Dataweaz

prowly.com

Summary

Registrar
GoDaddy.com, LLC
Status
clientDeleteProhibited
Created on
June 9, 2007
Expires on
June 9, 2031
Name servers
ns-1198.awsdns-21.org, ns-870.awsdns-44.net, ns-19.awsdns-02.com, ns-2042.awsdns-63.co.uk
Mail servers
usb-smtp-inbound-1.mimecast.com, usb-smtp-inbound-2.mimecast.com
DMARC
Reject

Spoofing protection (DMARC)

Reject

E-mails spoofing this domain are rejected.

DMARC tells mail servers what to do with an e-mail that claims to come from prowly.com but fails SPF and DKIM checks.

Policy
Reject
Subdomain policy
Reject
Messages covered
100%
DKIM alignment
Relaxed
SPF alignment
Relaxed
Aggregate reports
[email protected]
Failure reports
—

Record

v=DMARC1; p=reject; rua=mailto:[email protected]

Authorized senders (SPF)

Strict

E-mails sent by any other server are rejected.

SPF lists the servers allowed to send e-mails for prowly.com.

RuleValueResult
mx—Allowed
ip4167.89.79.245Allowed
ip4167.89.11.23Allowed
include598353.spf07.hubspotemail.netAllowed
includespf-a.prowly.comAllowed
includeamazonses.comAllowed
include_spf.google.comAllowed
includespf.mandrillapp.comAllowed
all—Rejected

Top-level DNS lookups: 6 of 10 allowed

Record

v=spf1 +mx ip4:167.89.79.245 ip4:167.89.11.23 include:598353.spf07.hubspotemail.net include:spf-a.prowly.com include:amazonses.com include:_spf.google.com include:spf.mandrillapp.com -all

E-mail signing (DKIM)

DKIM keys published by prowly.com under the most common selectors. Other keys may exist under selectors specific to each sending service.

SelectorLikely serviceKeyStatus
googleGoogle WorkspaceRSA 2048 bitsActive
mandrillMandrillRSA 1024 bits · shortActive
s1SendGridRSA 2048 bitsActive
s2SendGridRSA 1024 bits · shortActive
mailjetMailjetRSA 1024 bits · shortActive
default—RSA 2048 bitsActive

RSA keys shorter than 2048 bits, called short keys, are discouraged: they are easier to break.

MX, SPF, DKIM and DMARC: the e-mail records

Four DNS records make a domain's e-mail work. MX says where e-mails sent to prowly.com arrive; SPF, DKIM and DMARC let mail servers check that an e-mail claiming to come from prowly.com was really sent by this domain, which protects it against spoofing.

MX

An MX (Mail Exchanger) record designates a server that receives e-mails sent to the domain. When someone writes to an @prowly.com address, their mail server queries the DNS for the domain's MX records, then delivers the message to the server they point to.

Example record

prowly.com  MX  10 mx1.prowly.com.
prowly.com  MX  20 mx2.prowly.com.

What the record contains

10, 20
Priority: the server with the lowest number is tried first. Servers with equal priority share the load.
mx1.prowly.com.
Host name of the mail server. It must point to an A or AAAA record: an IP address or an alias (CNAME) is not allowed here.
0 .
An MX "0 .", called a null MX, declares that the domain accepts no e-mail: sending servers give up at once instead of retrying.

Declaring at least two servers with different priorities avoids losing e-mails during an outage: sending servers retry for several days and fall back on the backup server. Without any MX, they try to deliver directly to the IP address of the domain.

SPF

SPF (Sender Policy Framework) is a TXT record listing the servers allowed to send e-mails on behalf of the domain. The receiving server checks that the sender is on this list. The final "all" rule says what to do with other servers: reject them (-all), flag their e-mails as suspicious (~all) or make no decision (?all).

