Initializing diagnostics...

⚡ Live Data: Report generated fresh from authoritative registries. 🔄 Force Refresh
🤖 AI Intelligence Summary

The domain capsicumgraphics.org is registered with GoDaddy.com, LLC, first registered on 2024-04-14 and expires on 2027-04-14 (domain age: 2 years, 6 months). It resolves to IP address 3.33.130.190, hosted by Amazon.com, Inc.. Email delivery is handled by Google Workspace. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by GoDaddy TLS Intermediate CA DV - R1v1.

Domain Overview: capsicumgraphics.org

Domain Registration 🌐
Active 2 years, 6 months

Expires in 5 months, 27 days · DNSSEC: Unsigned

Email Security 🛡️
SPF: Pass DKIM: Detected DMARC: Reject

Google Workspace (1 MX)

SSL Certificate 🔒
Valid Chain 61 Days Left

Issuer: GoDaddy TLS Intermediate CA DV - R1v1 (1 SANs)

Server & Hosting 🖥️
200 N/A

Montreal, Quebec, Canada (CA)

🌐 Domain & Registration Identity View Full Whois Details →

Domaincapsicumgraphics.org
Website TitleFavicon N/A
Registered2024-04-14
Expires2027-04-14
Remaining Validity5 months, 27 days
Domain Age2 years, 6 months
RegistrarGoDaddy.com, LLC
Domain Statusclient delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers ns72.domaincontrol.com, ns71.domaincontrol.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Google Workspace
Primary Mail Server (MX) smtp.google.com (Priority: 1) · 1 MX server configured i
SPF Record (Sender Policy) Pass · 1/10 DNS Lookups · Policy: -all i
v=spf1 include:_spf.google.com -all
DKIM Authentication Detected · Discovered: Google Workspace (google) i
DMARC Policy Pass (Reject) · Subdomain Policy: sp=reject · Reports: mailto:orders@capsicumgraphics.com i
v=DMARC1; p=reject; sp=reject; pct=100; aspf=r; adkim=r; rua=mailto:orders@capsicumgraphics.com; ruf=mailto:orders@capsicumgraphics.com; fo=1;
SMTP Port 25 Status Online (7ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software N/A i
HTTP Status Code 200 i
Server IP (IPv4) 3.33.130.190 View Geo Details →
IPv6 Address (AAAA) Not Configured
Reverse DNS (PTR) a2aa9ff50de748dbe.awsglobalaccelerator.com
Server Location 📍 Montreal, Quebec, Canada (CA)
ASN Network & ISP AS16509 (Amazon.com, Inc.)
Hosting Provider Amazon.com, Inc. i
Control Panel Not Detected i
Technology Stack No third-party framework or CMS fingerprints detected
HTTP Security Headers None Detected (Missing HSTS / CSP) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) capsicumgraphics.org · Multi-Domain SAN (Covers 1 hostnames)
SSL IssuerGoDaddy TLS Intermediate CA DV - R1v1
SSL Valid Till2026-12-18
Remaining Validity61 Days
Chain Status Valid Trusted Chain
Signature AlgorithmRSA-SHA256

Whois Ownership & Registration for capsicumgraphics.org

📄 View Raw Registry Response ↓

Domain Information i

Domain NameCAPSICUMGRAPHICS.ORG
Expiration Date2027-04-14 11:39:56 Z
Registration Date2024-04-14 11:39:56 Z
Last Changed Date2026-08-12 03:08:01 Z

Domain Status i

  • client delete prohibited
  • client renew prohibited
  • client transfer prohibited
  • client update prohibited

Registrar Information i

NameGoDaddy.com, LLC
Abuse Emailabuse@godaddy.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • ns71.domaincontrol.com
  • ns72.domaincontrol.com
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: capsicumgraphics.org
Registry Domain ID: REDACTED
Registrar WHOIS Server: http://whois.godaddy.com
Registrar URL: http://www.whois.godaddy.com
Updated Date: 2026-08-12T03:08:01Z
Creation Date: 2024-04-14T11:39:56Z
Registry Expiry Date: 2027-04-14T11:39:56Z
Registrar: GoDaddy.com, LLC
Registrar IANA ID: 146
Registrar Abuse Contact Email: abuse@godaddy.com
Registrar Abuse Contact Phone: +1.4806242505
Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
Name Server: ns71.domaincontrol.com
Name Server: ns72.domaincontrol.com
DNSSEC: unsigned
URL of the ICANN Whois Inaccuracy Complaint Form: https://icann.org/wicf/
>>> Last update of WHOIS database: 2026-10-17T10:23:40Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

Terms of Use: Access to Public Interest Registry WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator, a Registrar, or Identity Digital except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy.  The Registrar of Record identified in this output may have an RDDS service that can be queried for additional information on how to contact the Registrant, Admin, or Tech contact of the queried domain name.

DNS Records for capsicumgraphics.org

NS Records i

NameDataCopy
capsicumgraphics.org. ns72.domaincontrol.com.
capsicumgraphics.org. ns71.domaincontrol.com.

A Records i

NameDataCopy
capsicumgraphics.org. 3.33.130.190
capsicumgraphics.org. 15.197.148.33

AAAA Records i

No AAAA records found.

WWW Records (www.capsicumgraphics.org) i

TypeHostValueCopy
CNAME www.capsicumgraphics.org. capsicumgraphics.org.
A www.capsicumgraphics.org. capsicumgraphics.org.
A capsicumgraphics.org. 15.197.148.33
A capsicumgraphics.org. 3.33.130.190

MX Records i

PriorityMail Server TargetCopy
1 smtp.google.com.

