`9only.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3037::6815:39c0^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:a5d2^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.57.192^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.165.210^{🇺🇸 Cloudflare172.67.160.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.57.192, 172.67.165.210
		IPv6 hints	2606:4700:3037::6815:39c0, 2606:4700:3037::ac43:a5d2
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=64, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2410982954

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785766352

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

9only.win

Similar names

only9.win

only9.com

DNS History

11 records (11 active, 0 former)

●NSelmo.ns.cloudflare.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●NSullis.ns.cloudflare.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●MXeforward1.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●MXeforward2.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●MXeforward3.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●MXeforward4.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●MXeforward5.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●A104.21.57.1922026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●A172.67.165.2102026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●A2606:4700:3037::6815:39c02026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

●A2606:4700:3037::ac43:a5d22026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 01:49:36
● 2026-08-03 15:17:20

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	a.nic.win, ns2.dns.nic.win, c.nic.win, ns3.dns.nic.win...	12 records
9only.win	elmo.ns.cloudflare.com, ullis.ns.cloudflare.com	-

✅ Authoritative Response

Server:162.159.38.127

NS records: elmo.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for 9only.win (unsigned zone)

⏱️ Timing

Total: 397ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.57.192, 172.67.165.210`
AAAA	2	`2606:4700:3037::ac43:a5d2, 2606:4700:3037::6815:39c0`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.win, a.nic.win, ns2.dns.nic.win...)

Analysis

IP Addresses

9only.win resolves to four IP addresses: 104.21.57.192, 172.67.165.210, 2606:4700:3037::6815:39c0 and 2606:4700:3037::ac43:a5d2.

Two other host names, along with jamesgillispie.com, flussodesign.com and paramediccoach.com, also share IP numbers with 9only.win.

Name Servers

9only.win uses two name servers for its delegation: elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

9only.win shares its NS records with other domains, for example only18.win, 5only.win, only9.win and two others.

9only.win partially shares its NS delegation with several other domains, including covere.dk, poolsharkh2o.com, instantcybertraining.pro and two others.

These name servers regularly co-occur with the name servers tessa.ns.cloudflare.com, adi.ns.cloudflare.com and ximena.ns.cloudflare.com.

DNS names with 6 IP addresses:

Hostname elmo.ns.cloudflare.com directs to 108.162.193.163, 172.64.33.163 and 173.245.59.163 along with 3 other IP addresses.

Hostname ullis.ns.cloudflare.com directs to 108.162.194.127, 162.159.38.127 and 172.64.34.127 along with 3 other IP addresses.

Mail Servers

9only.win is handled by five mail servers: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between 9only.win and other domains, including veggycard.com, deltronix.info, dirtytrees.com and two others.

The mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com regularly co-occur with these mail servers.

Host names that point to one IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.