Example record

prowly.com  TXT  "v=spf1 mx include:_spf.google.com ip4:192.0.2.10 -all"

What the record contains

v=spf1
Identifies the record as an SPF policy. It must come first.
ip4, ip6
Allows a specific IP address or an address range, for example ip4:192.0.2.0/24.
a, mx
Allows the addresses of the domain itself (A record) or those of its mail servers (MX).
include
Allows the servers of another domain, usually a sending service: include:_spf.google.com for Google Workspace.
-all, ~all
Final rule, applied to every other server. Its qualifier decides what happens to them: - rejects them, ~ flags their e-mails as suspicious, ? makes no decision, + accepts them (avoid it).

A domain must publish only one SPF record, and its evaluation cannot exceed 10 DNS lookups (include, a, mx, exists, redirect). Beyond that, mail servers treat it as invalid.

DKIM

DKIM (DomainKeys Identified Mail) signs every outgoing e-mail with a private key. The matching public key is published in a TXT record at selector._domainkey.prowly.com, so the recipient can check that the message really comes from the domain and was not altered on the way. The selector is chosen by each sending service and cannot be guessed: Dataweaz checks the most common ones (Google Workspace, Microsoft 365, Mailchimp, SendGrid…), so a key published under another selector may exist without appearing here.

Example record

google._domainkey.prowly.com  TXT  "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA…"

What the record contains

v=DKIM1
Protocol version. Optional but recommended, in which case it must come first.
k
Key algorithm: rsa, the most common, or ed25519.
p
Public key, base64-encoded. An empty value means the key has been revoked.
t
Flags: y marks a key in testing, whose failures must not be penalized; s forbids its use for subdomains.

Each sending service publishes its key under its own selector (google, selector1, k1…), which allows several keys and seamless rotation. A 2048-bit RSA key is recommended today.

DMARC

DMARC (Domain-based Message Authentication, Reporting and Conformance) builds on SPF and DKIM. Published on _dmarc.prowly.com, it tells mail servers what to do with an e-mail that fails these checks (let it through, send it to spam or reject it) and where to send reports.

Example record

_dmarc.prowly.com  TXT  "v=DMARC1; p=quarantine; rua=mailto:[email protected]; adkim=r; aspf=r"

What the record contains

v=DMARC1
Identifies the record as a DMARC policy. It must come first.
p
Policy applied to e-mails that fail the checks: none (monitoring only), quarantine (spam folder) or reject.
sp
Subdomain policy. Without it, subdomains follow the domain's policy.
rua
Address that receives daily aggregate reports about e-mails sent on behalf of the domain, whether they pass the checks or not.
ruf
Address that receives detailed failure reports, message by message. Few providers still send them.
pct
Percentage of e-mails subject to the policy, for a gradual rollout. 100 by default.
adkim, aspf
DKIM and SPF alignment: r (relaxed, a subdomain of the same domain is enough) or s (strict, the domain must be identical).

To roll out DMARC without blocking legitimate e-mails, start with p=none and an rua address, analyze the reports to find every service sending on behalf of the domain, then move to quarantine and finally to reject.

DNS records of prowly.com

IP addresses (A and AAAA)

An A record maps the domain name to an IPv4 address: the address of the server that browsers contact to display the website. The AAAA record does the same for an IPv6 address. A domain can have several of them to spread visits across several servers.

TypeIP address
A34.111.245.103

Name servers (NS)

NS records designate the authoritative DNS servers of the domain: they answer every question about its other records (A, MX, TXT…). They are provided by the registrar, the hosting provider or a dedicated DNS service, and several servers are declared so that the domain keeps working if one of them fails.

ServerIP address
ns-1198.awsdns-21.org205.251.196.174
ns-870.awsdns-44.net205.251.195.102
ns-19.awsdns-02.com205.251.192.19
ns-2042.awsdns-63.co.uk205.251.199.250

Mail servers (MX)

MX records point to the servers that receive e-mails sent to the domain, that is to @prowly.com addresses. Each server has a priority: the one with the lowest number is tried first, the others take over if it fails. Without an MX record, the domain cannot receive e-mails.

