`only9.win`

DNSSEC	⚠️ Not signed
A	2606:4700:3033::6815:3ec2^{🇺🇸 Cloudflare2606:4700:3033::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	2606:4700:3036::ac43:8abe^{🇺🇸 Cloudflare2606:4700:3036::/48 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	104.21.62.194^{Cloudflare104.21.48.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
A	172.67.138.190^{🇺🇸 Cloudflare172.67.128.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US} ✓ In HTTPS hints
NS	`elmo.ns.cloudflare.com` ⭐
		A	2606:4700:58::adf5:3ba3^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c1a3^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`elmo.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:21a3^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`elmo.ns.cloudflare.com`
		A	108.162.193.163^{🇺🇸 Cloudflare108.162.193.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	172.64.33.163^{🇺🇸 Cloudflare172.64.33.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
		A	173.245.59.163^{🇺🇸 Cloudflare173.245.59.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`elmo.ns.cloudflare.com`
NS	`ullis.ns.cloudflare.com`
		A	2606:4700:50::a29f:267f^{🇺🇸 Cloudflare2606:4700:50::/44 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	2803:f800:50::6ca2:c27f^{🇨🇷 Cloudflare2803:f800:50::/45 LACNIC generated route6 for CloudFlare Latin America S.R.L}
			PTR	`ullis.ns.cloudflare.com`
		A	2a06:98c1:50::ac40:227f^{🇺🇸 Cloudflare2a06:98c1:50::/45}
			PTR	`ullis.ns.cloudflare.com`
		A	108.162.194.127^{🇺🇸 Cloudflare108.162.194.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	162.159.38.127^{Cloudflare162.159.32.0/20 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
		A	172.64.34.127^{🇺🇸 Cloudflare172.64.34.0/24 , Inc. 101 Townsend Street, San Francisco, California 94107, US}
			PTR	`ullis.ns.cloudflare.com`
MX	`eforward1.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward2.registrar-servers.com` ⭐
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward3.registrar-servers.com` ⭐
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
MX	`eforward4.registrar-servers.com`⁽¹⁵⁾
		A	162.255.118.52^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward2.registrar-servers.com`
MX	`eforward5.registrar-servers.com`⁽²⁰⁾
		A	162.255.118.51^{🇺🇸 NAMCHEAP-PH162.255.118.0/24 Namecheap, Inc. 11400 W. Olympic Blvd. Suite 200 Los Angeles, CA 90064 UNITED STATES}
			PTR	`eforward1.registrar-servers.com`
			PTR	`eforward3.registrar-servers.com`
TXT	`v=spf1 include:spf.efwd.registrar-servers.com ~all`
HTTPS	HTTP/3, HTTP/2 ✓ hints match
		IPv4 hints	104.21.62.194, 172.67.138.190
		IPv6 hints	2606:4700:3033::6815:3ec2, 2606:4700:3036::ac43:8abe
		ECH	X25519, HKDF-SHA256 + AES-128-GCM draft, id=158, name=cloudflare-ech.com
SOA	`elmo.ns.cloudflare.com`dns@cloudflare.com serial=2410967996

`win`

	DNSSEC	🔒 Signed (DS record present)
	NS	`ns1.dns.nic.win` ⭐
	NS	`a.nic.win`
	NS	`b.nic.win`
	NS	`c.nic.win`
	NS	`ns2.dns.nic.win`
	NS	`ns3.dns.nic.win`
	SOA	`ns1.dns.nic.win`admin@tldns.godaddy serial=1785814212

⚠️ On DNS blocklist: gambling
⚠️ On DNS blocklist: spam-tlds

Same first word

only9.win

only9.com

Similar names

9only.win

DNS History

15 records (11 active, 4 former)

●NSelmo.ns.cloudflare.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:52:26
● 2026-08-04 03:36:00

●NSullis.ns.cloudflare.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:52:26
● 2026-08-04 03:36:00

●MXeforward1.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:52:26
● 2026-08-04 03:36:00

●MXeforward2.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:52:26
● 2026-08-04 03:36:00

●MXeforward3.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:52:26
● 2026-08-04 03:36:00

●MXeforward4.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:52:26
● 2026-08-04 03:36:00

●MXeforward5.registrar-servers.com2026-08-01 → 2026-08-04 · 2 obs

● 2026-08-01 17:52:26
● 2026-08-04 03:36:00

●A104.21.62.1942026-08-04 → 2026-08-04 · 3 obs

○ 2026-08-01 17:52:26
● 2026-08-04 03:35:58
● 2026-08-04 03:36:00

●A172.67.138.1902026-08-04 → 2026-08-04 · 3 obs

○ 2026-08-01 17:52:26
● 2026-08-04 03:35:58
● 2026-08-04 03:36:00

○A188.114.96.02026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 17:52:26
○ 2026-08-04 03:35:58
○ 2026-08-04 03:36:00

