Initializing diagnostics...

⚡ Loaded from cache (2026-10-03 15:48:57 IST). 🔄 Refresh Live
🤖 AI Intelligence Summary

The domain domestika.org is registered with Arsys Internet, S.L. dba NICLINE.COM, first registered on 2001-10-22 and expires on 2033-10-22 (domain age: 24 years, 11 months). It resolves to IP address 108.159.91.17, hosted by Amazon.com, Inc.. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by Amazon RSA 2048 M04.

Domain Overview: domestika.org

Domain Registration 🌐
Active 24 years, 11 months

Expires in 7 years, 18 days · DNSSEC: Unsigned

Email Security 🛡️
SPF: Pass DKIM: Detected DMARC: Reject

Google Workspace (5 MX)

SSL Certificate 🔒
Valid Chain 82 Days Left

Issuer: Amazon RSA 2048 M04 (2 SANs)

Server & Hosting 🖥️
200 awselb/2.0

Mumbai, Maharashtra, India (IN)

🌐 Domain & Registration Identity View Full Whois Details →

Domaindomestika.org
Website TitleFavicon Online courses for creative professionals | Domestika
Registered2001-10-22
Expires2033-10-22
Remaining Validity7 years, 18 days
Domain Age24 years, 11 months
RegistrarArsys Internet, S.L. dba NICLINE.COM
Domain Statusclient transfer prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers ns-2001.awsdns-58.co.uk, ns-1329.awsdns-38.org, ns-730.awsdns-27.net, ns-27.awsdns-03.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Google Workspace
Primary Mail Server (MX) aspmx.l.google.com (Priority: 1) · 5 MX servers configured i
SPF Record (Sender Policy) Pass · 5/10 DNS Lookups · Policy: -all i
v=spf1 include:_spf.google.com include:sendgrid.net include:mail.zendesk.com ip4:147.253.209.141 ip4:147.253.209.134 include:sparkpostmail.com include:6147665.spf05.hubspotemail.net -all
DKIM Authentication Detected · Discovered: Google Workspace (google), Twilio SendGrid (Key 1) (s1), Twilio SendGrid (Key 2) (s2), Mailchimp (Key 1) (k1), Zendesk (zendesk1) i
DMARC Policy Pass (Reject) · Reports: mailto:cbd7ea92@mxtoolbox.dmarc-report.com i
v=DMARC1; p=reject; pct=100; rua=mailto:cbd7ea92@mxtoolbox.dmarc-report.com;
SMTP Port 25 Status Online (30ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software awselb/2.0 i
HTTP Status Code 200 i
Server IP (IPv4) 108.159.91.17 View Geo Details →
IPv6 Address (AAAA) Not Configured
Reverse DNS (PTR) server-108-159-91-17.pnq50.r.cloudfront.net
Server Location 📍 Mumbai, Maharashtra, India (IN)
ASN Network & ISP AS16509 (Amazon.com, Inc.)
Hosting Provider Amazon.com, Inc. i
Control Panel Not Detected i
Technology Stack Google Analytics
HTTP Security Headers 4 / 6 Active (HSTS, X-Frame, X-Content, Referrer-Policy) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) domestika.org · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerAmazon RSA 2048 M04
SSL Valid Till2026-12-25
Remaining Validity82 Days
Chain Status Valid Trusted Chain
Signature AlgorithmRSA-SHA256

Whois Ownership & Registration for domestika.org

📄 View Raw Registry Response ↓

Domain Information i

Domain NameDOMESTIKA.ORG
Expiration Date2033-10-22 07:58:34 Z
Registration Date2001-10-22 07:58:34 Z
Last Changed Date2026-08-11 23:09:27 Z

Domain Status i

  • client transfer prohibited

Registrar Information i

NameArsys Internet, S.L. dba NICLINE.COM
Abuse Emailabuse@nicline.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • ns-1329.awsdns-38.org
  • ns-2001.awsdns-58.co.uk
  • ns-27.awsdns-03.com
  • ns-730.awsdns-27.net
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: domestika.org
Registry Domain ID: REDACTED
Registrar WHOIS Server: http://whois.nicline.com
Registrar URL: http://nicline.com/whois/whois.htm
Updated Date: 2026-08-11T23:09:27Z
Creation Date: 2001-10-22T07:58:34Z
Registry Expiry Date: 2033-10-22T07:58:34Z
Registrar: Arsys Internet, S.L. dba NICLINE.COM
Registrar IANA ID: 379
Registrar Abuse Contact Email: abuse@nicline.com
Registrar Abuse Contact Phone: +34.941620100
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Name Server: ns-1329.awsdns-38.org
Name Server: ns-2001.awsdns-58.co.uk
Name Server: ns-27.awsdns-03.com
Name Server: ns-730.awsdns-27.net
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-10-03T10:18:51Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.  The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

