`onlyfake.org`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::ac43:93ab^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::6815:21b0^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.33.176^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.147.171^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`colin.ns.cloudflare.com` ⭐
		A	2606:4700:58::a29f:2c4b^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`colin.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c34b^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`colin.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:234b^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`colin.ns.cloudflare.com`
		A	108.162.195.75^{🇺🇸 Cloudflare108.162.195.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`colin.ns.cloudflare.com`
		A	162.159.44.75^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`colin.ns.cloudflare.com`
		A	172.64.35.75^{🇺🇸 Cloudflare172.64.35.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`colin.ns.cloudflare.com`
NS	`rosemary.ns.cloudflare.com`
		A	2606:4700:50::a29f:264d^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rosemary.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c24d^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`rosemary.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:224d^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`rosemary.ns.cloudflare.com`
		A	108.162.194.77^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rosemary.ns.cloudflare.com`
		A	162.159.38.77^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rosemary.ns.cloudflare.com`
		A	172.64.34.77^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`rosemary.ns.cloudflare.com`
MX	`mail.protonmail.ch` ⭐
		A	176.119.200.128^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mail.protonmail.ch`
		A	185.70.42.128^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mail.protonmail.ch`
		A	185.205.70.128^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mail.protonmail.ch`
MX	`mailsec.protonmail.ch`⁽²⁰⁾
		A	176.119.200.129^{🇨🇭 Proton176.119.200.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.70.42.129^{🇨🇭 Proton185.70.42.0/24}
			PTR	`mailsec.protonmail.ch`
		A	185.205.70.129^{🇫🇷 Proton185.205.70.0/24}
			PTR	`mailsec.protonmail.ch`
TXT	`protonmail-verification=13abcb9d7589cdf8b9ed35485c874aa0c7271bf9`
TXT	`v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4	104.21.33.176, 172.67.147.171
		IPv6	2606:4700:3033::ac43:93ab, 2606:4700:3036::6815:21b0
SOA	`colin.ns.cloudflare.com`dns@cloudflare.com serial=2398018205

`org`

	DNSSEC	🔒 Signed (DS record present)
	NS	`a0.org.afilias-nst.info` ⭐ ⚠️ Not in parent delegation
	NS	`a2.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`b0.org.afilias-nst.org`
	NS	`b2.org.afilias-nst.org`
	NS	`c0.org.afilias-nst.info` ⚠️ Not in parent delegation
	NS	`d0.org.afilias-nst.org`
	SOA	`a0.org.afilias-nst.info`hostmaster@donuts.email serial=1774385526

rank #795582 globally
rank #58487 in the tld

PTR for

12.238.222.31.in-addr.arpa

Same first word

onlyfake.com

onlyfake.org

Similar names

fakeonly.com

DNS History

17 records (8 active, 9 former)

●NScolin.ns.cloudflare.com2026-02-26 → 2026-03-24 · 2 obs

● 2026-02-26 09:05:54
● 2026-03-24 21:00:00

●NSrosemary.ns.cloudflare.com2026-02-26 → 2026-03-24 · 2 obs

● 2026-02-26 09:05:54
● 2026-03-24 21:00:00

●MXmail.protonmail.ch2026-03-05 → 2026-03-24 · 2 obs

● 2026-03-05 00:24:48
● 2026-03-24 21:00:00

●MXmailsec.protonmail.ch2026-03-05 → 2026-03-24 · 2 obs

● 2026-03-05 00:24:48
● 2026-03-24 21:00:00

●A104.21.33.1762026-03-15 → 2026-03-24 · 7 obs

○ 2026-03-05 16:57:50
● 2026-03-15 01:11:52
○ 2026-03-16 04:11:30
● 2026-03-23 02:20:02
○ 2026-03-23 12:35:30
● 2026-03-24 20:59:58
● 2026-03-24 21:00:00

●A172.67.147.1712026-03-15 → 2026-03-24 · 7 obs

○ 2026-03-05 16:57:50
● 2026-03-15 01:11:52
○ 2026-03-16 04:11:30
● 2026-03-23 02:20:02
○ 2026-03-23 12:35:30
● 2026-03-24 20:59:58
● 2026-03-24 21:00:00

○A188.114.96.02026-03-05 → 2026-03-23 · 9 obs

○ 2026-02-26 09:05:54
● 2026-03-05 00:24:48
● 2026-03-05 16:57:50
○ 2026-03-15 01:11:52
● 2026-03-16 04:11:30
○ 2026-03-23 02:20:02
● 2026-03-23 12:35:30
○ 2026-03-24 20:59:58
○ 2026-03-24 21:00:00

○A188.114.96.42026-02-26 → 2026-02-26 · 3 obs

● 2026-02-26 09:05:54
○ 2026-03-05 00:24:48
○ 2026-03-24 21:00:00

○A188.114.97.02026-03-05 → 2026-03-23 · 9 obs

○A188.114.97.42026-02-26 → 2026-02-26 · 3 obs

● 2026-02-26 09:05:54
○ 2026-03-05 00:24:48
○ 2026-03-24 21:00:00

○A2606:4700:130:436c:6f75:6466:6c61:72652026-03-23 → 2026-03-23 · 4 obs

○ 2026-03-16 04:11:30
● 2026-03-23 02:20:02
○ 2026-03-23 12:35:30
○ 2026-03-24 21:00:00