PriorityServerIP address
1usb-smtp-inbound-1.mimecast.com170.10.150.242
1usb-smtp-inbound-2.mimecast.com170.10.152.242

TXT records

TXT records hold free text. They are used to prove ownership of the domain to online services (Google, Microsoft, Facebook…) and to publish e-mail security rules: SPF on the domain itself, DMARC on _dmarc.prowly.com.

NameContent
prowly.commiro-verification=06c0c44b44af219ca7a206d9d8c9729d95a46db8
prowly.comgoogle-site-verification=Tye0sHwVNo6zB8bWDVzb_wN3BCCC_JpAOv_eXpTeuLI
prowly.comanthropic-domain-verification-xbcgw6=5OQ8AOhV8BvHMx3oIpf31Hbaj
prowly.comprowly-verification=9dc99bb032da557b2d920d8dca16c488b3b98931e0be8bb2c79bd5b7ba439558
prowly.comatlassian-domain-verification=HsXqGyMljRsmEH6YwDOlJeL5RynYoGdbTwkU3nPNRxORfQFJxVHQa2Gu/nlU53EU
prowly.comprowly-verification=6309bf116a6cc9868f4849a3b9c2f04651a8c38213eca6725d2197730a84b160
prowly.comv=spf1 +mx ip4:167.89.79.245 ip4:167.89.11.23 include:598353.spf07.hubspotemail.net include:spf-a.prowly.com include:amazonses.com include:_spf.google.com include:spf.mandrillapp.com -all
prowly.comprowly-verification=9227abd555567eb995d62f72c2487476d282d851df340c1296f62c1bad679d9b
prowly.comprowly-verification=3337416ae9e167648223dcf91dad2562f9f34aaaab7520b10fa9efa80e846fc1
prowly.comgoogle-site-verification=4JUX0XMMUdfGIcAJueUKPMF1RozD4lRnSiuVLOovYPE
prowly.comprowly-verification=aad27d61446f6b6445213bbe2e8b8e2d8f218ec263093523ff8bad24afb28acc
prowly.comprowly-verification=16fe23f8ab59245a1383f6b49b387f20924fd69cb1bcb8be4684abf19bba4156
prowly.comprowly-verification=ed81b94465edfa8001fba83165db0aafaf8ae61fb915c3cca284d78eb08e0414
prowly.comprowly-verification=e2c4d78801736b71b3d0218bb28d527c88e0b5fbc4e3073dc99f26facd1fd88a
prowly.comgoogle-site-verification=Kd1dG0dJsJa4bj3q29-0wldmqH2tYRqWzUn4JWcv3xc
prowly.comgoogle-site-verification=VveqqQngLN7_J8nSdaj1r6CzT0S2nGuSKT2nOjYqSY4
prowly.comMS=ms16166008
prowly.comprowly-verification=7a04bf687fbaa0b022628c145b1a51c1694392949837ac84be1dac8b2a6aa21a
prowly.comopenai-domain-verification=dv-0jxCorSWqmvgOC5CvExaW2zk
prowly.comprowly-verification=3efbec8211e26f4ccb5702b64a820420083691e085255d2af00c0b90d36dfeb1
prowly.comgoogle-site-verification=yuZhiU9KUQbzCeLXG3Yk6Z6NkErVspt8nCwbpux_yXQ
prowly.comprowly-verification=85c5f6bcb75c4c012ac304313c643f1f0e5f5a2c4187c294f76d5afea4e0b287
prowly.comprowly-verification=0a71a24167be421ef0ab5a487324491a5898727324a86b8914b28b712af204df