DNS Records for domestika.org

NS Records i

NameDataCopy
domestika.org. ns-2001.awsdns-58.co.uk.
domestika.org. ns-1329.awsdns-38.org.
domestika.org. ns-730.awsdns-27.net.
domestika.org. ns-27.awsdns-03.com.

A Records i

NameDataCopy
domestika.org. 108.159.91.17
domestika.org. 108.159.91.68
domestika.org. 108.159.91.81
domestika.org. 108.159.91.129

AAAA Records i

No AAAA records found.

WWW Records (www.domestika.org) i

TypeHostValueCopy
CNAME www.domestika.org. domestika.org.
A www.domestika.org. domestika.org.
A domestika.org. 108.159.91.17
A domestika.org. 108.159.91.129
A domestika.org. 108.159.91.68
A domestika.org. 108.159.91.81

MX Records i

PriorityMail Server TargetCopy
5 alt2.aspmx.l.google.com.
1 aspmx.l.google.com.
10 aspmx2.googlemail.com.
10 aspmx3.googlemail.com.
5 alt1.aspmx.l.google.com.

TXT Records i

NameValueCopy
domestika.org. google-site-verification=rUj6XnZijtIapgUpfq6StFs8FdlpKZumMs6Qb9wOmpc
domestika.org. google-site-verification=98kqI5_EQvknyeAIF2qa1SFlc85sEO3S0WgZN8x0UHo
domestika.org. facebook-domain-verification=r4nf4t08kqn1jffzeo2fnvn89e94w6
domestika.org. atlassian-domain-verification=Y/4pJRoEqHNOIJQEM6ntnYISa1o3pS7lf1e3llbtaXv3p81yPksjZkyWKlcPzZXo
domestika.org. google-site-verification=X6H_FLPccUafXAmJuESgw57w3moyH0TaGjzmZu3imA4
domestika.org. google-site-verification=0twa-xetaw9TmoItSDbtYH9jz1tlpXQUAENR9kmVkCc
domestika.org. google-site-verification=edgCwJwDQDX9wVMepFsL0rAHOU6Y4aUuUGcntkajmh8
domestika.org. google-site-verification=SSqcgBKC6RYmn5QVcGYeEftmDnxy14l7GAMoi-ssqQo
domestika.org. facebook-domain-verification=qv7mc6d2e3qtw0ontt7wbm6og7jg9c
domestika.org. google-site-verification=lcMIFiiZEUiLj0VdP_VHdfTsoibcTag8J4xlbuIlU2I
domestika.org. _pki-validation.domestika.org=765F-C6B4-BBA2-2462-EF39-E6AB-B323-9B5F
domestika.org. google-site-verification=fJ5nFYIXcAL4LWNMJDPCWTzmmahGbi_BlsFBpJ8S49U
domestika.org. google-site-verification=-2Vzn02mByaWXC80apL6SU3pBo9l4YTO_Qi5FiC2A9U
domestika.org. stripe-verification=0d6de4db81dd08020da16348c7937607a804f762b98b5a8b3756ad27d9568d58
domestika.org. v=spf1 include:_spf.google.com include:sendgrid.net include:mail.zendesk.com ip4:147.253.209.141 ip4:147.253.209.134 include:sparkpostmail.com include:6147665.spf05.hubspotemail.net -all
domestika.org. ZOOM_verify_RGWMN5GKAUsob8hHa2pQ5X
domestika.org. stripe-verification=196f6abc57707477577bde59e4005c9c6229455872952c94d1bf646f9228c8ca
domestika.org. google-site-verification=FMrtfuZPH0OnQQO9gS1IxXlvV3XCIKiBs1Wv3l-SuQQ
domestika.org. have-i-been-pwned-verification=cd437e361652a8ec3f2059e31f5029f4
domestika.org. google-site-verification=KFHaawvROCvcTnztzWVaaCFQMynRoaF0aKjsgErTIZg
domestika.org. apple-domain-verification=kVOnVWXeZxXrTs1C
domestika.org. google-site-verification=OA4LmrVdfx2pmrufHhDLxbng-QGOC7QqSgonOwmX28o
domestika.org. google-site-verification=7j6MptVLQ9qHIsWc9BfhaEGTXjeku6ecLWoqDYbO2Pw
domestika.org. apple-domain-verification=lF4aqIEGilLm4js0
domestika.org. google-site-verification=Qb-J-w94T6bxLkNQ1wt4cdIW61rP4-Xu-abmBUEaGAw