TXT Records i

NameValueCopy
capsicumgraphics.org. v=spf1 include:_spf.google.com -all
capsicumgraphics.org. google-site-verification=_SC_n1vR5QVu4t0SH5MyTi1jaxNtE9JoqIgCYsuiIVo

Email Security (MX, SPF, DKIM, DMARC, SMTP) for capsicumgraphics.org

Detected Email Provider
📬 Google Workspace
✓ Active MX Routing (1 Server)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
1 smtp.google.com

SPF Record Validation i

v=spf1 include:_spf.google.com -all

Record Breakdown

PrefixMechanismValueDescription
+ v spf1 The SPF record version.
+ include _spf.google.com The specified domain is searched for a match.
- all Always matches. This should be the last mechanism.

Validation Summary

SPF Record Published Pass An SPF record was found.
Multiple SPF Records Pass Only one SPF record was found.
Included Lookups Pass The number of DNS lookups (1) is within the limit of 10.
Type PTR Check Pass The deprecated PTR mechanism was not found.
Characters After ALL Pass No mechanisms were found after the "all" mechanism.

Common DKIM Selectors i

Google Workspace (google)

NameDataCopy
google._domainkey.capsicumgraphics.org.v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlWUiRzW16i7qx0Xk7O6z4y/nBabA+p+g0pL17V7cvehp9CdejRKhSaXClYYsMJCjngY3gMQzX+67ik+gNdrofFB4J9IuELoCq8ByrJxyALEOiqnSYNdTLfVIaHtAXYRRw1MMjzaJUaDq/erDXVa/sZh0IlKqFeG+NjSIVZX/nhDt61YrFM0TgtjiXKqnQXKchXoz98CGfmkFyRImow+wIojBd7pAySuE6+DCeqhGASnVOKqh6aYkMYAAC1YIjK15XBOmmzre/iulvJtZRGXbPi00DLUPDvjZ7iDSlv0lszYGWWsoxcZGkTwHfFiSSFUDZT7gG97VcCODxP9zmHykwIDAQAB

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on capsicumgraphics.org:

DMARC Policy Validation i

v=DMARC1; p=reject; sp=reject; pct=100; aspf=r; adkim=r; rua=mailto:orders@capsicumgraphics.com; ruf=mailto:orders@capsicumgraphics.com; fo=1;

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p reject Policy: The action to take for failed emails (none, quarantine, reject).
sp reject Subdomain Policy: The policy for subdomains (none, quarantine, reject).
pct 100 Percentage: The percentage of emails to apply the policy to.
aspf r SPF Alignment: Specifies strict (s) or relaxed (r) alignment for SPF.
adkim r DKIM Alignment: Specifies strict (s) or relaxed (r) alignment for DKIM.
rua mailto:orders@capsicumgraphics.com Aggregate Reports: Email address(es) to send summary reports.
ruf mailto:orders@capsicumgraphics.com Forensic Reports: Email address(es) to send detailed failure reports.
fo 1 Failure Reporting Options: Defines when to send forensic reports.

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Pass The policy is "p=reject", which provides the strongest protection against spoofing.
Aggregate Reporting Pass An address for aggregate reports was found.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
smtp.google.com Success 7ms 220 mx.google.com ESMTP 5a478bee46e88-3608318cb67si13382909eec.46 - gsmtp

Server IP Blacklist Check (3.33.130.190)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for capsicumgraphics.org

    • Issuer: GoDaddy TLS Intermediate CA DV - R1v1
    • Expires In: 61 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Good
    TLS protocol versions
    TLS 1.3 Disabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Disabled
    TLS 1.0 (deprecated) Disabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: capsicumgraphics.org
    • SANs: DNS:capsicumgraphics.org
    • Organization: N/A
    • Validity: Jun 03, 2026 to Dec 18, 2026
    • Algorithm: RSA-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: GoDaddy TLS Intermediate CA DV - R1v1
    • Organization: GoDaddy.com
    • Valid Till: Aug 24, 2040
    • Issuer: GoDaddy TLS Root CA - R1
    ↓ Intermediate CA Certificate ↓
    • Common Name: GoDaddy TLS Root CA - R1
    • Organization: GoDaddy.com
    • Valid Till: Jan 01, 2038
    • Issuer: Go Daddy Root Certificate Authority - G2
    ↓ Intermediate CA Certificate ↓
    • Common Name: Go Daddy Root Certificate Authority - G2
    • Organization: GoDaddy.com, Inc.
    • Valid Till: Jan 01, 2038
    • Issuer: Go Daddy Root Certificate Authority - G2

    Website & Server Intelligence for capsicumgraphics.org

    Website Identity

    TitleFavicon N/A
    Meta DescriptionN/A

    Hosting & Server Network

    IP Address3.33.130.190
    HTTP Status200 i
    Hosting ProviderAmazon.com, Inc. i
    Web ServerN/A i
    Control Panel Not Detected i

    Technology Profile

    No specific third-party frameworks or CMS fingerprints detected.

    HTTP Security Headers

    Strict-Transport-Security Missing
    Content-Security-Policy Missing
    X-Frame-Options Missing
    X-Content-Type-Options Missing
    Referrer-Policy Missing
    Permissions-Policy Missing

    IP Details & Geolocation

    IP Address 3.33.130.190
    Reverse DNS (PTR) a2aa9ff50de748dbe.awsglobalaccelerator.com
    CountryCanada (CA)
    RegionQuebec
    CityMontreal
    ZIP CodeN/A
    ASN16509
    Organization / ISPAmazon.com, Inc.

    Understanding Diagnostic Terms for capsicumgraphics.org

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.