Initializing diagnostics...

⚡ Loaded from cache (2026-10-22 18:29:55 IST). 🔄 Refresh Live
🤖 AI Intelligence Summary

The domain down2earthorganics.com is registered with GoDaddy.com, LLC, first registered on 2020-06-09 and expires on 2027-06-09 (domain age: 6 years, 4 months). It resolves to IP address 139.59.68.150, hosted by DigitalOcean, LLC. Email delivery is handled by Zoho Mail. SPF authentication is published and valid. DMARC policy is published. Web traffic is secured with an SSL certificate issued by YR1.

Domain Overview: down2earthorganics.com

Domain Registration 🌐
Active 6 years, 4 months

Expires in 7 months, 17 days · DNSSEC: Unsigned

Email Security 🛡️
SPF: Missing DKIM: Detected DMARC: None

Zoho Mail (3 MX)

SSL Certificate 🔒
Valid Chain 30 Days Left

Issuer: YR1 (2 SANs)

Server & Hosting 🖥️
200 Apache/2.4.29 (Ubuntu)

Bengaluru, Karnataka, India (IN)

🌐 Domain & Registration Identity View Full Whois Details →

Domaindown2earthorganics.com
Website TitleFavicon Down 2 Earth Organics
Registered2020-06-09
Expires2027-06-09
Remaining Validity7 months, 17 days
Domain Age6 years, 4 months
RegistrarGoDaddy.com, LLC
Domain Statusclient delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited i
DNSSEC Delegation Unsigned · Zone not signed with DNSSEC keys i
Authoritative Nameservers ns27.domaincontrol.com, ns28.domaincontrol.com i

🛡️ Email Security & Deliverability (SPF, DKIM, DMARC) View Complete Email Security Diagnostics →

Detected Email Provider 📬 Zoho Mail
Primary Mail Server (MX) mx.zoho.in (Priority: 10) · 3 MX servers configured i
SPF Record (Sender Policy) Missing i
DKIM Authentication Detected · Discovered: Mail / Generic (mail) i
DMARC Policy Warning (Monitoring None) · Subdomain Policy: sp=none · Reports: mailto:dmarc@mailinblue.com!10m i
v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=86400
SMTP Port 25 Status Online (56ms) · Inbound mail server handshake response

🖥️ Web Server, Hosting & Network View Full Server & Tech Details →

Web Server Software Apache/2.4.29 (Ubuntu) i
HTTP Status Code 200 i
Server IP (IPv4) 139.59.68.150 View Geo Details →
IPv6 Address (AAAA) 2400:6180:100:d0::8fb:7001
Reverse DNS (PTR) None Detected (No PTR Record)
Server Location 📍 Bengaluru, Karnataka, India (IN)
ASN Network & ISP AS14061 (DigitalOcean, LLC)
Hosting Provider DigitalOcean, LLC i
Control Panel Not Detected i
Technology Stack Apache jQuery Bootstrap Google Fonts Google Analytics
HTTP Security Headers None Detected (Missing HSTS / CSP) Audit Details →
DNSBL Blacklist Reputation Clean (0/5 lists)

🔒 SSL/TLS Certificate Summary View Full SSL Certificate & Chain →

Primary Hostname (CN) down2earthorganics.com · Multi-Domain SAN (Covers 2 hostnames)
SSL IssuerYR1
SSL Valid Till2026-11-22
Remaining Validity30 Days
Chain Status Valid Trusted Chain
Signature AlgorithmRSA-SHA256

Whois Ownership & Registration for down2earthorganics.com

📄 View Raw Registry Response ↓

Domain Information i

Domain NameDOWN2EARTHORGANICS.COM
Registration Date2020-06-09 20:14:17 Z
Expiration Date2027-06-09 20:14:17 Z
Last Changed Date2026-06-08 05:57:37 Z

Domain Status i

  • client delete prohibited
  • client renew prohibited
  • client transfer prohibited
  • client update prohibited

Registrar Information i

NameGoDaddy.com, LLC
Abuse Emailabuse@godaddy.com

Registrant Contact i

Contact information for this role is not provided or redacted.

Administrative Contact i

Contact information for this role is not provided or redacted.

Technical Contact i

Contact information for this role is not provided or redacted.

Nameservers i

  • NS27.DOMAINCONTROL.COM
  • NS28.DOMAINCONTROL.COM
📄 View Raw Registry Response RDAP (Hybrid)
Domain Name: DOWN2EARTHORGANICS.COM
   Registry Domain ID: 2535883071_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2026-06-08T05:57:37Z
   Creation Date: 2020-06-09T20:14:17Z
   Registry Expiry Date: 2027-06-09T20:14:17Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: abuse@godaddy.com
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS27.DOMAINCONTROL.COM
   Name Server: NS28.DOMAINCONTROL.COM
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-10-22T12:59:35Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.