Email Security (MX, SPF, DKIM, DMARC, SMTP) for domestika.org

Detected Email Provider
📬 Google Workspace
✓ Active MX Routing (5 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
1 aspmx.l.google.com
5 alt2.aspmx.l.google.com
5 alt1.aspmx.l.google.com
10 aspmx2.googlemail.com
10 aspmx3.googlemail.com

SPF Record Validation i

v=spf1 include:_spf.google.com include:sendgrid.net include:mail.zendesk.com ip4:147.253.209.141 ip4:147.253.209.134 include:sparkpostmail.com include:6147665.spf05.hubspotemail.net -all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ include _spf.google.com The specified domain is searched for a match.
+ include sendgrid.net The specified domain is searched for a match.
+ include mail.zendesk.com The specified domain is searched for a match.
+ ip4 147.253.209.141 Match if the IP is in the given IPv4 range.
+ ip4 147.253.209.134 Match if the IP is in the given IPv4 range.
+ include sparkpostmail.com The specified domain is searched for a match.
+ include 6147665.spf05.hubspotemail.net The specified domain is searched for a match.
- all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (5) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

Google Workspace (google)

NameDataCopy
google._domainkey.domestika.org.v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCZmEqlBjG5e2oPr6lZ1W3tjXI2QWlwK67g30wtQTTGqCz9DIK7nqGNGbdUgl73Z5a7VvS+HbKALSD6zRbgSOeDH1aKFzMSHHxhPFUrGeN5JktSLePrnJzXmyTAHkMEEdinkEarnMR6GiovrDPVtKBWNeo97meBLOSWvzuRjder5wIDAQAB

Twilio SendGrid (Key 1) (s1)

NameDataCopy
s1._domainkey.domestika.org.s1.domainkey.u18446.wl197.sendgrid.net.
s1.domainkey.u18446.wl197.sendgrid.net.k=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznR+m2tuu5DdBhppaFZK1FL7DUgIE0paX7UdbF2BNY2EPXwqjbog4EWWnA6xdsmSOsQgxjvQtG8WWrvix+TsJRAdjLSZGOJFgcq84oTiFIdQN/b2SHCM8tGUWOePazNvAG7OTc8sy/Gq7kOoCnGAFdzqi87ZvbHZO2NG0LGRPaAIVW6ORMkwmXX/fmafQ2btMQooUzFxPJmbXCf91wOBgg22hKPY6C4Ezv3pWVS3sH2jSddllwz/R8N3Xwq8BfCI0lxj38ZizuzSXRCH6PBoMQZIvmYKGI11uJykAju0W0ieq6GwNN9ORaX+TsHFP6lm/DR89ob2QgYViJq326pqJQIDAQAB

Twilio SendGrid (Key 2) (s2)

NameDataCopy
s2._domainkey.domestika.org.s2.domainkey.u18446.wl197.sendgrid.net.
s2.domainkey.u18446.wl197.sendgrid.net.k=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA/VStWVIt4+VhAFX039Ubn9f13nXuefbMkJj1F/AZZNSaXYjCtn+jD9308PQZb1FdYwO+oKrHWPsH82NrzXo2AEoULVHszCHmQgNEY5PlWkgsuHdMdqt42EBQIxZNXP9Oa2KW3JBwVxLt5/Rl926EZipeWeHVSpejr3ZY1UtgzwIDAQAB

Mailchimp (Key 1) (k1)

