`only6.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3030::ac43:cf7d^{🇺🇸 Cloudflare2606:4700:3030::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3037::6815:2ab7^{🇺🇸 Cloudflare2606:4700:3037::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.42.183^{Cloudflare104.21.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.207.125^{🇺🇸 Cloudflare172.67.192.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.42.183, 172.67.207.125
		IPv6 hints	2606:4700:3030::ac43:cf7d, 2606:4700:3037::6815:2ab7
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=149, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2410911513

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785837027

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

only6.net

only6.win

only6.de

only6.gr

only6.cn

Similar names

6only.pt

6only.com

lyon6.com

6only.win

lyon6.fr

DNS History

17 records (11 active, 6 former)

●NSelmo.ns.cloudflare.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 06:45:06
● 2026-08-04 10:00:58

●NSullis.ns.cloudflare.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 06:45:06
● 2026-08-04 10:00:58

●MXeforward1.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 06:45:06
● 2026-08-04 10:00:58

●MXeforward2.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 06:45:06
● 2026-08-04 10:00:58

●MXeforward3.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 06:45:06
● 2026-08-04 10:00:58

●MXeforward4.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 06:45:06
● 2026-08-04 10:00:58

●MXeforward5.registrar-servers.com2026-08-02 → 2026-08-04 · 2 obs

● 2026-08-02 06:45:06
● 2026-08-04 10:00:58

●A104.21.42.1832026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-02 07:25:38
● 2026-08-04 10:00:58

●A172.67.207.1252026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-02 07:25:38
● 2026-08-04 10:00:58

○A188.114.96.02026-08-02 → 2026-08-02 · 3 obs

○ 2026-08-02 06:45:06
● 2026-08-02 07:25:38
○ 2026-08-04 10:00:58

○A188.114.96.42026-08-02 → 2026-08-02 · 3 obs

● 2026-08-02 06:45:06
○ 2026-08-02 07:25:38
○ 2026-08-04 10:00:58

○A188.114.97.02026-08-02 → 2026-08-02 · 3 obs

○ 2026-08-02 06:45:06
● 2026-08-02 07:25:38
○ 2026-08-04 10:00:58

○A188.114.97.42026-08-02 → 2026-08-02 · 3 obs

● 2026-08-02 06:45:06
○ 2026-08-02 07:25:38
○ 2026-08-04 10:00:58

●A2606:4700:3030::ac43:cf7d2026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-02 07:25:38
● 2026-08-04 10:00:58

●A2606:4700:3037::6815:2ab72026-08-04 → 2026-08-04 · 2 obs

○ 2026-08-02 07:25:38
● 2026-08-04 10:00:58

○A2a06:98c1:3120::2026-08-02 → 2026-08-02 · 2 obs

● 2026-08-02 06:45:06
○ 2026-08-04 10:00:58

○A2a06:98c1:3121::2026-08-02 → 2026-08-02 · 2 obs

● 2026-08-02 06:45:06
○ 2026-08-04 10:00:58

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	a.nic.win, ns2.dns.nic.win, c.nic.win, ns3.dns.nic.win...	-
only6.win	ullis.ns.cloudflare.com, elmo.ns.cloudflare.com	-

✅ Authoritative Response

Server:172.64.34.127

NS records: ullis.ns.cloudflare.com, elmo.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for only6.win (unsigned zone)

⏱️ Timing

Total: 669ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.42.183, 172.67.207.125`
AAAA	2	`2606:4700:3030::ac43:cf7d, 2606:4700:3037::6815:2ab7`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

Analysis

IP Addresses

only6.win directs to four IP numbers, which are 104.21.42.183, 172.67.207.125, 2606:4700:3030::ac43:cf7d and 2606:4700:3037::6815:2ab7.

mobileandfun.fr, usesite-springhub.com, goldmedialab.com plus two other host names have IP numbers in common with only6.win.

Name Servers

only6.win is delegated to two name servers: elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

The name server configuration of only6.win is shared with other domains, for instance 11only.win, rosetoy.com, 14only.win and two others.

There is at least partial name server overlap between only6.win and other domains — ariel-brill.com, gamingvictory.nl, bentoncosmetics.pl and two more among them.

These name servers are routinely deployed together with the name servers hugh.ns.cloudflare.com.

Hosts with 6 IP addresses each:

elmo.ns.cloudflare.com resolves to 108.162.193.163, 172.64.33.163, 173.245.59.163 and 3 other IP addresses.

ullis.ns.cloudflare.com resolves to 108.162.194.127, 162.159.38.127, 172.64.34.127 and 3 other IP addresses.

Mail Servers

Five mail servers handle only6.win: eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

At least some of the mail servers used by only6.win are shared with other domains: 10-geography-test.live, dao.(0x736578), gv570.com and two others among them.

These mail servers are routinely seen in conjunction with the mail servers eforward4.registrar-servers.com and eforward5.registrar-servers.com.

Host names resolving to a single IP address:

eforward1.registrar-servers.com points to 162.255.118.51.

eforward2.registrar-servers.com points to 162.255.118.52.

eforward3.registrar-servers.com points to 162.255.118.51.

eforward4.registrar-servers.com points to 162.255.118.52.

eforward5.registrar-servers.com points to 162.255.118.51.

Three host names point to 162.255.118.51: eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com.

eforward2.registrar-servers.com and eforward4.registrar-servers.com are host names that each point to 162.255.118.52 IP addresses.