●A2606:4700:3033::ac43:93ab2026-03-05 → 2026-03-24 · 7 obs

○ 2026-03-05 00:24:48
● 2026-03-05 16:57:50
● 2026-03-15 01:11:52
○ 2026-03-16 04:11:30
○ 2026-03-23 12:35:30
● 2026-03-24 20:59:58
● 2026-03-24 21:00:00

●A2606:4700:3036::6815:21b02026-03-05 → 2026-03-24 · 7 obs

○ 2026-03-05 00:24:48
● 2026-03-05 16:57:50
● 2026-03-15 01:11:52
○ 2026-03-16 04:11:30
○ 2026-03-23 12:35:30
● 2026-03-24 20:59:58
● 2026-03-24 21:00:00

○A2a06:98c1:3120::2026-02-26 → 2026-03-23 · 9 obs

● 2026-02-26 09:05:54
● 2026-03-05 00:24:48
○ 2026-03-05 16:57:50
○ 2026-03-15 01:11:52
● 2026-03-16 04:11:30
○ 2026-03-23 02:20:02
● 2026-03-23 12:35:30
○ 2026-03-24 20:59:58
○ 2026-03-24 21:00:00

○A2a06:98c1:3120::42026-02-26 → 2026-03-24 · 2 obs

○ 2026-02-26 09:05:54
○ 2026-03-24 21:00:00

○A2a06:98c1:3121::2026-02-26 → 2026-03-23 · 9 obs

○A2a06:98c1:3121::42026-02-26 → 2026-03-24 · 2 obs

○ 2026-02-26 09:05:54
○ 2026-03-24 21:00:00

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
org	b2.org.afilias-nst.org, d0.org.afilias-nst.org, b0.org.afilias-nst.org	-
onlyfake.org	colin.ns.cloudflare.com, rosemary.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.35.75

NS records: colin.ns.cloudflare.com, rosemary.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for onlyfake.org (unsigned zone)

⏱️ Timing

Total: 930ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.33.176, 172.67.147.171`
AAAA	2	`2606:4700:3033::ac43:93ab, 2606:4700:3036::6815:21b0`
NS	2	`colin.ns.cloudflare.com, rosemary.ns.cloudflare.com`
MX	2	`mail.protonmail.ch (pri: 10), mailsec.protonmail.ch (pri: 20)`
TXT	2	`protonmail-verification=13abcb9d7589cdf8, v=spf1 include:_spf.protonmail.ch ~all`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`colin.ns.cloudflare.com dns.cloudflare.c`

Analysis

IP Addresses

onlyfake.org points to four IP numbers: 2606:4700:3033::ac43:93ab, 2606:4700:3036::6815:21b0, 104.21.33.176 and 172.67.147.171.

Other host names, for instance 792244.com, normbauteile.ch, artnazar.org.ua, www.degree53.com and rapidlanecourier.com share IP numbers with onlyfake.org.

Name Servers

Delegation for onlyfake.org rests with two name servers, colin.ns.cloudflare.com and rosemary.ns.cloudflare.com.

onlyfake.org shares the same name server setup as other domains, including dialablog.com, hotelnoir.com, theboxshifter.com, docviewers.com and euprivatebanking.com.

onlyfake.org at least partially shares name servers with other domains, for instance wangyishi.net, emitapass.site, notimetotrade.com, isia.be and 2893128-ledger.com.

These name servers are commonly used with laylah.ns.cloudflare.com and noor.ns.cloudflare.com.

Host names with six IP numbers: colin.ns.cloudflare.com points to: 2606:4700:58::a29f:2c4b, 2803:f800:50::6ca2:c34b, 2a06:98c1:50::ac40:234b, 108.162.195.75, 162.159.44.75 and 172.64.35.75. rosemary.ns.cloudflare.com points to: 2606:4700:50::a29f:264d, 2803:f800:50::6ca2:c24d, 2a06:98c1:50::ac40:224d, 108.162.194.77, 162.159.38.77 and 172.64.34.77.

Mail Servers

onlyfake.org is handled by two mail servers: mail.protonmail.ch and mailsec.protonmail.ch.

onlyfake.org uses the same mail server configuration as other domains, such as kobl.one, dearpeace.com, 8bitvillain.com, ipust.net and vodvisual.eu.

onlyfake.org shares mail servers with other domains at least in part, for instance lunova.ch, ajw.im, itsoma.be, estuder.ch and hybridnetworks.nz.

Host names with three IP numbers: The host name mail.protonmail.ch points to 176.119.200.128, 185.70.42.128 and 185.205.70.128; The host name mailsec.protonmail.ch points to 176.119.200.129, 185.70.42.129 and 185.205.70.129.

onlyfake.org - robtex.com

onlyfake.org

org