Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


V

Connect failure - perhaps firewall

Checked:
15.04.2019 00:10:26


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
endhost.online
A
31.220.52.58
yes
2
0

AAAA

yes


www.endhost.online
C
endhost.online
yes
1
0

A
31.220.52.58
yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
online
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 27.04.2019, 17:00:00, Signature-Inception: 14.04.2019, 16:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

3 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 4267, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 18043, Flags 256

Public Key with Algorithm 8, KeyTag 23145, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 3600 sec, Signature-expiration: 10.05.2019, 16:20:31, Signature-Inception: 10.04.2019, 03:27:13, KeyTag 4267, Signer-Name: online

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 4267 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 4267, DigestType 1 and Digest "oDjaBqlq2Om/4rp4w5L/eAS0zSs=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 4267, DigestType 2 and Digest "ZtcBBgnLGema0dooM92rjKLnrMHOhwzCjSnnbrU9Obo=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
endhost.online
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


www.endhost.online
0 DS RR in the parent zone found


DomainNameserverNS-IP
endhost.online
  ns1.hostinger.ph / ns1.hostinger.com
31.170.163.241

T  ns2.hostinger.ph / ns2.hostinger.com
31.220.23.1

  ns3.hostinger.ph / ns3.hostinger.com
173.192.183.247

  ns4.hostinger.ph / ns4.hostinger.com
31.170.164.249
online
  a.nic.online / NRDT-75SODK-AB8TIQ


  b.nic.online / FMCL-UEZCAO-YJSSPL


  c.nic.online / hivecast-23-cator.as15135.net Radix-C


  d.nic.online / hivecast-2-defra.as15135.net Radix-D



SOA - records (beta)

Domain:online
Primary:ns0.centralnic.net
Mail:hostmaster.centralnic.net
Serial:1240076
Refresh:900
Retry:1800
Expire:6048000
TTL:3600
num Entries:4


Domain:endhost.online
Primary:ns1.hostinger.ph
Mail:hostmaster.endhost.online
Serial:2019022509
Refresh:28800
Retry:7200
Expire:604800
TTL:86400
num Entries:4


2. Url-Checks

Domainname Http-StatusredirectSec.G
• http://endhost.online/
31.220.52.58
-2

1.367
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 31.220.52.58:80

• http://www.endhost.online/
31.220.52.58
-2

1.364
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 31.220.52.58:80

• https://endhost.online/
31.220.52.58
-2

1.466
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 31.220.52.58:443

• https://www.endhost.online/
31.220.52.58
-2

1.363
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 31.220.52.58:443

• http://endhost.online/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
31.220.52.58
-2

1.370
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 31.220.52.58:80
Visible Content:

• http://www.endhost.online/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
31.220.52.58
-2

1.487
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 31.220.52.58:80
Visible Content:

3. Comments

Aname "endhost.online" is domain, public suffix is "online", top-level-domain-type is "generic", tld-manager is "DotOnline Inc."
Agood: All ip addresses are public addresses
Agood: No asked Authoritative Name Server had a timeout
Vhttp://endhost.online/ 31.220.52.58
-2

connect failure - perhaps firewall
Vhttp://www.endhost.online/ 31.220.52.58
-2

connect failure - perhaps firewall
Vhttps://endhost.online/ 31.220.52.58
-2

connect failure - perhaps firewall
Vhttps://www.endhost.online/ 31.220.52.58
-2

connect failure - perhaps firewall
Vhttp://endhost.online/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 31.220.52.58
-2

connect failure - perhaps firewall
Vhttp://www.endhost.online/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 31.220.52.58
-2