NameDataCopy
k1._domainkey.domestika.org.dkim.mcsv.net.
dkim.mcsv.net.k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDbNrX2cY/GUKIFx2G/1I00ftdAj713WP9AQ1xir85i89sA2guU0ta4UX1Xzm06XIU6iBP41VwmPwBGRNofhBVR+e6WHUoNyIR4Bn84LVcfZE20rmDeXQblIupNWBqLXM1Q+VieI/eZu/7k9/vOkLSaQQdml4Cv8lb3PcnluMVIhQIDAQAB;

Zendesk (zendesk1)

NameDataCopy
zendesk1._domainkey.domestika.org.zendesk1._domainkey.zendesk.com.
zendesk1._domainkey.zendesk.com.v=DKIM1;t=s;n=core;k=rsa;p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9IqdLrO3Zr2/56MHt8oQVCQorP0Bl2Fz9sM2tFBnJCdB/HogQmuudEg2xAovCN2PYpw44UijIvPuBoT9vxiv6ZCBJTLJXa82r6ke5rE4tbe9NKFIrVIb9S306cJDrnKFMDb8p0dU/Su0+eUR5gVAOtCuz2L8HAzs5edvsEvD/Fb4ny1RLNSEPZkIQLfGhVxQeWANm3+1Jwb/OBVXV9k0nKpWrpgqcmO7NzroJirp014RQY7rGi60JLUubc6XhvoFQBQrtOAdVlZC5wvfS1bgpq5kQpdP7cajIqWCeqxPTeo0ZUpey2ZcaygEsZz0Z3Gs5wDzyuqd7/ADpr2jNF7ozwIDAQAB

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on domestika.org:

DMARC Policy Validation i

v=DMARC1; p=reject; pct=100; rua=mailto:cbd7ea92@mxtoolbox.dmarc-report.com;

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p reject Policy: The action to take for failed emails (none, quarantine, reject).
pct 100 Percentage: The percentage of emails to apply the policy to.
rua mailto:cbd7ea92@mxtoolbox.dmarc-report.com Aggregate Reports: Email address(es) to send summary reports.

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Pass The policy is "p=reject", which provides the strongest protection against spoofing.
Aggregate Reporting Pass An address for aggregate reports was found.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
aspmx.l.google.com Success 30ms 220 mx.google.com ESMTP d9443c01a7336-2e535ac15a3si29845185ad.17 - gsmtp

Server IP Blacklist Check (108.159.91.17)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for domestika.org

    • Issuer: Amazon RSA 2048 M04
    • Expires In: 82 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Excellent
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: domestika.org
    • SANs: DNS:domestika.org, DNS:*.domestika.org
    • Organization: N/A
    • Validity: Jun 10, 2026 to Dec 25, 2026
    • Algorithm: RSA-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: Amazon RSA 2048 M04
    • Organization: Amazon
    • Valid Till: Aug 24, 2030
    • Issuer: Amazon Root CA 1
    ↓ Intermediate CA Certificate ↓
    • Common Name: Amazon Root CA 1
    • Organization: Amazon
    • Valid Till: Dec 31, 2037
    • Issuer: Starfield Services Root Certificate Authority - G2

    Website & Server Intelligence for domestika.org

    Website Identity

    TitleFavicon Online courses for creative professionals | Domestika
    Meta DescriptionDomestika is the largest creative community. Learn and share from anywhere with online courses taught by the best professionals in the world of design and creativity.

    Hosting & Server Network

    IP Address108.159.91.17
    HTTP Status200 i
    Hosting ProviderAmazon.com, Inc. i
    Web Serverawselb/2.0 i
    Control Panel Not Detected i

    Technology Profile

    • Google Analytics

    HTTP Security Headers

    Strict-Transport-Security Present
    Content-Security-Policy Missing
    X-Frame-Options Present
    X-Content-Type-Options Present
    Referrer-Policy Present
    Permissions-Policy Missing

    IP Details & Geolocation

    IP Address 108.159.91.17
    Reverse DNS (PTR) server-108-159-91-17.pnq50.r.cloudfront.net
    CountryIndia (IN)
    RegionMaharashtra
    CityMumbai
    ZIP CodeN/A
    ASN16509
    Organization / ISPAmazon.com, Inc.

    Understanding Diagnostic Terms for domestika.org

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.