prowly.com

Checked 22 October 2026, 10:22 UTC · via 8.8.8.8
!Passed with warnings
26 passed 2 warnings 0 failed 3 info

Registration

info

.com generic · GoDaddy.com, LLC · expires 2031-06-09

Found

TLD
.com (generic)
ICANN policies apply
yes
Registrar
GoDaddy.com, LLC
Registered
9 June 2007
Last changed
14 September 2022
Expires
9 June 2031
Status
client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited
Registry nameservers
ns-1198.awsdns-21.org, ns-19.awsdns-02.com, ns-2042.awsdns-63.co.uk, ns-870.awsdns-44.net
RDAP server
https://rdap.verisign.com/com/v1/

Checks

  • i
    .com is a generic TLD (gTLD)
    Generic TLD under an ICANN registry agreement: ICANN-accredited registrars, UDRP and RDAP apply.
    #1
  • ✓ TLD delegated and signed #2
    .com is delegated in the root zone and DNSSEC-signed.
  • ✓ Expires on 2031-06-09 #3
    The registration is valid until 2031-06-09 (1691 days).
  • ✓ Transfer locked #4
    Registry status: client delete prohibited, client renew prohibited, client transfer prohibited, client update prohibited.
  • ✓ Registry and delegation match #5
    The nameservers registered at the registry are the ones published in DNS.

Delegation

info

ns-1198.awsdns-21.org, ns-19.awsdns-02.com, ns-2042.awsdns-63.co.uk, ns-870.awsdns-44.net

Found

Parent zone
com
Delegation from
a.gtld-servers.net (192.5.6.30)
NS at the parent
ns-1198.awsdns-21.org, ns-19.awsdns-02.com, ns-2042.awsdns-63.co.uk, ns-870.awsdns-44.net
NS in the zone
ns-1198.awsdns-21.org, ns-19.awsdns-02.com, ns-2042.awsdns-63.co.uk, ns-870.awsdns-44.net
NameserverAddressesNetwork (AS)Glue
ns-1198.awsdns-21.org205.251.196.174 2600:9000:5304:ae00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-19.awsdns-02.com205.251.192.19 2600:9000:5300:1300::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US205.251.192.19 2600:9000:5300:1300::1
ns-2042.awsdns-63.co.uk205.251.199.250 2600:9000:5307:fa00::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-
ns-870.awsdns-44.net205.251.195.102 2600:9000:5303:6600::1AS16509 AMAZON-02 - Amazon.com, Inc., US AS16509 AMAZON-02 - Amazon.com, Inc., US-

Checks

  • ✓ 4 nameservers #6
    Delegated to ns-1198.awsdns-21.org, ns-19.awsdns-02.com, ns-2042.awsdns-63.co.uk, ns-870.awsdns-44.net.
  • ✓ Parent and zone agree #7
    The parent delegation and the zone's NS records list the same nameservers.
  • ✓ No glue needed #8
    All nameservers are outside the zone, so no glue records are needed.
  • ✓ All names resolve #9
    Every nameserver name has an address and is not an alias.
  • ✓ Nameservers in different networks #10
    The nameservers are spread over 4 IPv4 /24s and 4 IPv6 /48s.
  • i
    All nameservers in one AS
    All nameserver addresses are announced by one network operator (AS16509 (AMAZON-02 - Amazon.com, Inc., US): 8 addresses). An outage or attack on that network affects all nameservers; large anycast providers mitigate this, but a secondary DNS provider adds independence.
    #11
  • ✓ Nameserver names under 4 TLDs #12
    Nameserver names use the TLDs .com, .net, .org, .uk.
  • ✓ All reachable over IPv6 #13
    Every nameserver has an IPv6 address.

