The domain capsicumgraphics.org is registered with GoDaddy.com, LLC, first registered on 2024-04-14 and expires on 2027-04-14 (domain age: 2 years, 6 months). It resolves to IP address 15.197.148.33, hosted by Amazon.com, Inc.. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by GoDaddy TLS Intermediate CA DV - R1v1.
Domain Overview: capsicumgraphics.org
Expires in 5 months, 27 days ยท DNSSEC: Unsigned
Google Workspace (1 MX)
Issuer: GoDaddy TLS Intermediate CA DV - R1v1 (1 SANs)
Montreal, Quebec, Canada (CA)
๐ Domain & Registration Identity View Full Whois Details โ
| Domain | capsicumgraphics.org |
|---|---|
| Website Title | |
| Registered | 2024-04-14 |
| Expires | 2027-04-14 |
| Remaining Validity | 5 months, 27 days |
| Domain Age | 2 years, 6 months |
| Registrar | GoDaddy.com, LLC |
| Domain Status | client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited |
| DNSSEC Delegation | Unsigned ยท Zone not signed with DNSSEC keys |
| Authoritative Nameservers |
ns71.domaincontrol.com, ns72.domaincontrol.com
|
๐ก๏ธ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics โ
| Detected Email Provider | ๐ฌ Google Workspace |
|---|---|
| Primary Mail Server (MX) |
smtp.google.com (Priority: 1)
ยท 1 MX server configured
|
| SPF Record (Sender Policy) |
Pass
ยท 1/10 DNS Lookups
ยท Policy: -all
v=spf1 include:_spf.google.com -all
|
| DKIM Authentication |
Detected
ยท Discovered: Google Workspace (google)
|
| DMARC Policy |
Pass (Reject)
ยท Subdomain Policy: sp=reject
ยท Reports: mailto:orders@capsicumgraphics.com
v=DMARC1; p=reject; sp=reject; pct=100; aspf=r; adkim=r; rua=mailto:orders@capsicumgraphics.com; ruf=mailto:orders@capsicumgraphics.com; fo=1;
|
| SMTP Port 25 Status | Online (8ms) ยท Inbound mail server handshake response |
๐ฅ๏ธ Web Server, Hosting & Network View Full Server & Tech Details โ
| Web Server Software | N/A |
|---|---|
| HTTP Status Code | 200 |
| Server IP (IPv4) | 15.197.148.33 View Geo Details โ |
| IPv6 Address (AAAA) | Not Configured |
| Reverse DNS (PTR) |
a2aa9ff50de748dbe.awsglobalaccelerator.com
|
| Server Location | ๐ Montreal, Quebec, Canada (CA) |
| ASN Network & ISP | AS16509 (Amazon.com, Inc.) |
| Hosting Provider | Amazon.com, Inc. |
| Control Panel | Not Detected |
| Technology Stack | No third-party framework or CMS fingerprints detected |
| HTTP Security Headers | None Detected (Missing HSTS / CSP) Audit Details โ |
| DNSBL Blacklist Reputation | Clean (0/5 lists) |
๐ SSL/TLS Certificate Summary View Full SSL Certificate & Chain โ
| Primary Hostname (CN) | capsicumgraphics.org ยท Multi-Domain SAN (Covers 1 hostnames) |
|---|---|
| SSL Issuer | GoDaddy TLS Intermediate CA DV - R1v1 |
| SSL Valid Till | 2026-12-18 |
| Remaining Validity | 61 Days |
| Chain Status | Valid Trusted Chain |
| Signature Algorithm | RSA-SHA256 |
Whois Ownership & Registration for capsicumgraphics.org
๐ View Raw Registry Response โDomain Information
| Domain Name | CAPSICUMGRAPHICS.ORG |
| Expiration Date | 2027-04-14 11:39:56 Z |
| Registration Date | 2024-04-14 11:39:56 Z |
| Last Changed Date | 2026-08-12 03:08:01 Z |
Domain Status
- client delete prohibited
- client renew prohibited
- client transfer prohibited
- client update prohibited
Registrar Information
| Name | GoDaddy.com, LLC |
| Abuse Email | abuse@godaddy.com |
Registrant Contact
Contact information for this role is not provided or redacted.
Administrative Contact
Contact information for this role is not provided or redacted.
Technical Contact
Contact information for this role is not provided or redacted.