prowly.comprowly-verification=5e7451ce5b93b4660b47e23309f758cc237d75aec459bf5dbba8730ccdc96aa5
prowly.comprowly-verification=ef063ae47925410c4216f1e22a5cf9e78f094b3731339fefbdc06f9d7e033f39
prowly.comprowly-verification=c7bda1bfb31fefc18df3af42f81d26a7279be13569d3dbce12689d3390a3ed6a
prowly.comprowly-verification=2baa4daf74fd6086c479b9ecc14eaa3184341488d4f7cfe0dec450076bb2b66d
prowly.comprowly-verification=278b2aeadda7a6b932c1572b3bcc2b11b5bc012e4d6b340826ee4a309429ba22
prowly.comfigma-domain-verification=465338db400ac24069e945556594420809efdfdb0b4805fe074646a1eeb9b110-1733485817
prowly.comfacebook-domain-verification=lb4rq4aimvna30r1kfkyvy3dwy845g
prowly.comprowly-verification=3d889b979c826489a256c3663ede3feacb8bb55d9e7f97ca18c35ea5b84aabec
prowly.comprowly-verification=75030c354c2e3d318781661381baf83fb5b9b47449ad77a2b285361fc06b4fdb
prowly.comprowly-verification=9c441b2bb652b00c664200725dd09328e6279f43381782feb09ff5341d148c0c
prowly.comgoogle-site-verification=Rsm6S7O-noeE5fIQDw4tKmpesGst78hqTddMuVMGGec
prowly.comgoogle-site-verification=gakPJysRnEeelF-snblilXfDWg_MPOhZ0Ld3Udetl_Q
prowly.comprowly-verification=ba6dbc5c0788297f376c15d8cccb31b69e06e234c6ac1a0d2b40d57f4b1e309f
prowly.comprowly-verification=34af76de18704108677e6d6a7ce579420d4902c76e7801278273c4379b14cf61
prowly.comprowly-verification=0cf7d5c6af761d3f992c30b16c91e7c8925325cedb9e017f72ab6e8cfd8a5763
prowly.comknowbe4-site-verification=5467cf585e7edef32f5a29b6efcf596b
prowly.comprowly-verification=0bfffdf5793810d77b19921b2f385dd02ef108099541b797f052fa79437082d3
prowly.comadobe-idp-site-verification=9e2233e4bee36f8c577772a15f83ea2887da0acd12ee965b777ec700857c2bbb
prowly.comZOOM_verify_q5Gh0tSVWWOwVROGi3RZH8
prowly.comprtoolkit-verification=75f9108ad583dbcdeb72f431e55a400faf71e1d0c1a30e9f86ee4b0f6c1a74dd
prowly.comprowly-verification=1d4f308ed52338d892775b94e4be64b9f4fa478895898f91bcfddb3b5946354d
prowly.comprowly-verification=fb9ff3d5b9c2e8d5108f23114dfc60f0af318b3a7ec03ffd577f98a09df81e42
prowly.comprowly-verification=3c3fd0a234cd8e590966276a0f2725b1bfb038b7c771e65a4fdfe76fc65907ee
prowly.comgoogle-site-verification=VPXYT0cB2eM9ykwpQF-MLKVQC03K2QLYuYxIpyqbSFM
prowly.comprowly-verification=e07de10b4d518b7809929a3f49c67729760b36c358114fce88144978cbbaf3dc
prowly.comdocker-verification=99d48830-d938-485d-a8bf-c2c40e56e046
prowly.comprowly-verification=dd7da9cebd0c45c07e4c7bf109d8bf33eb9e55716659f9e1c2a2cb5fe56de8fa