DNS Records for down2earthorganics.com

NS Records i

NameDataCopy
down2earthorganics.com. ns27.domaincontrol.com.
down2earthorganics.com. ns28.domaincontrol.com.

A Records i

NameDataCopy
down2earthorganics.com. 139.59.68.150

AAAA Records i

NameDataCopy
down2earthorganics.com. 2400:6180:100:d0::8fb:7001

WWW Records (www.down2earthorganics.com) i

TypeHostValueCopy
A www.down2earthorganics.com. 139.59.68.150

MX Records i

PriorityMail Server TargetCopy
10 mx.zoho.in.
50 mx3.zoho.in.
20 mx2.zoho.in.

TXT Records i

NameValueCopy
down2earthorganics.com. zoho-verification=zb61621469.zmverify.zoho.in
down2earthorganics.com. v=spf1 include:zoho.in ~all
down2earthorganics.com. brevo-code:ff7b410b64c582c5effa1a56796bf22b
down2earthorganics.com. v=spf1 include:spf.sendinblue.com mx ~all

Email Security (MX, SPF, DKIM, DMARC, SMTP) for down2earthorganics.com

Detected Email Provider
📬 Zoho Mail
✓ Active MX Routing (3 Servers)

Mail Exchange (MX) Routing Records i

Priority Mail Server Hostname Copy
10 mx.zoho.in
20 mx2.zoho.in
50 mx3.zoho.in

SPF Record Validation i

No SPF record found to validate.

Common DKIM Selectors i

Mail / Generic (mail)

NameDataCopy
mail._domainkey.down2earthorganics.com.k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDeMVIzrCa3T14JsNY0IRv5/2V1/v2itlviLQBwXsa7shBD6TrBkswsFUToPyMRWC9tbR/5ey0nRBH0ZVxp+lsmTxid2Y2z+FApQ6ra2VsXfbJP3HE6wAO0YTVEJt1TmeczhEd2Jiz/fcabIISgXEdSpTYJhb0ct0VJRxcg4c8c7wIDAQAB

🔍 Query Custom DKIM Selector

Live DNS Lookup

Using a custom or date-based selector (e.g. crm, newsletter, 2024)? Query its public key live on down2earthorganics.com:

DMARC Policy Validation i

v=DMARC1; p=none; sp=none; rua=mailto:dmarc@mailinblue.com!10m; ruf=mailto:dmarc@mailinblue.com!10m; rf=afrf; pct=100; ri=86400

Tag Breakdown

TagValueDescription
v DMARC1 Version: Must be "DMARC1".
p none Policy: The action to take for failed emails (none, quarantine, reject).
sp none Subdomain Policy: The policy for subdomains (none, quarantine, reject).
rua mailto:dmarc@mailinblue.com!10m Aggregate Reports: Email address(es) to send summary reports.
ruf mailto:dmarc@mailinblue.com!10m Forensic Reports: Email address(es) to send detailed failure reports.
rf afrf Unknown Tag
pct 100 Percentage: The percentage of emails to apply the policy to.
ri 86400 Unknown Tag

Validation Summary

DMARC Record Published Pass A DMARC record was found.
Syntax Check Pass The record has a valid version tag.
Policy Enforcement Warning The policy is "p=none", which is for monitoring only and does not protect against spoofing.
Aggregate Reporting Pass An address for aggregate reports was found.

Optimization Suggestions

After monitoring your aggregate reports to ensure legitimate email sources are aligned, you should move to a "p=quarantine" or "p=reject" policy to protect your domain.

SMTP Connectivity Test (Port 25)

Mail ServerStatusLatencyBanner / Handshake Response
mx.zoho.in Success 56ms 220 mx.zoho.in SMTP Server ready October 22, 2026 6:29:55 PM IST

Server IP Blacklist Check (139.59.68.150)

  • Spamhaus ZEN: Clean
  • SpamCop: Clean
  • Barracuda: Clean
  • GBUdb Truncate: Clean
  • DroneBL: Clean
  • SSL/TLS Certificate Details for down2earthorganics.com

    • Issuer: YR1
    • Expires In: 30 Days
    • Chain Status: Valid Chain

    🔒 SSL / TLS Protocol Support

    Warning
    TLS protocol versions
    TLS 1.3 Enabled
    TLS 1.2 Enabled
    TLS 1.1 (deprecated) Enabled
    TLS 1.0 (deprecated) Enabled
    SSL protocol versions
    SSLv3 (deprecated) Disabled
    SSLv2 (deprecated) Disabled

