`only4.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:5c6e^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3034::ac43:c015^{🇺🇸 Cloudflare2606:4700:3034::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.92.110^{Cloudflare104.21.80.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.192.21^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.92.110, 172.67.192.21
		IPv6 hints	2606:4700:3033::6815:5c6e, 2606:4700:3034::ac43:c015
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=238, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2410996346

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785894628

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

only4.me

only4.be

only4.com

only4.online

only4.tv

only4.de

only4.win

only4.it

only4.care

only4.work

only4.cz

Similar names

lyon4.com

4only.win

4only.us

4only.com

DNS History

15 records (11 active, 4 former)

●NSelmo.ns.cloudflare.com2026-08-02 → 2026-08-05 · 2 obs

● 2026-08-02 08:14:02
● 2026-08-05 02:00:38

●NSullis.ns.cloudflare.com2026-08-02 → 2026-08-05 · 2 obs

● 2026-08-02 08:14:02
● 2026-08-05 02:00:38

●MXeforward1.registrar-servers.com2026-08-02 → 2026-08-05 · 2 obs

● 2026-08-02 08:14:02
● 2026-08-05 02:00:38

●MXeforward2.registrar-servers.com2026-08-02 → 2026-08-05 · 2 obs

● 2026-08-02 08:14:02
● 2026-08-05 02:00:38

●MXeforward3.registrar-servers.com2026-08-02 → 2026-08-05 · 2 obs

● 2026-08-02 08:14:02
● 2026-08-05 02:00:38

●MXeforward4.registrar-servers.com2026-08-02 → 2026-08-05 · 2 obs

● 2026-08-02 08:14:02
● 2026-08-05 02:00:38

●MXeforward5.registrar-servers.com2026-08-02 → 2026-08-05 · 2 obs

● 2026-08-02 08:14:02
● 2026-08-05 02:00:38

●A104.21.92.1102026-08-05 → 2026-08-05 · 3 obs

○ 2026-08-02 08:14:02
● 2026-08-05 02:00:36
● 2026-08-05 02:00:38

●A172.67.192.212026-08-05 → 2026-08-05 · 3 obs

○ 2026-08-02 08:14:02
● 2026-08-05 02:00:36
● 2026-08-05 02:00:38

○A188.114.96.02026-08-02 → 2026-08-02 · 3 obs

● 2026-08-02 08:14:02
○ 2026-08-05 02:00:36
○ 2026-08-05 02:00:38

○A188.114.97.02026-08-02 → 2026-08-02 · 3 obs

● 2026-08-02 08:14:02
○ 2026-08-05 02:00:36
○ 2026-08-05 02:00:38

●A2606:4700:3033::6815:5c6e2026-08-05 → 2026-08-05 · 3 obs

○ 2026-08-02 08:14:02
● 2026-08-05 02:00:36
● 2026-08-05 02:00:38

●A2606:4700:3034::ac43:c0152026-08-05 → 2026-08-05 · 3 obs

○ 2026-08-02 08:14:02
● 2026-08-05 02:00:36
● 2026-08-05 02:00:38

○A2a06:98c1:3120::2026-08-02 → 2026-08-02 · 3 obs

● 2026-08-02 08:14:02
○ 2026-08-05 02:00:36
○ 2026-08-05 02:00:38

○A2a06:98c1:3121::2026-08-02 → 2026-08-02 · 3 obs

● 2026-08-02 08:14:02
○ 2026-08-05 02:00:36
○ 2026-08-05 02:00:38

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	c.nic.win, b.nic.win, a.nic.win, ns3.dns.nic.win...	12 records
only4.win	elmo.ns.cloudflare.com, ullis.ns.cloudflare.com	-

✅ Authoritative Response

Server:173.245.59.163

NS records: elmo.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for only4.win (unsigned zone)

⏱️ Timing

Total: 2156ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.92.110, 172.67.192.21`
AAAA	2	`2606:4700:3034::ac43:c015, 2606:4700:3033::6815:5c6e`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.win, b.nic.win, c.nic.win...)

Analysis

IP Addresses

only4.win directs to four IP numbers, which are 104.21.92.110, 172.67.192.21, 2606:4700:3033::6815:5c6e and 2606:4700:3034::ac43:c015.

funkycorner.com, buy4meuk.com, tesd-49628.testandvote.ru plus two other host names have IP numbers in common with only4.win.

Name Servers

The NS records for only4.win delegate to elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

The name server configuration of only4.win is shared with other domains, for instance 15only.win, redfootnetworks.com, only15.win and two others.

There is at least partial name server overlap between only4.win and other domains — covers.dk, bnc.ba, evalair.com and two more among them.

These name servers frequently co-occur with the name servers ximena.ns.cloudflare.com and alla.ns.cloudflare.com.

Hosts with 6 IP addresses each:

elmo.ns.cloudflare.com maps to 108.162.193.163, 172.64.33.163, 173.245.59.163 and 3 additional IP addresses.

ullis.ns.cloudflare.com maps to 108.162.194.127, 162.159.38.127, 172.64.34.127 and 3 additional IP addresses.

Mail Servers

Five mail servers handle only4.win: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

At least some of the mail servers used by only4.win are shared with other domains: referralpoker88.asia, celpip.in, dubaitoto-indonesia.de.com and two others among them.

These mail servers often appear in conjunction with the mail servers eforward5.registrar-servers.com, eforward4.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names resolving to a single IP address:

eforward1.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward2.registrar-servers.com resolves to the IP address 162.255.118.52.

eforward3.registrar-servers.com resolves to the IP address 162.255.118.51.

eforward4.registrar-servers.com resolves to the IP address 162.255.118.52.

eforward5.registrar-servers.com resolves to the IP address 162.255.118.51.

Three host names point to 162.255.118.51: eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com.

eforward2.registrar-servers.com and eforward4.registrar-servers.com each have 162.255.118.52 IP addresses.