prowly.comgoogle-site-verification=PC5M4xCu0PCl_55C7AZCul-oxoRw4Fc0SmU67f-8um4
prowly.comprowly-verification=c90c8070d55d8874fac47d3806b6f6468e4fb4ae00e59ed277613b90c123d6b5
prowly.comcursor-domain-verification-edgdge=mrP1Pqj4iEUj9x9AAbjzEtfJ8
_dmarc.prowly.comv=DMARC1; p=reject; rua=mailto:[email protected]
google._domainkey.prowly.comv=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhf0zsCyQDD7WgnJAwpJGKQejjDjBoQ55Aig4KeZop0LjyzszaQxhXUr2lnjBBMLEFBxeiN9gmGvTmnd1Wt/S2Tz3JBw22qamt2BVi2Z1NmHJkUs2aSpiEVju15eXWAe6wZgl1+wHHE0cSIWmeSyKavuc8wFlUAOP+DIlSSBLUs7ExMHYZ8bFoTjT6/eZtmF/POwII+LAMs20TZcRaUKvz1us91dip6CgxE/H+68VReukxUm1nrfkyqBtcVkJmt6Yn+amLN0SQXUSpozlse6x2wORdyy0ANoTHKKsZ6//zmKr8LKNfDLQ0PKEjkallIyOMkOoStqSzrfOAhAxnv4LxwIDAQAB
mandrill._domainkey.prowly.comv=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCrLHiExVd55zd/IQ/J/mRwSRMAocV/hMB3jXwaHH36d9NaVynQFYV8NaWi69c1veUtRzGt7yAioXqLj7Z4TeEUoOLgrKsn8YnckGs9i3B3tVFB+Ch/4mPhXWiNfNdynHWBcPcbJ8kjEQ2U8y78dHZj1YeRXXVvWob2OaKynO8/lQIDAQAB;
s1._domainkey.prowly.comk=rsa; t=s; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+FB/wi4D6nccomRXBSXUW77J1meeVay2EJxzjsyZ04pCoCkSgOLSV/FU8XQuz+oJ6AqJoxsaudPZYBvPiIB0oWlbS82khjjrsudamJD40yJeOrwhC0MBhYO7c76k8UsE8hJUIET2T13MBNiwSWmQBsw2vMVq4x7QGViMULJVaYritzW//+UHgjd2bmi7e06Krxnup0uK8XWhl3O+bO+GuSxsp4bv9ydvysIGT/l0WkwXbXxRRYMiXhR4vHPrcUKPbJsKURdg8mToKtRkVJAD2AblPrsx0WRhX/mFMPBS2y5A4v9KWOA6BClsmFxBBzVbhjIzkvd4k/M4Gt93DhYxwIDAQAB
s2._domainkey.prowly.comk=rsa; t=s; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDIYPq6xdvtPS2w21pTojDEcpGfKHa7siHtvpJ10XemlpLp3YW6AlHzVUiKrHrqNn/VnPh2W0pmebrFaV2H5h6N+ehxOxJS/6t3HYQJ+DagchiZhbtkwa9JdDDgcLXI9K5I6rJc+1lff8p2mdpDvqGJTic86Pr1uZopOcqN82dUEQIDAQAB
mailjet._domainkey.prowly.comk=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCgrLRe3akYLSZE0ESr0QtqqLpFKAV4YM/2GSNlihgaUfA1uDAkAsRKWLTtNlnEWeHUIGjJ6QB+Y/HU812hKvXnxpbyqS1ZRJzE/G0X5GkgpBDLXrHLO9KvOXvAFRrYH6wMHhsK01P8o9SHTyV/ZIhDsmWgHMCr5Y5y9l75CDlYSwIDAQAB
default._domainkey.prowly.comv=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8rlR2xLys9riZaO2Dva08Qds5Z/zW9833ZLbAZhyddP+ZlpUYa9tFV+Ad4klahcjhP5Fjdp8bzrSSHEOrPH5ZcWieqPVs90/EDG14Hvc23hYa1cwW0NLNRdQalwHg0p/32CqwL+KGVoEjWEk8pLNJ/4WDMDu2Z560U8cmpiZX+8BT0rPPaFWFwHSE1sglly9z2vpYSTqLYMIYjtqLVpQYuDFvemC95PLMPTFQW+PPEFVjWKLUbO29VpbebBE3kN8pQTFPcrOZGQobhzbevmaiN6VFvqXMhL351yJt+uLJDhExh7I2KvsdV56+B7z/dKElCLOFRVdf2139C5Q1itIwIDAQAB

