`only5.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:920d^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3033::6815:4f8c^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.79.140^{Cloudflare104.21.64.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.146.13^{🇺🇸 Cloudflare172.67.144.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.79.140, 172.67.146.13
		IPv6 hints	2606:4700:3030::ac43:920d, 2606:4700:3033::6815:4f8c
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=162, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2410969017

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785799282

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

only5.com

only5.ru

only5.win

Similar names

5only.net

5only.win

lyon5.fr

DNS History

11 records (11 active, 0 former)

●NSelmo.ns.cloudflare.com2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●NSullis.ns.cloudflare.com2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●MXeforward1.registrar-servers.com2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●MXeforward2.registrar-servers.com2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●MXeforward3.registrar-servers.com2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●MXeforward4.registrar-servers.com2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●MXeforward5.registrar-servers.com2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●A104.21.79.1402026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●A172.67.146.132026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●A2606:4700:3030::ac43:920d2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

●A2606:4700:3033::6815:4f8c2026-08-01 → 2026-08-03 · 2 obs

● 2026-08-01 19:16:50
● 2026-08-03 23:59:16

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	a.nic.win, b.nic.win, c.nic.win, ns1.dns.nic.win...	12 records
only5.win	elmo.ns.cloudflare.com, ullis.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.33.163

NS records: elmo.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for only5.win (unsigned zone)

⏱️ Timing

Total: 367ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`172.67.146.13, 104.21.79.140`
AAAA	2	`2606:4700:3033::6815:4f8c, 2606:4700:3030::ac43:920d`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.win, b.nic.win, c.nic.win...)

Analysis

IP Addresses

only5.win directs to four IP numbers, which are 104.21.79.140, 172.67.146.13, 2606:4700:3030::ac43:920d and 2606:4700:3033::6815:4f8c.

Two other host names, along with 23win4.click, casea.se and agea.com.cn, also share IP numbers with only5.win.

Name Servers

only5.win uses two name servers for its delegation: elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

only5.win shares its NS records with other domains, for example 19only.win, yourhorsemanship.com, 20only.win and two others.

There is at least partial name server overlap between only5.win and other domains — qc52.net, gayo138k.com, thr(0x706f726e)dude.com and two more among them.

The name servers hugh.ns.cloudflare.com, ximena.ns.cloudflare.com and irma.ns.cloudflare.com are often found in combination with these name servers.

DNS names with 6 IP addresses:

Hostname elmo.ns.cloudflare.com directs to 108.162.193.163, 172.64.33.163 and 173.245.59.163 along with 3 other IP addresses.

Hostname ullis.ns.cloudflare.com directs to 108.162.194.127, 162.159.38.127 and 172.64.34.127 along with 3 other IP addresses.

Mail Servers

Five mail servers handle only5.win: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

There is at least a partial MX overlap between only5.win and other domains, including pnliafi.com.co, iaroster.com, radiumdrive.com and two others.

These mail servers are routinely seen in conjunction with the mail servers eforward5.registrar-servers.com and eforward4.registrar-servers.com.

Host names that point to one IP address:

eforward1.registrar-servers.com has the IP address 162.255.118.51.

eforward2.registrar-servers.com has the IP address 162.255.118.52.

eforward3.registrar-servers.com has the IP address 162.255.118.51.

eforward4.registrar-servers.com has the IP address 162.255.118.52.

eforward5.registrar-servers.com has the IP address 162.255.118.51.

Each of eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com resolves to 162.255.118.51.

Both eforward2.registrar-servers.com and eforward4.registrar-servers.com resolve to 162.255.118.52 IP addresses each.