Nameservers

pass

8 of 8 addresses answer authoritatively

Found

NameserverAnswerRecursionTCP / EDNSAXFRVersion
ns-1198.awsdns-21.org 205.251.196.174NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-1198.awsdns-21.org 2600:9000:5304:ae00::1NOERROR, 4 ms, authoritativenoyes / yesrefused-
ns-19.awsdns-02.com 205.251.192.19NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-19.awsdns-02.com 2600:9000:5300:1300::1NOERROR, 11 ms, authoritativenoyes / yesrefused-
ns-2042.awsdns-63.co.uk 205.251.199.250NOERROR, 9 ms, authoritativenoyes / yesrefused-
ns-2042.awsdns-63.co.uk 2600:9000:5307:fa00::1NOERROR, 11 ms, authoritativenoyes / yesrefused-
ns-870.awsdns-44.net 205.251.195.102NOERROR, 3 ms, authoritativenoyes / yesrefused-
ns-870.awsdns-44.net 2600:9000:5303:6600::1NOERROR, 7 ms, authoritativenoyes / yesrefused-

Checks

  • ✓ All respond #14
    All 8 nameserver addresses answered.
  • ✓ All authoritative #15
    Every responding nameserver answers authoritatively for the zone.
  • ✓ No recursion #16
    The nameservers do not answer recursive queries for other domains.
  • ✓ No version disclosed #17
    The nameservers don't reveal their software version.
  • ✓ Zone transfers refused #18
    No nameserver allows a zone transfer to the public.
  • ✓ TCP supported #19
    All nameservers answer over TCP.
  • ✓ EDNS supported #20
    All nameservers support EDNS(0).
  • ✓ Public addresses #21
    All nameserver addresses are publicly routable.

SOA

pass

serial 1 · primary ns-19.awsdns-02.com

Found

Primary (MNAME)
ns-19.awsdns-02.com
Contact (RNAME)
awsdns-hostmaster.amazon.com
Serial
1
Refresh / retry
7200 s / 900 s
Expire
1209600 s
Negative TTL
86400 s

Serial per nameserver

NameserverSerial
ns-1198.awsdns-21.org (205.251.196.174)1
ns-1198.awsdns-21.org (2600:9000:5304:ae00::1)1
ns-19.awsdns-02.com (205.251.192.19)1
ns-19.awsdns-02.com (2600:9000:5300:1300::1)1
ns-2042.awsdns-63.co.uk (205.251.199.250)1
ns-2042.awsdns-63.co.uk (2600:9000:5307:fa00::1)1
ns-870.awsdns-44.net (205.251.195.102)1
ns-870.awsdns-44.net (2600:9000:5303:6600::1)1

Checks

  • ✓ Serial 1 everywhere #22
    All nameservers serve the same version of the zone.
  • ✓ Timers within recommendations #23
    SOA refresh 2h, retry 15m, expire 14d, negative TTL 1d.
  • ✓ Primary is a public nameserver #24
    The primary nameserver ns-19.awsdns-02.com is one of the listed nameservers.
  • ✓ Contact awsdns-hostmaster@amazon.com #25
    The SOA RNAME awsdns-hostmaster.amazon.com means awsdns-hostmaster@amazon.com.
  • ✓ Counter serial #26
    The serial 1 is a plain counter.

DNSSEC

warn

Not signed

Found

Validated by resolver
no

Checks

  • !
    Not signed
    The zone is not signed with DNSSEC, so answers can be spoofed. Enable DNSSEC at your DNS provider and publish the DS record at your registrar.
    #27