Related IP addresses

IPv4 addresses used by prowly.com: website, name servers, mail servers and senders authorized by SPF.

IP addressUsed for/24 block
34.111.245.103Website34.111.245.0/24
205.251.196.174Name server ns-1198.awsdns-21.org205.251.196.0/24
205.251.195.102Name server ns-870.awsdns-44.net205.251.195.0/24
205.251.192.19Name server ns-19.awsdns-02.com205.251.192.0/24
205.251.199.250Name server ns-2042.awsdns-63.co.uk205.251.199.0/24
170.10.150.242Mail server usb-smtp-inbound-1.mimecast.com170.10.150.0/24
170.10.152.242Mail server usb-smtp-inbound-2.mimecast.com170.10.152.0/24
167.89.79.245Authorized by SPF167.89.79.0/24
167.89.11.23Authorized by SPF167.89.11.0/24

WHOIS of the domain prowly.com

Domain Name: PROWLY.COM
   Registry Domain ID: 1018587619_DOMAIN_COM-VRSN
   Registrar WHOIS Server: whois.godaddy.com
   Registrar URL: http://www.godaddy.com
   Updated Date: 2022-09-14T01:39:33Z
   Creation Date: 2007-06-09T10:26:16Z
   Registry Expiry Date: 2031-06-09T10:26:16Z
   Registrar: GoDaddy.com, LLC
   Registrar IANA ID: 146
   Registrar Abuse Contact Email: [email protected]
   Registrar Abuse Contact Phone: 480-624-2505
   Domain Status: clientDeleteProhibited https://icann.org/epp#clientDeleteProhibited
   Domain Status: clientRenewProhibited https://icann.org/epp#clientRenewProhibited
   Domain Status: clientTransferProhibited https://icann.org/epp#clientTransferProhibited
   Domain Status: clientUpdateProhibited https://icann.org/epp#clientUpdateProhibited
   Name Server: NS-1198.AWSDNS-21.ORG
   Name Server: NS-19.AWSDNS-02.COM
   Name Server: NS-2042.AWSDNS-63.CO.UK
   Name Server: NS-870.AWSDNS-44.NET
   DNSSEC: unsigned
   URL of the ICANN Whois Inaccuracy Complaint Form: https://www.icann.org/wicf/
>>> Last update of whois database: 2026-10-02T11:02:58Z <<<

For more information on Whois status codes, please visit https://icann.org/epp

NOTICE: The expiration date displayed in this record is the date the
registrar's sponsorship of the domain name registration in the registry is
currently set to expire. This date does not necessarily reflect the expiration
date of the domain name registrant's agreement with the sponsoring
registrar.  Users may consult the sponsoring registrar's Whois database to
view the registrar's reported date of expiration for this registration.

TERMS OF USE: You are not authorized to access or query our Whois
database through the use of electronic processes that are high-volume and
automated except as reasonably necessary to register domain names or
modify existing registrations; the Data in VeriSign Global Registry
Services' ("VeriSign") Whois database is provided by VeriSign for
information purposes only, and to assist persons in obtaining information
about or related to a domain name registration record. VeriSign does not
guarantee its accuracy. By submitting a Whois query, you agree to abide
by the following terms of use: You agree that you may use this Data only
for lawful purposes and that under no circumstances will you use this Data
to: (1) allow, enable, or otherwise support the transmission of mass
unsolicited, commercial advertising or solicitations via e-mail, telephone,
or facsimile; or (2) enable high volume, automated, electronic processes
that apply to VeriSign (or its computer systems). The compilation,
repackaging, dissemination or other use of this Data is expressly
prohibited without the prior written consent of VeriSign. You agree not to
use electronic processes that are automated and high-volume to access or
query the Whois database except as reasonably necessary to register
domain names or modify existing registrations. VeriSign reserves the right
to restrict your access to the Whois database in its sole discretion to ensure
operational stability.  VeriSign may restrict or terminate your access to the
Whois database for failure to abide by these terms of use. VeriSign
reserves the right to modify these terms at any time.

The Registry database contains ONLY .COM, .NET, .EDU domains and
Registrars.