Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
16.05.2019 10:01:11


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
cdk.syrocon.cloud

Refused
yes
1
0
www.cdk.syrocon.cloud

Refused
yes
1
0


Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 00:00:00, Signature-Inception: 11.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
cloud
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 29.05.2019, 05:00:00, Signature-Inception: 16.05.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 19581, Flags 256

Public Key with Algorithm 8, KeyTag 63784, Flags 257 (SEP = Secure Entry Point)

2 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 1 Labels, original TTL: 900 sec, Signature-expiration: 10.06.2019, 13:08:04, Signature-Inception: 11.05.2019, 12:41:46, KeyTag 19581, Signer-Name: cloud

Algorithm: 8, 1 Labels, original TTL: 900 sec, Signature-expiration: 10.06.2019, 13:08:04, Signature-Inception: 11.05.2019, 12:41:46, KeyTag 63784, Signer-Name: cloud

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 19581 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 63784 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 63784, DigestType 1 and Digest "iEbTr4G3ByViLQuP2xYZZIyhl+w=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 63784, DigestType 2 and Digest "2pC3yOhaolj93rMn8UyiCp83/MW5GZOF3/cbv8SThj8=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
syrocon.cloud
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


cdk.syrocon.cloud
0 DS RR in the parent zone found

0 DNSKEY RR found


www.cdk.syrocon.cloud
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.cdk.syrocon.cloud
 

cdk.syrocon.cloud
  ns-1427.awsdns-50.org
205.251.197.147

 
2600:9000:5305:9300::1

  ns-1950.awsdns-51.co.uk
205.251.199.158

 
2600:9000:5307:9e00::1

  ns-331.awsdns-41.com
205.251.193.75

 
2600:9000:5301:4b00::1

  ns-745.awsdns-29.net
205.251.194.233

 
2600:9000:5302:e900::1
syrocon.cloud
  ns-1003.awsdns-61.net / a50c7c46d74217c10ed26284a8fbf9f5 -


  ns-1333.awsdns-38.org / e06550436c597110aad241e4c6b63214 -


  ns-148.awsdns-18.com / b25ac67365ab6c3da36d9c2e9c480b38 -


  ns-1931.awsdns-49.co.uk / 135d92c0bee07417a2083a2b1ba25666 -

cloud
X  a.nic.cloud / dns3.sjc


  b.nic.cloud / dns3.ams


  c.nic.cloud / dns2.ams


  d.nic.cloud / dns1.ams



SOA - records (beta)

Domain:cloud
Primary:a.nic.cloud
Mail:support.ariservices.com
Serial:1557993403
Refresh:1800
Retry:300
Expire:1814400
TTL:1800
num Entries:4


Domain:syrocon.cloud
Primary:ns-1333.awsdns-38.org
Mail:awsdns-hostmaster.amazon.com
Serial:1
Refresh:7200
Retry:900
Expire:1209600
TTL:86400
num Entries:4


2. Url-Checks

Domainname Http-StatusredirectSec.G







3. Comments

Aname "cdk.syrocon.cloud" is subdomain, public suffix is "cloud", top-level-domain-type is "generic", tld-manager is "ARUBA PEC S.p.A."
Agood: No asked Authoritative Name Server had a timeout
XFatal error: Nameserver doesn't support TCP connection: a.nic.cloud: Fatal error (-14). Details: Unable to read data from the transport connection: An existing connection was forcibly closed by the remote host. - An existing connection was forcibly closed by the remote host
XFatal error: Nameserver doesn't support TCP connection: ns-1427.awsdns-50.org / 205.251.197.147: Refused
XFatal error: Nameserver doesn't support TCP connection: ns-1427.awsdns-50.org / 2600:9000:5305:9300::1: Refused
XFatal error: Nameserver doesn't support TCP connection: ns-1950.awsdns-51.co.uk / 205.251.199.158: Refused
XFatal error: Nameserver doesn't support TCP connection: ns-1950.awsdns-51.co.uk / 2600:9000:5307:9e00::1: Refused
XFatal error: Nameserver doesn't support TCP connection: ns-331.awsdns-41.com / 205.251.193.75: Refused
XFatal error: Nameserver doesn't support TCP connection: ns-331.awsdns-41.com / 2600:9000:5301:4b00::1: Refused
XFatal error: Nameserver doesn't support TCP connection: ns-745.awsdns-29.net / 205.251.194.233: Refused
XFatal error: Nameserver doesn't support TCP connection: ns-745.awsdns-29.net / 2600:9000:5302:e900::1: Refused
AGood: Nameserver supports Echo Capitalization: 8 good Nameserver
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns-1427.awsdns-50.org
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns-1950.awsdns-51.co.uk
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns-331.awsdns-41.com
XFatal error: Nameserver doesn't support EDNS with max. 512 Byte Udp payload or sends more then 512 Bytes: ns-745.awsdns-29.net
AGood: Nameserver has passed 10 EDNS-Checks (OP100, FLAGS, V1, V1OP100, V1FLAGS, DNSSEC, V1DNSSEC, NSID, COOKIE, CLIENTSUBNET): 4 good Nameserver

Nameserver doesn't pass all EDNS-Checks: b.nic.cloud: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: ok (dns3.ams). COOKIE: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: c.nic.cloud: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (dns2.ams). COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: d.nic.cloud: OP100: ok. FLAGS: ok. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: ok. V1DNSSEC: ok. NSID: SOA expected, but NOT found, NOERR expectend and NOERR found, Version 0 expectend and found (dns1.ams). COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns-1427.awsdns-50.org / 205.251.197.147: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-1427.awsdns-50.org / 2600:9000:5305:9300::1: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-1950.awsdns-51.co.uk / 205.251.199.158: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-1950.awsdns-51.co.uk / 2600:9000:5307:9e00::1: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-331.awsdns-41.com / 205.251.193.75: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-331.awsdns-41.com / 2600:9000:5301:4b00::1: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-745.awsdns-29.net / 205.251.194.233: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
Nameserver doesn't pass all EDNS-Checks: ns-745.awsdns-29.net / 2600:9000:5302:e900::1: OP100: no result. FLAGS: no result. V1: ok. V1OP100: ok. V1FLAGS: ok. DNSSEC: no result. V1DNSSEC: ok. NSID: no result. COOKIE: no result. CLIENTSUBNET: no result.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 48864 milliseconds, 48.864 seconds


4. Connections

No connection informations found. Perhaps only http - connections.


5. Certificates

No certificate informations found. Perhaps only http - connections.


6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

No CertSpotter - CT-Log entries found


2. Source crt.sh - old and new certificates, sometimes very slow.

No CRT - CT-Log entries found


7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
cdk.syrocon.cloud
-5

Refused - The name server refuses to perform the specified operation for policy reasons
1
0
syrocon.cloud
0

no CAA entry found
1
0
cloud
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
cdk.syrocon.cloud

Refused - The name server refuses to perform the specified operation for policy reasons
1
0
_acme-challenge.cdk.syrocon.cloud

Refused - The name server refuses to perform the specified operation for policy reasons
1
0
_acme-challenge.cdk.syrocon.cloud.syrocon.cloud

Refused - The name server refuses to perform the specified operation for policy reasons
1
0
_acme-challenge.cdk.syrocon.cloud.cdk.syrocon.cloud

Refused - The name server refuses to perform the specified operation for policy reasons
1
0



Permalink: https://check-your-website.server-daten.de/?i=d872d856-37b7-4659-9f36-89c65ab58cea


Last Result: https://check-your-website.server-daten.de/?q=cdk.syrocon.cloud - 2019-05-16 10:01:11