Records

warn

65 records at the apex

Found

Read from
205.251.196.174:53
TypeValueTTL
SOAns-19.awsdns-02.com. awsdns-hostmaster.amazon.com. 1 7200 900 1209600 86400900
NSns-1198.awsdns-21.org.172800
NSns-19.awsdns-02.com.172800
NSns-2042.awsdns-63.co.uk.172800
NSns-870.awsdns-44.net.172800
A34.111.245.103120
MX1 usb-smtp-inbound-1.mimecast.com.3600
MX1 usb-smtp-inbound-2.mimecast.com.3600
TXT"MS=ms16166008"300
TXT"ZOOM_verify_q5Gh0tSVWWOwVROGi3RZH8"300
TXT"adobe-idp-site-verification=9e2233e4bee36f8c577772a15f83ea2887da0acd12ee965b777ec700857c2bbb"300
TXT"anthropic-domain-verification-xbcgw6=5OQ8AOhV8BvHMx3oIpf31Hbaj"300
TXT"atlassian-domain-verification=HsXqGyMljRsmEH6YwDOlJeL5RynYoGdbTwkU3nPNRxORfQFJxVHQa2Gu/nlU53EU"300
TXT"cursor-domain-verification-edgdge=mrP1Pqj4iEUj9x9AAbjzEtfJ8"300
TXT"docker-verification=99d48830-d938-485d-a8bf-c2c40e56e046"300
TXT"facebook-domain-verification=lb4rq4aimvna30r1kfkyvy3dwy845g"300
TXT"figma-domain-verification=465338db400ac24069e945556594420809efdfdb0b4805fe074646a1eeb9b110-1733485817"300
TXT"google-site-verification=4JUX0XMMUdfGIcAJueUKPMF1RozD4lRnSiuVLOovYPE"300
TXT"google-site-verification=Kd1dG0dJsJa4bj3q29-0wldmqH2tYRqWzUn4JWcv3xc"300
TXT"google-site-verification=PC5M4xCu0PCl_55C7AZCul-oxoRw4Fc0SmU67f-8um4"300
TXT"google-site-verification=Rsm6S7O-noeE5fIQDw4tKmpesGst78hqTddMuVMGGec"300
TXT"google-site-verification=Tye0sHwVNo6zB8bWDVzb_wN3BCCC_JpAOv_eXpTeuLI"300
TXT"google-site-verification=VPXYT0cB2eM9ykwpQF-MLKVQC03K2QLYuYxIpyqbSFM"300
TXT"google-site-verification=VveqqQngLN7_J8nSdaj1r6CzT0S2nGuSKT2nOjYqSY4"300
TXT"google-site-verification=gakPJysRnEeelF-snblilXfDWg_MPOhZ0Ld3Udetl_Q"300
TXT"google-site-verification=yuZhiU9KUQbzCeLXG3Yk6Z6NkErVspt8nCwbpux_yXQ"300
TXT"knowbe4-site-verification=5467cf585e7edef32f5a29b6efcf596b"300
TXT"miro-verification=06c0c44b44af219ca7a206d9d8c9729d95a46db8"300
TXT"openai-domain-verification=dv-0jxCorSWqmvgOC5CvExaW2zk"300
TXT"prowly-verification=0a71a24167be421ef0ab5a487324491a5898727324a86b8914b28b712af204df"300
TXT"prowly-verification=0bfffdf5793810d77b19921b2f385dd02ef108099541b797f052fa79437082d3"300
TXT"prowly-verification=0cf7d5c6af761d3f992c30b16c91e7c8925325cedb9e017f72ab6e8cfd8a5763"300
TXT"prowly-verification=16fe23f8ab59245a1383f6b49b387f20924fd69cb1bcb8be4684abf19bba4156"300
TXT"prowly-verification=1d4f308ed52338d892775b94e4be64b9f4fa478895898f91bcfddb3b5946354d"300
TXT"prowly-verification=278b2aeadda7a6b932c1572b3bcc2b11b5bc012e4d6b340826ee4a309429ba22"300
TXT"prowly-verification=2baa4daf74fd6086c479b9ecc14eaa3184341488d4f7cfe0dec450076bb2b66d"300
TXT"prowly-verification=3337416ae9e167648223dcf91dad2562f9f34aaaab7520b10fa9efa80e846fc1"300
TXT"prowly-verification=34af76de18704108677e6d6a7ce579420d4902c76e7801278273c4379b14cf61"300
TXT"prowly-verification=3c3fd0a234cd8e590966276a0f2725b1bfb038b7c771e65a4fdfe76fc65907ee"300