connect failure - perhaps firewall
AGood: Nameserver supports TCP connections: 4 good Nameserver
XNameserver Timeout checking Echo Capitalization: ns2.hostinger.ph / 31.220.23.1
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 4 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns2.hostinger.ph / 31.220.23.1: OP100: fatal timeout. FLAGS: fatal timeout. V1: fatal timeout. V1OP100: ok. V1FLAGS: fatal timeout. DNSSEC: fatal timeout. V1DNSSEC: fatal timeout. NSID: ok (ns2.hostinger.com). COOKIE: ok. CLIENTSUBNET: fatal timeout.
AGood: All SOA have the same Serial Number
Agood: CAA entries found, creating certificate is limited: comodoca.com is allowed to create certificates
Agood: CAA entries found, creating certificate is limited: digicert.com is allowed to create certificates
Agood: CAA entries found, creating certificate is limited: globalsign.com is allowed to create certificates
Agood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create certificates
Agood: CAA entries found, creating certificate is limited: comodoca.com is allowed to create wildcard-certificates
Agood: CAA entries found, creating certificate is limited: digicert.com is allowed to create wildcard-certificates
Agood: CAA entries found, creating certificate is limited: globalsign.com is allowed to create wildcard-certificates
Agood: CAA entries found, creating certificate is limited: letsencrypt.org is allowed to create wildcard-certificates
Warning: Unknown CAA found.: comodoca.com isn't defined. May be a missing entry in this tool, maybe an expired CAA
Warning: Unknown CAA found.: comodoca.com isn't defined. May be a missing entry in this tool, maybe an expired CAA
ADuration: 56364 milliseconds, 56.364 seconds


4. Connections

No connection informations found. Perhaps only http - connections.


5. Certificates

No certificate informations found. Perhaps only http - connections.


6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

No CertSpotter - Certificate-Transparency-Log informations found. The feature is new (startet 2019-05-07), so recheck this domain.


2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
10
10

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1331105212
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-22 03:34:28
2019-06-20 02:34:28
endhost.online, www.endhost.online
2 entries


1314173962
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-18 12:19:03
2019-06-16 11:19:03
endhost.online
1 entries


1273251530
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-10 14:21:04
2019-06-08 13:21:04
endhost.online, www.endhost.online
2 entries


1273249016
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-10 14:19:37
2019-06-08 13:19:37
endhost.online
1 entries


1273225372
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-10 14:00:00
2019-06-08 13:00:00
endhost.online
1 entries


1272098861
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-09 23:39:12
2019-06-07 22:39:12
endhost.online, www.endhost.online
2 entries


1272093750
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-09 23:35:14
2019-06-07 22:35:14
endhost.online
1 entries


1272089131
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-09 23:30:40
2019-06-07 22:30:40
endhost.online, www.endhost.online
2 entries


1271996324
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-09 22:32:30
2019-06-07 21:32:30
endhost.online, www.endhost.online
2 entries


1269242597
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-08 13:04:49
2019-06-06 12:04:49
endhost.online, www.endhost.online
2 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.endhost.online
5
issue
comodoca.com
1
0

9
issuewild
comodoca.com
1
0

5
issue
digicert.com
1
0

9
issuewild
digicert.com
1
0

5
issue
globalsign.com
1
0

9
issuewild
globalsign.com
1
0

5
issue
letsencrypt.org
1
0

9
issuewild
letsencrypt.org
1
0

5
issue
comodoca.com
1
0
endhost.online
9
issuewild
comodoca.com
1
0

5
issue
digicert.com
1
0

9
issuewild
digicert.com
1
0

5
issue
globalsign.com
1
0

9
issuewild
globalsign.com
1
0

5
issue
letsencrypt.org
1
0

9
issuewild
letsencrypt.org
1
0
online
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
endhost.online
v=spf1 include:spf.mx.hostinger.com include:relay.mailchannels.net ~all
ok
1
0
www.endhost.online
v=spf1 include:spf.mx.hostinger.com include:relay.mailchannels.net ~all
ok
1
0
_acme-challenge.endhost.online

Name Error - The domain name does not exist
1
0
_acme-challenge.www.endhost.online

Name Error - The domain name does not exist
1
0
_acme-challenge.endhost.online.endhost.online

Name Error - The domain name does not exist
1
0
_acme-challenge.www.endhost.online.www.endhost.online

Name Error - The domain name does not exist
1
0



Permalink: https://check-your-website.server-daten.de/?i=4683bd3a-a81e-4f23-b57d-babdaa3d80c2


Last Result: https://check-your-website.server-daten.de/?q=endhost.online - 2019-04-15 00:10:26