Nameservers
- ns71.domaincontrol.com
- ns72.domaincontrol.com
๐ View Raw Registry Response RDAP (Hybrid)
Domain Name: capsicumgraphics.org Registry Domain ID: REDACTED Registrar WHOIS Server: http://whois.godaddy.com Registrar URL: http://www.whois.godaddy.com Updated Date: 2026-08-12T03:08:01Z Creation Date: 2024-04-14T11:39:56Z Registry Expiry Date: 2027-04-14T11:39:56Z Registrar: GoDaddy.com, LLC Registrar IANA ID: 146 Registrar Abuse Contact Email: abuse@godaddy.com Registrar Abuse Contact Phone: +1.4806242505 Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited Name Server: ns71.domaincontrol.com Name Server: ns72.domaincontrol.com DNSSEC: unsigned URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/ >>> Last update of WHOIS database: 2026-10-17T08:00:29Z <<< For more information on Whois status codes, please visit https://icann.org/epp Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.
DNS Records for capsicumgraphics.org
NS Records
| Name | Data | Copy |
|---|---|---|
| capsicumgraphics.org. | ns71.domaincontrol.com. |
|
| capsicumgraphics.org. | ns72.domaincontrol.com. |
A Records
| Name | Data | Copy |
|---|---|---|
| capsicumgraphics.org. | 15.197.148.33 |
|
| capsicumgraphics.org. | 3.33.130.190 |
AAAA Records
No AAAA records found.
WWW Records (www.capsicumgraphics.org)
| Type | Host | Value | Copy |
|---|---|---|---|
| CNAME | www.capsicumgraphics.org. | capsicumgraphics.org. |
|
| A | www.capsicumgraphics.org. | capsicumgraphics.org. |
|
| A | capsicumgraphics.org. | 15.197.148.33 |
|
| A | capsicumgraphics.org. | 3.33.130.190 |
MX Records
| Priority | Mail Server Target | Copy |
|---|---|---|
| 1 | smtp.google.com. |
TXT Records
| Name | Value | Copy |
|---|---|---|
| capsicumgraphics.org. | v=spf1 include:_spf.google.com -all |
|
| capsicumgraphics.org. | google-site-verification=_SC_n1vR5QVu4t0SH5MyTi1jaxNtE9JoqIgCYsuiIVo |
Email Security (MX, SPF, DKIM, DMARC, SMTP) for capsicumgraphics.org
Mail Exchange (MX) Routing Records
SPF Record Validation
v=spf1 include:_spf.google.com -all
Record Breakdown
| Prefix | Mechanism | Value | Description |
|---|---|---|---|
| + | v |
spf1 | The SPF record version. |
| + | include |
_spf.google.com | The specified domain is searched for a match. |
| - | all |
Always matches. This should be the last mechanism. |
Validation Summary
| SPF Record Published | Pass An SPF record was found. |
| Multiple SPF Records | Pass Only one SPF record was found. |
| Included Lookups | Pass The number of DNS lookups (1) is within the limit of 10. |
| Type PTR Check | Pass The deprecated PTR mechanism was not found. |
| Characters After ALL | Pass No mechanisms were found after the "all" mechanism. |
Common DKIM Selectors
Google Workspace (google)
| Name | Data | Copy |
|---|---|---|
| google._domainkey.capsicumgraphics.org. | v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlWUiRzW16i7qx0Xk7O6z4y/nBabA+p+g0pL17V7cvehp9CdejRKhSaXClYYsMJCjngY3gMQzX+67ik+gNdrofFB4J9IuELoCq8ByrJxyALEOiqnSYNdTLfVIaHtAXYRRw1MMjzaJUaDq/erDXVa/sZh0IlKqFeG+NjSIVZX/nhDt61YrFM0TgtjiXKqnQXKchXoz98CGfmkFyRImow+wIojBd7pAySuE6+DCeqhGASnVOKqh6aYkMYAAC1YIjK15XBOmmzre/iulvJtZRGXbPi00DLUPDvjZ7iDSlv0lszYGWWsoxcZGkTwHfFiSSFUDZT7gG97VcCODxP9zmHykwIDAQAB |
๐ Query Custom DKIM Selector
Live DNS Lookup
Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on capsicumgraphics.org:
DMARC Policy Validation
v=DMARC1; p=reject; sp=reject; pct=100; aspf=r; adkim=r; rua=mailto:orders@capsicumgraphics.com; ruf=mailto:orders@capsicumgraphics.com; fo=1;
Tag Breakdown
| Tag | Value | Description |
|---|---|---|
v |
DMARC1 | Version: Must be "DMARC1". |
p |
reject | Policy: The action to take for failed emails (none, quarantine, reject). |
sp |
reject | Subdomain Policy: The policy for subdomains (none, quarantine, reject). |
pct |
100 | Percentage: The percentage of emails to apply the policy to. |
aspf |
r | SPF Alignment: Specifies strict (s) or relaxed (r) alignment for SPF. |
adkim |
r | DKIM Alignment: Specifies strict (s) or relaxed (r) alignment for DKIM. |
