NIC.lk

NIC.lk operates as the administrator of the Sri Lankan country‑code top‑level domain (.lk). It is responsible for the management of the .lk namespace. The organisation’s role as the national domain administrator was highlighted during a security incident in early 2021. NIC.lk’s duties include maintaining the registry for the .lk top‑level domain. It also ensures that .lk domain names remain resolvable through the domain name system.

On 6 February 2021, NIC.lk reported that a hacktivist group had poisoned DNS records for multiple Sri Lankan domains, causing users to be redirected to a webpage conveying social grievances. High‑profile domains such as Google.lk and Oracle.lk were among those affected by the redirection. NIC.lk acknowledged the compromise publicly and stated that it had mitigated the attack and restored normal service within a few hours. The national telecommunications regulator also confirmed the occurrence of the DNS poisoning, although it did not disclose the total number of impacted domains. The incident demonstrated NIC.lk’s ability to detect and respond to DNS‑based threats promptly. As the manager of the .lk ccTLD, NIC.lk holds a distinct position in Sri Lanka’s internet ecosystem. The source material does not provide details on NIC.lk’s ownership or any parent‑subsidiary relationships.