::6ca2:c0b2🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L
PTRkarina.ns.cloudflare.com
A2a06:98c1:50::ac40:20b2🇺🇸 Cloudflare2a06:98c1:50::/45
PTRkarina.ns.cloudflare.com
A108.162.192.178🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkarina.ns.cloudflare.com
A172.64.32.178🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkarina.ns.cloudflare.com
A173.245.58.178🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US
PTRkarina.ns.cloudflare.com
MXmx10.antispam.mailspamprotection.com
A34.149.79.66🇺🇸 Google34.148.0.0/14
PTR66.79.149.34.bc.googleusercontent.com
MXmx20.antispam.mailspamprotection.com(20)
A34.120.156.61🇺🇸 Google34.120.0.0/14
PTR61.156.120.34.bc.googleusercontent.com
MXmx30.antispam.mailspamprotection.com(30)
A34.111.121.216🇺🇸 Google34.108.0.0/14
PTR216.121.111.34.bc.googleusercontent.com
TXTv=spf1 +a +mx include:lean.ltd.spf.auto.dnssmarthost.net ~all
HTTPSHTTP/3, HTTP/2 ✓ hints match
IPv4 hints104.21.27.136, 172.67.142.188
IPv6 hints2606:4700:3030::ac43:8ebc, 2606:4700:3036::6815:1b88
ECHX25519, HKDF-SHA256 + AES-128-GCM draft, id=199, name=cloudflare-ech.com
SOAhans.ns.cloudflare.comdns@cloudflare.com serial=2409857558

ltd

DNSSEC🔒 Signed (DS record present)
NSv0n0.nic.ltd
NSv0n1.nic.ltd
NSv0n2.nic.ltd
NSv0n3.nic.ltd
NSv2n0.nic.ltd
NSv2n1.nic.ltd
SOAv0n0.nic.ltdhostmaster@donuts.email serial=1786785783
⚠️ On DNS blocklist: spam-tlds

Same first word

Similar names

DNS History

18 records (9 active, 9 former)

2017201820192020202120222023202420252026NShans.ns.cloudflare.comkarina.ns.cloudflare.comns0.lcn.comns1.lcn.comns1.siteground.netns2.lcn.comns2.siteground.netMXmx10.antispam.mailspamprotection.commx20.antispam.mailspamprotection.commx30.antispam.mailspamprotection.commailforward.lcn.comA104.21.27.136172.67.142.1882606:4700:3030::ac43:8ebc2606:4700:3036::6815:1b8834.2.30.7137.220.9.12294.126.40.154
NShans.ns.cloudflare.com2026-07-21 → 2026-08-15 · 3 obs
○ 2026-06-24 20:55:46
● 2026-07-21 23:23:50
● 2026-08-15 09:37:34
NSkarina.ns.cloudflare.com2026-07-21 → 2026-08-15 · 3 obs
○ 2026-06-24 20:55:46
● 2026-07-21 23:23:50
● 2026-08-15 09:37:34
NSns0.lcn.com2016-12-10 → 2017-10-04 · 4 obs
● 2016-12-10 21:43:10
● 2017-10-04 04:43:54
○ 2026-06-24 20:55:46
○ 2026-08-15 09:37:34
NSns1.lcn.com2016-12-10 → 2017-10-04 · 4 obs
● 2016-12-10 21:43:10
● 2017-10-04 04:43:54
○ 2026-06-24 20:55:46
○ 2026-08-15 09:37:34
NSns1.siteground.net2026-06-24 → 2026-06-24 · 4 obs
○ 2017-10-04 04:43:54
● 2026-06-24 20:55:46
○ 2026-07-21 23:23:50
○ 2026-08-15 09:37:34
NSns2.lcn.com2016-12-10 → 2017-10-04 · 4 obs
● 2016-12-10 21:43:10
● 2017-10-04 04:43:54
○ 2026-06-24 20:55:46
○ 2026-08-15 09:37:34
NSns2.siteground.net2026-06-24 → 2026-06-24 · 4 obs
○ 2017-10-04 04:43:54
● 2026-06-24 20:55:46
○ 2026-07-21 23:23:50
○ 2026-08-15 09:37:34
MXmailforward.lcn.com2016-12-10 → 2017-10-04 · 4 obs
● 2016-12-10 21:43:10
● 2017-10-04 04:43:54
○ 2026-06-24 20:55:46
○ 2026-08-15 09:37:34
MXmx10.antispam.mailspamprotection.com2026-06-24 → 2026-08-15 · 3 obs
○ 2017-10-04 04:43:54
● 2026-06-24 20:55:46
● 2026-08-15 09:37:34
MXmx20.antispam.mailspamprotection.com2026-06-24 → 2026-08-15 · 3 obs
○ 2017-10-04 04:43:54
● 2026-06-24 20:55:46
● 2026-08-15 09:37:34
MXmx30.antispam.mailspamprotection.com2026-06-24 → 2026-08-15 · 3 obs
○ 2017-10-04 04:43:54
● 2026-06-24 20:55:46
● 2026-08-15 09:37:34
A104.21.27.1362026-07-21 → 2026-08-15 · 3 obs
○ 2026-06-24 20:55:46
● 2026-07-21 23:23:50
● 2026-08-15 09:37:34
A172.67.142.1882026-07-21 → 2026-08-15 · 3 obs
○ 2026-06-24 20:55:46
● 2026-07-21 23:23:50
● 2026-08-15 09:37:34
A2606:4700:3030::ac43:8ebc2026-07-21 → 2026-08-15 · 3 obs
○ 2026-06-24 20:55:46
● 2026-07-21 23:23:50
● 2026-08-15 09:37:34
A2606:4700:3036::6815:1b882026-07-21 → 2026-08-15 · 3 obs
○ 2026-06-24 20:55:46
● 2026-07-21 23:23:50
● 2026-08-15 09:37:34
A34.2.30.712026-06-24 → 2026-06-24 · 4 obs
○ 2017-10-04 04:43:54
● 2026-06-24 20:55:46
○ 2026-07-21 23:23:50
○ 2026-08-15 09:37:34
A37.220.9.1222017-10-04 → 2017-10-04 · 4 obs
○ 2016-12-10 21:43:10
● 2017-10-04 04:43:54
○ 2026-06-24 20:55:46
○ 2026-08-15 09:37:34
A94.126.40.1542016-12-10 → 2016-12-10 · 3 obs
● 2016-12-10 21:43:10
○ 2017-10-04 04:43:54
○ 2026-08-15 09:37:34