rua |
mailto:orders@capsicumgraphics.com | Aggregate Reports: Email address(es) to send summary reports. |
ruf |
mailto:orders@capsicumgraphics.com | Forensic Reports: Email address(es) to send detailed failure reports. |
fo |
1 | Failure Reporting Options: Defines when to send forensic reports. |
Validation Summary
| DMARC Record Published | Pass A DMARC record was found. |
| Syntax Check | Pass The record has a valid version tag. |
| Policy Enforcement | Pass The policy is "p=reject", which provides the strongest protection against spoofing. |
| Aggregate Reporting | Pass An address for aggregate reports was found. |
SMTP Connectivity Test (Port 25)
| Mail Server | Status | Latency | Banner / Handshake Response |
|---|---|---|---|
| smtp.google.com | Success | 8ms | 220 mx.google.com ESMTP a92af1059eb24-1831f3f44a1si18618214c88.30 - gsmtp |
Server IP Blacklist Check (15.197.148.33)
SSL/TLS Certificate Details for capsicumgraphics.org
- Issuer: GoDaddy TLS Intermediate CA DV - R1v1
- Expires In: 61 Days
- Chain Status: Valid Chain
Main Leaf Certificate
- Common Name:
capsicumgraphics.org - SANs: DNS:capsicumgraphics.org
- Organization: N/A
- Validity: Jun 03, 2026 to Dec 18, 2026
- Algorithm: RSA-SHA256
- Common Name: GoDaddy TLS Intermediate CA DV - R1v1
- Organization: GoDaddy.com
- Valid Till: Aug 24, 2040
- Issuer: GoDaddy TLS Root CA - R1
- Common Name: GoDaddy TLS Root CA - R1
- Organization: GoDaddy.com
- Valid Till: Jan 01, 2038
- Issuer: Go Daddy Root Certificate Authority - G2
- Common Name: Go Daddy Root Certificate Authority - G2
- Organization: GoDaddy.com, Inc.
- Valid Till: Jan 01, 2038
- Issuer: Go Daddy Root Certificate Authority - G2
Website & Server Intelligence for capsicumgraphics.org
Website Identity
| Title | |
|---|---|
| Meta Description | N/A |
Hosting & Server Network
| IP Address | 15.197.148.33 |
|---|---|
| HTTP Status | 200 |
| Hosting Provider | Amazon.com, Inc. |
| Web Server | N/A |
| Control Panel | Not Detected |
Technology Profile
No specific third-party frameworks or CMS fingerprints detected.
HTTP Security Headers
| Strict-Transport-Security | Missing |
| Content-Security-Policy | Missing |
| X-Frame-Options | Missing |
| X-Content-Type-Options | Missing |
| Referrer-Policy | Missing |
| Permissions-Policy | Missing |
IP Details & Geolocation
| IP Address | 15.197.148.33 |
|---|---|
| Reverse DNS (PTR) |
a2aa9ff50de748dbe.awsglobalaccelerator.com
|
| Country | Canada (CA) |
| Region | Quebec |
| City | Montreal |
| ZIP Code | N/A |
| ASN | 16509 |
| Organization / ISP | Amazon.com, Inc. |
Understanding Diagnostic Terms for capsicumgraphics.org
Domain Status (EPP)
EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.
Registrar Information
The authorized or accredited organization managing the domain reservation and authoritative registry delegation.
Nameservers (NS)
Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.
A & AAAA Records
Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.
MX (Mail Exchange)
Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).
SPF & DMARC Security
Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).
DKIM Signatures
Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.
SSL Certificate & Chain
Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.
Hosting Provider & ASN
The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.
Reverse DNS (PTR)
Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.
HTTP Security Headers
Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.
โ ๏ธ Report Limitations & Data Sources
- Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "๐ Refresh Live" to query directly against authoritative registries.
- DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24โ48 hours across different regional ISP resolvers during recent DNS record changes.
- Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
- Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
- Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.