`only3.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3034::6815:48f0^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::ac43:9be8^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.72.240^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.155.232^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`google-site-verification=--G0he8Sp0vDcxRjkQQCiODM5aAArkgW8nrNwKe62G0`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.72.240, 172.67.155.232
		IPv6 hints	2606:4700:3034::6815:48f0, 2606:4700:3037::ac43:9be8
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=193, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2411030981

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785784606

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

only3.win

DNS History

11 records (11 active, 0 former)

●NSelmo.ns.cloudflare.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●NSullis.ns.cloudflare.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●MXeforward1.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●MXeforward2.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●MXeforward3.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●MXeforward4.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●MXeforward5.registrar-servers.com2026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●A104.21.72.2402026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●A172.67.155.2322026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●A2606:4700:3034::6815:48f02026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

●A2606:4700:3037::ac43:9be82026-08-02 → 2026-08-03 · 2 obs

● 2026-08-02 07:10:04
● 2026-08-03 19:25:40

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	a.nic.win, ns2.dns.nic.win, c.nic.win, ns3.dns.nic.win...	12 records
only3.win	ullis.ns.cloudflare.com, elmo.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.194.127

NS records: ullis.ns.cloudflare.com, elmo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for only3.win (unsigned zone)

⏱️ Timing

Total: 768ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.72.240, 172.67.155.232`
AAAA	2	`2606:4700:3034::6815:48f0, 2606:4700:3037::ac43:9be8`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	2	`google-site-verification=--G0he8Sp0vDcxR, v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.win, a.nic.win, ns2.dns.nic.win...)

Analysis

IP Addresses

only3.win points to the four IP addresses 104.21.72.240, 172.67.155.232, 2606:4700:3034::6815:48f0 and 2606:4700:3037::ac43:9be8.

zxked.top, chukiteopty.com, ocrb.ru and two other host names share IP numbers with only3.win.

Name Servers

only3.win is served by two delegated name servers, elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

only3.win uses the same name servers as several other domains — among them 20only.win, 18only.win, onlywin.game and two more.

The name servers of only3.win overlap at least partially with those of other domains — among them mommunity.in, fivelife.pl, vadiweb.com and two more.

These name servers commonly appear in combination with the name servers ximena.ns.cloudflare.com.

Hostnames that resolve to 6 IP addresses:

elmo.ns.cloudflare.com carries IP addresses 108.162.193.163, 172.64.33.163 and 173.245.59.163, with 3 other addresses beyond those.

ullis.ns.cloudflare.com carries IP addresses 108.162.194.127, 162.159.38.127 and 172.64.34.127, with 3 other addresses beyond those.

Mail Servers

only3.win has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

only3.win has at least partial mail server overlap with other domains such as shipcomet.net, boxnewelstore.com, doopnet.cloud and two more.

The mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com are commonly seen alongside these mail servers.

Hosts with just one IP address:

eforward1.registrar-servers.com points to the IP address 162.255.118.51.

eforward2.registrar-servers.com points to the IP address 162.255.118.52.

eforward3.registrar-servers.com points to the IP address 162.255.118.51.

eforward4.registrar-servers.com points to the IP address 162.255.118.52.

eforward5.registrar-servers.com points to the IP address 162.255.118.51.

The host names eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com each resolve to 162.255.118.51.

These two host names — eforward2.registrar-servers.com and eforward4.registrar-servers.com — each point to 162.255.118.52 IP addresses.

only3.win - robtex.com

only3.win

win

Same first word

DNS History

🔍 DNS Trace

📋 Delegation Chain

✅ Authoritative Response

🔒 DNSSEC Status

⏱️ Timing

📄 Records

📌 Glue Records Collected

Analysis

IP Addresses

Name Servers

Mail Servers

`only3.win`

`win`