○A188.114.97.02026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 17:52:26
○ 2026-08-04 03:35:58
○ 2026-08-04 03:36:00

●A2606:4700:3033::6815:3ec22026-08-04 → 2026-08-04 · 3 obs

○ 2026-08-01 17:52:26
● 2026-08-04 03:35:58
● 2026-08-04 03:36:00

●A2606:4700:3036::ac43:8abe2026-08-04 → 2026-08-04 · 3 obs

○ 2026-08-01 17:52:26
● 2026-08-04 03:35:58
● 2026-08-04 03:36:00

○A2a06:98c1:3120::2026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 17:52:26
○ 2026-08-04 03:35:58
○ 2026-08-04 03:36:00

○A2a06:98c1:3121::2026-08-01 → 2026-08-01 · 3 obs

● 2026-08-01 17:52:26
○ 2026-08-04 03:35:58
○ 2026-08-04 03:36:00

🔍 DNS Trace

📋 Delegation Chain

Zone	Nameservers	Glue
win	a.nic.win, ns2.dns.nic.win, c.nic.win, ns3.dns.nic.win...	12 records
only9.win	elmo.ns.cloudflare.com, ullis.ns.cloudflare.com	-

✅ Authoritative Response

Server:108.162.194.127

NS records: elmo.ns.cloudflare.com, ullis.ns.cloudflare.com

🔒 DNSSEC Status

⚠️ Insecure (no DNSSEC)

No DS record for only9.win (unsigned zone)

⏱️ Timing

Total: 599ms | Queries: -

📄 Records

Type	Count	Sample Data
A	2	`104.21.62.194, 172.67.138.190`
AAAA	2	`2606:4700:3036::ac43:8abe, 2606:4700:3033::6815:3ec2`
NS	2	`elmo.ns.cloudflare.com, ullis.ns.cloudflare.com`
MX	5	`eforward1.registrar-servers.com (pri: 10, eforward2.registrar-servers.com (pri: 10...`
TXT	1	`v=spf1 include:spf.efwd.registrar-server`
HTTPS	1	`{"priority":1,"target":".","alpn":["h3",`
SOA	1	`elmo.ns.cloudflare.com dns.cloudflare.co`

📌 Glue Records Collected

Total: 12

In-bailiwick: 12 (a.nic.win, a.nic.win, ns2.dns.nic.win...)

Analysis

IP Addresses

only9.win points to the four IP addresses 104.21.62.194, 172.67.138.190, 2606:4700:3033::6815:3ec2 and 2606:4700:3036::ac43:8abe.

Additional host names — mamie-nue.com, jorny.net, 101sam.com and two others — share IP numbers with only9.win.

Name Servers

only9.win has two authoritative name servers — elmo.ns.cloudflare.com and ullis.ns.cloudflare.com.

only9.win shares its name server setup with other domains, including douglassoares96menezes.workers.dev, 11only.win, rosetoy.com and two others.

There is at least partial name server overlap between only9.win and other domains — 6790080.com, melodia.ro, pulseinsightnow.com and two more among them.

Host names with 6 IP numbers:

elmo.ns.cloudflare.com points to 108.162.193.163, 172.64.33.163, 173.245.59.163 and 3 other IP addresses.

ullis.ns.cloudflare.com points to 108.162.194.127, 162.159.38.127, 172.64.34.127 and 3 other IP addresses.

Mail Servers

only9.win has five mail servers, which are eforward1.registrar-servers.com, eforward2.registrar-servers.com, eforward3.registrar-servers.com and two others.

only9.win shares mail servers — at least in part — with other domains, including thewoodfloorgallery.com, thetypicalset.com, liiigift.com and two others.

These mail servers are frequently paired with the mail servers eforward4.registrar-servers.com, eforward5.registrar-servers.com, eforward6.registrar-servers.com and eforward7.registrar-servers.com.

Host names pointing to a single IP address:

eforward1.registrar-servers.com resolves to 162.255.118.51.

eforward2.registrar-servers.com resolves to 162.255.118.52.

eforward3.registrar-servers.com resolves to 162.255.118.51.

eforward4.registrar-servers.com resolves to 162.255.118.52.

eforward5.registrar-servers.com resolves to 162.255.118.51.

eforward1.registrar-servers.com, eforward3.registrar-servers.com and eforward5.registrar-servers.com are host names that all point to 162.255.118.51.

The host names eforward2.registrar-servers.com and eforward4.registrar-servers.com both resolve to 162.255.118.52 IP addresses.