`cheapwinner.com`

DNSSEC	⚠️ Not signed
A	2606:4700:3031::6815:54e2^{🇺🇸 Cloudflare2606:4700:3031::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:c5b8^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.84.226^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.197.184^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`linda.ns.cloudflare.com` ⭐
		A	2606:4700:50::adf5:3afa^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c0fa^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`linda.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:20fa^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`linda.ns.cloudflare.com`
		A	108.162.192.250^{🇺🇸 Cloudflare108.162.192.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
		A	172.64.32.250^{🇺🇸 Cloudflare172.64.32.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
		A	173.245.58.250^{🇺🇸 Cloudflare173.245.58.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`linda.ns.cloudflare.com`
NS	`rick.ns.cloudflare.com`
		A	2606:4700:58::adf5:3b8b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rick.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c18b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rick.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:218b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rick.ns.cloudflare.com`
		A	108.162.193.139^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rick.ns.cloudflare.com`
		A	172.64.33.139^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rick.ns.cloudflare.com`
		A	173.245.59.139^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rick.ns.cloudflare.com`
MX	`mx1.cheapwinner.com` ⭐
		A	5.9.232.246^{🇩🇪 Hetzner5.9.0.0/16 HETZNER-RZ-FKS-BLK5}
			PTR	`static.246.232.9.5.clients.your-server.de`
TXT	`google-site-verification=895jyXm4SOhef6QvW268yNFlpmfYh0NymNiXN0e2V1s`
TXT	`v=spf1 -all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.84.226, 172.67.197.184
		IPv6 hints	2606:4700:3031::6815:54e2, 2606:4700:3034::ac43:c5b8
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=85, name=cloudflare-ech.com
SOA	`linda.ns.cloudflare.com`dns@cloudflare.com serial=2410620056

`com`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a.gtld-servers.net` ⭐
	NS	`b.gtld-servers.net`
	NS	`c.gtld-servers.net`
	NS	`d.gtld-servers.net`
	NS	`e.gtld-servers.net`
	NS	`f.gtld-servers.net`
	NS	`g.gtld-servers.net`
	NS	`h.gtld-servers.net`
	NS	`i.gtld-servers.net`
	NS	`j.gtld-servers.net`
	NS	`k.gtld-servers.net`
	NS	`l.gtld-servers.net`
	NS	`m.gtld-servers.net`
	SOA	`a.gtld-servers.net`nstld@verisign-grs.com serial=1785218812

rank #864569 globally
rank #374171 in the tld
WOT: SUSPICIOUS (24/100)

Subdomains

mx1.cheapwinner.com

Same first word

cheapwinner.com

DNS History

9 records (7 active, 2 former)

●NSlinda.ns.cloudflare.com2026-05-13 → 2026-07-28 · 2 obs

● 2026-05-13 04:42:10
● 2026-07-28 06:35:52

●NSrick.ns.cloudflare.com2026-05-13 → 2026-07-28 · 2 obs

● 2026-05-13 04:42:10
● 2026-07-28 06:35:52

●MXmx1.cheapwinner.com2026-05-13 → 2026-07-28 · 2 obs

● 2026-05-13 04:42:10
● 2026-07-28 06:35:52

●A104.21.84.2262026-05-13 → 2026-07-28 · 2 obs

● 2026-05-13 04:42:10
● 2026-07-28 06:35:52

●A172.67.197.1842026-05-13 → 2026-07-28 · 2 obs

● 2026-05-13 04:42:10
● 2026-07-28 06:35:52

●A2606:4700:3031::6815:54e22026-07-28 → 2026-07-28 · 3 obs

○ 2026-05-13 04:42:10
● 2026-07-28 05:01:40
● 2026-07-28 06:35:52

○A2606:4700:3033::ac43:c5b82026-05-13 → 2026-05-13 · 3 obs

● 2026-05-13 04:42:10
○ 2026-07-28 05:01:40
○ 2026-07-28 06:35:52

●A2606:4700:3034::ac43:c5b82026-07-28 → 2026-07-28 · 3 obs

○ 2026-05-13 04:42:10
● 2026-07-28 05:01:40
● 2026-07-28 06:35:52

○A2606:4700:3037::6815:54e22026-05-13 → 2026-05-13 · 3 obs

● 2026-05-13 04:42:10
○ 2026-07-28 05:01:40
○ 2026-07-28 06:35:52

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
com	l.gtld-servers.net, g.gtld-servers.net, a.gtld-servers.net, m.gtld-servers.net...	-
cheapwinner.com	rick.ns.cloudflare.com, linda.ns.cloudflare.com	12 records

✅ Authoritative Response

Server:108.162.193.139

NS records: rick.ns.cloudflare.com, linda.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for cheapwinner.com (unsigned zone)

⏱️ Timing

Total: 636ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.84.226, 172.67.197.184`
AAAA	2	`2606:4700:3031::6815:54e2, 2606:4700:3034::ac43:c5b8`
NS	2	`linda.ns.cloudflare.com, rick.ns.cloudflare.com`
MX	1	`mx1.cheapwinner.com (pri: 10)`
TXT	2	`google-site-verification=895jyXm4SOhef6Q, v=spf1 -all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`linda.ns.cloudflare.com dns.cloudflare.c`

📌 Glue Records Collected

Total: 12

Out-of-bailiwick: 12 (rick.ns.cloudflare.com, rick.ns.cloudflare.com, rick.ns.cloudflare.com...)

Analysis

Hierarchy

The domain mx1.cheapwinner.com falls under the parent cheapwinner.com.

IP Addresses

cheapwinner.com directs to four IP numbers, which are 104.21.84.226, 172.67.197.184, 2606:4700:3031::6815:54e2 and 2606:4700:3034::ac43:c5b8.

meilleures-pompes-funebres.fr, easyfunctioncall.com, wbhb-adguard.pro plus two other host names have IP numbers in common with cheapwinner.com.

Name Servers

DNS delegation for cheapwinner.com points to two name servers: linda.ns.cloudflare.com and rick.ns.cloudflare.com.

The name server configuration of cheapwinner.com is shared with other domains, for instance polysemie.com, toprehabnearme.com, align-pilates.lt and two others.

At least some of cheapwinner.com's name servers are shared with other domains, for example silxy.com, papercut.com.hk, 1-bet.fr and two more.

These name servers tend to be deployed in combination with the name servers jarred.ns.cloudflare.com and trevor.ns.cloudflare.com.

Hosts with 6 IP addresses each:

linda.ns.cloudflare.com has IP addresses 108.162.192.250, 172.64.32.250 and 173.245.58.250, plus 3 other.

rick.ns.cloudflare.com has IP addresses 108.162.193.139, 172.64.33.139 and 173.245.59.139, plus 3 other.

Mail Servers

cheapwinner.com uses one mail server — mx1.cheapwinner.com.

cheapwinner.com uses the same mail servers as other domains, including ottopc.com.

mx1.cheapwinner.com has exactly one IP number: 5.9.232.246.

cheapwinner.com - robtex.com

cheapwinner.com

com

Subdomains

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

Hierarchy

IP Addresses

Name Servers

Mail Servers

`cheapwinner.com`

`com`