    Main Leaf Certificate

    • Common Name: down2earthorganics.com
    • SANs: DNS:down2earthorganics.com, DNS:www.down2earthorganics.com
    • Organization: N/A
    • Validity: Aug 24, 2026 to Nov 22, 2026
    • Algorithm: RSA-SHA256
    ↓ Intermediate CA Certificate ↓
    • Common Name: YR1
    • Organization: Let's Encrypt
    • Valid Till: Sep 03, 2028
    • Issuer: Root YR
    ↓ Intermediate CA Certificate ↓
    • Common Name: Root YR
    • Organization: ISRG
    • Valid Till: Sep 03, 2032
    • Issuer: ISRG Root X1

    Website & Server Intelligence for down2earthorganics.com

    Website Identity

    TitleFavicon Down 2 Earth Organics
    Meta DescriptionBuy organic Groceries and Fruits through downtoearthorganics.com

    Hosting & Server Network

    IP Address139.59.68.150
    HTTP Status200 i
    Hosting ProviderDigitalOcean, LLC i
    Web ServerApache/2.4.29 (Ubuntu) i
    Control Panel Not Detected i

    Technology Profile

    • Apache
    • jQuery
    • Bootstrap
    • Google Fonts
    • Google Analytics

    HTTP Security Headers

    Strict-Transport-Security Missing
    Content-Security-Policy Missing
    X-Frame-Options Missing
    X-Content-Type-Options Missing
    Referrer-Policy Missing
    Permissions-Policy Missing

    IP Details & Geolocation

    IP Address 139.59.68.150
    Reverse DNS (PTR) None Detected (No PTR Record)
    CountryIndia (IN)
    RegionKarnataka
    CityBengaluru
    ZIP CodeN/A
    ASN14061
    Organization / ISPDigitalOcean, LLC

    Understanding Diagnostic Terms for down2earthorganics.com

    Domain Status (EPP)

    EPP status codes (e.g., clientTransferProhibited, active) indicating if a domain is locked against unauthorized transfer, pending renewal, or active.

    Registrar Information

    The authorized or accredited organization managing the domain reservation and authoritative registry delegation.

    Nameservers (NS)

    Authoritative servers that translate domain names into IP addresses and direct web visitors and mail traffic globally.

    A & AAAA Records

    Primary address records mapping your domain name directly to standard IPv4 (e.g., 192.0.2.1) and newer IPv6 server network addresses.

    MX (Mail Exchange)

    Priority-ranked records pointing inbound emails to designated mail server hosts (e.g., Google Workspace, Microsoft 365, Zoho).

    SPF & DMARC Security

    Email authentication standards that verify authorized sender IPs (SPF) and instruct receiving servers how to enforce security policies (DMARC).

    DKIM Signatures

    Cryptographic public key in DNS used by receiving mail servers to verify digital signatures on your emails, ensuring messages were not tampered with.

    SSL Certificate & Chain

    Establishes encrypted HTTPS connections and authenticates domain ownership via an intermediate certificate authority chain.

    Hosting Provider & ASN

    The physical server infrastructure where website files reside and the autonomous system network (ASN) routing global traffic.

    Reverse DNS (PTR)

    Pointer (PTR) records that map a server's IP address back to its canonical hostname, verifying server identity and preventing email spam rejection.

    HTTP Security Headers

    Directives like HSTS, CSP, and X-Frame-Options instructed by the server to protect browser visitors against XSS, clickjacking, and packet sniffing.

    ⚠️ Report Limitations & Data Sources

    • Data Currency: This report uses cached registry and DNS data (freshened within 4 hours) for high-speed resolution. Click "🔄 Refresh Live" to query directly against authoritative registries.
    • DNS Resolution & Propagation: Records are queried via Google Public DNS-over-HTTPS. Global DNS propagation may take up to 24–48 hours across different regional ISP resolvers during recent DNS record changes.
    • Completeness & Scope: This diagnostic tool analyzes standard authoritative records (A, AAAA, MX, NS, TXT, CNAME, SOA). It does not perform invasive brute-force subdomain scans or unauthenticated DNS zone transfers.
    • Email Deliverability & Reputation: The security analysis (SPF, DKIM, DMARC, and Port 25 SMTP handshake) reflects public DNS policies and inbound connection states. Recipient spam filters evaluate internal headers that cannot be checked from outside.
    • Reverse Proxies & CDNs: If a website is behind Cloudflare, Fastly, or another CDN/reverse proxy, the detected IP, web server software, and SSL edge certificate reflect the proxy tier.