TXT"prowly-verification=3d889b979c826489a256c3663ede3feacb8bb55d9e7f97ca18c35ea5b84aabec"300
TXT"prowly-verification=3efbec8211e26f4ccb5702b64a820420083691e085255d2af00c0b90d36dfeb1"300
TXT"prowly-verification=5e7451ce5b93b4660b47e23309f758cc237d75aec459bf5dbba8730ccdc96aa5"300
TXT"prowly-verification=6309bf116a6cc9868f4849a3b9c2f04651a8c38213eca6725d2197730a84b160"300
TXT"prowly-verification=75030c354c2e3d318781661381baf83fb5b9b47449ad77a2b285361fc06b4fdb"300
TXT"prowly-verification=7a04bf687fbaa0b022628c145b1a51c1694392949837ac84be1dac8b2a6aa21a"300
TXT"prowly-verification=85c5f6bcb75c4c012ac304313c643f1f0e5f5a2c4187c294f76d5afea4e0b287"300
TXT"prowly-verification=9227abd555567eb995d62f72c2487476d282d851df340c1296f62c1bad679d9b"300
TXT"prowly-verification=9c441b2bb652b00c664200725dd09328e6279f43381782feb09ff5341d148c0c"300
TXT"prowly-verification=9dc99bb032da557b2d920d8dca16c488b3b98931e0be8bb2c79bd5b7ba439558"300
TXT"prowly-verification=aad27d61446f6b6445213bbe2e8b8e2d8f218ec263093523ff8bad24afb28acc"300
TXT"prowly-verification=ba6dbc5c0788297f376c15d8cccb31b69e06e234c6ac1a0d2b40d57f4b1e309f"300
TXT"prowly-verification=c7bda1bfb31fefc18df3af42f81d26a7279be13569d3dbce12689d3390a3ed6a"300
TXT"prowly-verification=c90c8070d55d8874fac47d3806b6f6468e4fb4ae00e59ed277613b90c123d6b5"300
TXT"prowly-verification=dd7da9cebd0c45c07e4c7bf109d8bf33eb9e55716659f9e1c2a2cb5fe56de8fa"300
TXT"prowly-verification=e07de10b4d518b7809929a3f49c67729760b36c358114fce88144978cbbaf3dc"300
TXT"prowly-verification=e2c4d78801736b71b3d0218bb28d527c88e0b5fbc4e3073dc99f26facd1fd88a"300
TXT"prowly-verification=ed81b94465edfa8001fba83165db0aafaf8ae61fb915c3cca284d78eb08e0414"300
TXT"prowly-verification=ef063ae47925410c4216f1e22a5cf9e78f094b3731339fefbdc06f9d7e033f39"300
TXT"prowly-verification=fb9ff3d5b9c2e8d5108f23114dfc60f0af318b3a7ec03ffd577f98a09df81e42"300
TXT"prtoolkit-verification=75f9108ad583dbcdeb72f431e55a400faf71e1d0c1a30e9f86ee4b0f6c1a74dd"300
TXT"v=spf1 +mx ip4:167.89.79.245 ip4:167.89.11.23 include:598353.spf07.hubspotemail.net include:spf-a.prowly.com include:amazonses.com include:_spf.google.com include:spf.mandrillapp.com -all"300
CAA0 issue "pki.goog"3600
CAA0 issue "sectigo.com"3600
CAA0 issuewild "pki.goog"3600
CAA0 issuewild "sectigo.com"3600

Checks

  • !
    Very low TTLs
    These records have a TTL below 5m, causing extra queries and slower lookups: A (2m). Low TTLs are useful just before a planned change.
    #32
  • ✓ No CNAME at the apex #33
    The zone apex has no CNAME record.
  • i
    Wildcard record
    A random name under the zone resolves, so there is a wildcard (*) record. Typos and non-existent hosts resolve too, which can confuse mail and certificate checks.
    #34
  • ✓ CAA restricts issuance #35
    Certificates may be issued by: pki.goog, sectigo.com.