`4only.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::6815:3855^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:b5b2^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.56.85^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.181.178^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.56.85, 172.67.181.178
		IPv6 hints	2606:4700:3030::6815:3855, 2606:4700:3036::ac43:b5b2
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=29, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2410913117

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785868588

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

4only.us

4only.com

4only.win

Similar names

only4.online

only4.tv

only4.de

only4.win

only4.it

only4.care

only4.work

only4.cz

lyon4.com

only4.me

only4.be

only4.com

DNS History

11 records (11 active, 0 former)

●NSelmo.ns.cloudflare.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●NSullis.ns.cloudflare.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●MXeforward1.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●MXeforward2.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●MXeforward3.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●MXeforward4.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●MXeforward5.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●A104.21.56.852026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●A172.67.181.1782026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●A2606:4700:3030::6815:38552026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

●A2606:4700:3036::ac43:b5b22026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 14:45:26
● 2026-08-04 18:41:48

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	a.nic.win, b.nic.win, c.nic.win, ns1.dns.nic.win...	-
4only.win	elmo.ns.cloudflare.com, ullis.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.193.163

NS records: elmo.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 4only.win (unsigned zone)

⏱️ Timing

Total: 429ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.181.178, 104.21.56.85`
AAAA	2	`2606:4700:3036::ac43:b5b2, 2606:4700:3030::6815:3855`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

4only.win points to the four IP addresses 104.21.56.85, 172.67.181.178, 2606:4700:3030::6815:3855 and 2606:4700:3036::ac43:b5b2.

www.firecommand.org, hianime.ms, cameronacarson.com and two other host names share IP numbers with 4only.win.

Name Servers

DNS delegation for 4only.win points to two name servers: elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

4only.win uses the same name servers as several other domains — among them keitaro-onlywin.tech, only16.win, kingdavidlodge.org and two more.

At least some of 4only.win's name servers are shared with other domains, for example nettifillari.fi, labourbooking.com, accion.work and two more.

These name servers tend to be used in conjunction with the name servers tessa.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

elmo.ns.cloudflare.com has IP addresses 108.162.193.163, 172.64.33.163 and 173.245.59.163, plus 3 other.

ullis.ns.cloudflare.com has IP addresses 108.162.194.127, 162.159.38.127 and 172.64.34.127, plus 3 other.

Mail Servers

4only.win has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

4only.win has at least partial mail server overlap with other domains such as parkingareapainting.com, nacbc.com, poetbutterfly.com and two more.

The mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com are commonly seen alongside these mail servers.

Hosts with just one IP address:

eforward1.registrar-servers.com directs to 162.255.118.51.

eforward2.registrar-servers.com directs to 162.255.118.52.

eforward3.registrar-servers.com directs to 162.255.118.51.

eforward4.registrar-servers.com directs to 162.255.118.52.

eforward5.registrar-servers.com directs to 162.255.118.51.

The host names eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com each resolve to 162.255.118.51.

Host names pointing to 162.255.118.52 IP addresses: eforward2.registrar-servers.com and eforward4.registrar-servers.com.