🔍 DNS Trace

📋 Delegation Chain

ZoneNameserversGlue
ltdv2n1.nic.ltd, v2n0.nic.ltd, v0n0.nic.ltd, v0n2.nic.ltd...12 records
lean.ltdkarina.ns.cloudflare.com, hans.ns.cloudflare.com-

✅ Authoritative Response

Server:173.245.59.175

NS records: karina.ns.cloudflare.com, hans.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for lean.ltd (unsigned zone)

⏱️ Timing

Total: 764ms | Queries: -

📄 Records

TypeCountSample Data
A2104.21.27.136, 172.67.142.188
AAAA22606:4700:3036::6815:1b88, 2606:4700:3030::ac43:8ebc
NS2hans.ns.cloudflare.com, karina.ns.cloudflare.com
MX3mx10.antispam.mailspamprotection.com (pr, mx20.antispam.mailspamprotection.com (pr...
TXT1v=spf1 +a +mx include:lean.ltd.spf.auto.
HTTPS1{"priority":1,"target":".","alpn":["h3",
SOA1hans.ns.cloudflare.com dns.cloudflare.co

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (v0n0.nic.ltd, v0n1.nic.ltd, v0n2.nic.ltd...)

Analysis

IP Addresses

lean.ltd has four IP addresses: 104.21.27.136, 172.67.142.188, 2606:4700:3030::ac43:8ebc and 2606:4700:3036::6815:1b88.

Additional host names — posthastepharmacy.com.cdn.cloudflare.net, pro(0x736578).today, cnhorizon.com and two others — share IP numbers with lean.ltd.

Name Servers

lean.ltd has two authoritative name servers — hans.ns.cloudflare.com and karina.ns.cloudflare.com.

lean.ltd shares its name server setup with other domains, including plan-ops.org, rvbuddy.com, qlnn.net and two others.

lean.ltd has at least partial name server overlap with other domains, such as mokimaru.com, nex4.net, goz24-diplom.top and two others.

It is common to see these name servers used together with name servers brenda.ns.cloudflare.com and elle.ns.cloudflare.com.

Host names with 6 IP numbers:

hans.ns.cloudflare.com points to 108.162.193.175, 172.64.33.175, 173.245.59.175 and 3 other IP addresses.

karina.ns.cloudflare.com points to 108.162.192.178, 172.64.32.178, 173.245.58.178 and 3 other IP addresses.

Mail Servers

lean.ltd has three mail servers: mx10.antispam.mailspamprotection.com, mx20.antispam.mailspamprotection.com and mx30.antispam.mailspamprotection.com.

lean.ltd shares mail servers — at least in part — with other domains, including ulverincovecorner.shop, wilcosidingpros.com, studionoma.com.br and two others.

Each of the three hostnames points to exactly one IP address: mx10.antispam.mailspamprotection.com points to 34.149.79.66, mx20.antispam.mailspamprotection.com points to 34.120.156.61 and mx30.antispam.mailspamprotection.com points to 34.111.121.216.