`only1.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3036::ac43:befd^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:141c^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.20.28^{Cloudflare104.21.16.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.190.253^{🇺🇸 Cloudflare172.67.176.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`google-site-verification=ATIApR9eJoVaUGOPNtdRCNkEbHttEULktmrAZW7SkV8`
TXT	`google-site-verification=U6UpkVWOLVqyjEgC7cqpPlFd-4ttlOIiE1PDqylMg4I`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.20.28, 172.67.190.253
		IPv6 hints	2606:4700:3036::ac43:befd, 2606:4700:3037::6815:141c
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=62, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2411238255

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785818830

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

only1.se

only1.info

only1.app

only1.jp

only1.co.kr

only1.ie

only1.me

only1.ch

only1.online

only1.net

only1.gallery

only1.com

only1.tv

only1.org

only1.us

only1.nl

only1.it

only1.co.uk

only1.gr

only1.eu

only1.com.br

only1.io

only1.co

only1.win

only1.ir

only1.de

only1.ru

only1.com.au

Similar names

1only.it

1only.com

1only.jp

lyon1.com

lyon1.fr

1only.us

1only.win

1lyon.com

1only.de

1only.ai

lyno1.com

DNS History

15 records (11 active, 4 former)

●NSelmo.ns.cloudflare.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●NSullis.ns.cloudflare.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●MXeforward1.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●MXeforward2.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●MXeforward3.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●MXeforward4.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●MXeforward5.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●A104.21.20.282026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●A172.67.190.2532026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-01 17:44:46
● 2026-08-04 05:41:28

○A188.114.96.02026-08-01 → 2026-08-01 · 2 obs

● 2026-08-01 17:44:46
○ 2026-08-04 05:41:28

○A188.114.97.02026-08-01 → 2026-08-01 · 2 obs

● 2026-08-01 17:44:46
○ 2026-08-04 05:41:28

●A2606:4700:3036::ac43:befd2026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-01 17:44:46
● 2026-08-04 05:41:28

●A2606:4700:3037::6815:141c2026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-01 17:44:46
● 2026-08-04 05:41:28

○A2a06:98c1:3120::2026-08-01 → 2026-08-01 · 2 obs

● 2026-08-01 17:44:46
○ 2026-08-04 05:41:28

○A2a06:98c1:3121::2026-08-01 → 2026-08-01 · 2 obs

● 2026-08-01 17:44:46
○ 2026-08-04 05:41:28

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	a.nic.win, b.nic.win, c.nic.win, ns1.dns.nic.win...	12 records
only1.win	elmo.ns.cloudflare.com, ullis.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.163

NS records: elmo.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for only1.win (unsigned zone)

⏱️ Timing

Total: 619ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.190.253, 104.21.20.28`
AAAA	2	`2606:4700:3036::ac43:befd, 2606:4700:3037::6815:141c`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	3	`google-site-verification=ATIApR9eJoVaUGO, google-site-verification=U6UpkVWOLVqyjEg...`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.win, b.nic.win, c.nic.win...)

Analysis

IP Addresses

only1.win directs to four IP numbers, which are 104.21.20.28, 172.67.190.253, 2606:4700:3036::ac43:befd and 2606:4700:3037::6815:141c.

Additional host names — billionairespin-casino-gewinn.com, whdfjy.com, www.portalamlar.org and two others — share IP numbers with only1.win.

Name Servers

only1.win uses two name servers for its delegation: elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

only1.win shares its name server setup with other domains, including only5.win, 1only.win, setembro.org and two others.

There is at least partial name server overlap between only1.win and other domains — horae.co, plamus.com.br, modeltekenclub.nl and two more among them.

These name servers are routinely deployed together with the name servers ximena.ns.cloudflare.com.

Host names with 6 IP numbers:

Hostname elmo.ns.cloudflare.com directs to 108.162.193.163, 172.64.33.163 and 173.245.59.163 along with 3 other IP addresses.

Hostname ullis.ns.cloudflare.com directs to 108.162.194.127, 162.159.38.127 and 172.64.34.127 along with 3 other IP addresses.

Mail Servers

Five mail servers handle only1.win: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

only1.win shares mail servers — at least in part — with other domains, including nivad.net, compulim.com, 3v4lu4t3-4pp0intm3nt.xyz and two others.

These mail servers are frequently paired with the mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names pointing to a single IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com are host names that all point to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.