Shortcuts: Top | Url-Checks | Comments | Connections | Certificates | CT-Logs | Html-Content | CAA | TXT |


X

DNS-problem - authoritative Nameserver refused, not defined or timeout

last check:
15.04.2019 10:35:34


Older results

No older results found
HostTIP-Addressis auth.∑ Queries∑ Timeout
dhdr.duckdns.org
A
81.10.140.55
yes
1
0

AAAA

yes


www.dhdr.duckdns.org


yes
3
3
www.dhdr.duckdns.org
A
81.10.140.55
no



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
org
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.04.2019, 05:00:00, Signature-Inception: 15.04.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

4 DNSKEY RR found

Public Key with Algorithm 7, KeyTag 9062, Flags 256

Public Key with Algorithm 7, KeyTag 9795, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 16454, Flags 256

Public Key with Algorithm 7, KeyTag 17883, Flags 257 (SEP = Secure Entry Point)

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 9062, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 9795, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 17883, Signer-Name: org

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9062 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9795 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 17883 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 1 and Digest "Nk36s9ryVMq0d7VnWxB2bdqiSYI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 2 and Digest "OSKzG286TqkrGet7UhIPAx/Y4F/wsDuvz5+JG/5/+OU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
duckdns.org
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


dhdr.duckdns.org
0 DS RR in the parent zone found

0 DNSKEY RR found


www.dhdr.duckdns.org
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.dhdr.duckdns.org
 

dhdr.duckdns.org
U  ns1.duckdns.org
54.187.92.222

U  ns2.duckdns.org
54.191.117.119

U  ns3.duckdns.org
52.26.169.94
duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

org
  a0.org.afilias-nst.info / ns000b.app22.mia2.afilias-nst.info


  a2.org.afilias-nst.info / 1.fra.pch


  b0.org.afilias-nst.org / ns000b.app23.ams2.afilias-nst.info


  b2.org.afilias-nst.org / 5.fra.pch


  c0.org.afilias-nst.info / ns000b.app28.ams2.afilias-nst.info


  d0.org.afilias-nst.org / ns000b.app4.lax1.afilias-nst.info



SOA - records (beta)

Domain:org
Primary:a0.org.afilias-nst.info
Mail:noc.afilias-nst.info
Serial:2013431627
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:6


Domain:duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:dhdr.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:dhdr.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:dhdr.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domainname Http-StatusredirectSec.G
• http://dhdr.duckdns.org/
81.10.140.55
-2

1.200
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 81.10.140.55:80

• http://www.dhdr.duckdns.org/
81.10.140.55
-2

1.110
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 81.10.140.55:80

• https://dhdr.duckdns.org/
81.10.140.55
-2

1.123
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 81.10.140.55:443

• https://www.dhdr.duckdns.org/
81.10.140.55
-2

1.140
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 81.10.140.55:443

• http://dhdr.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
81.10.140.55
-2

1.124
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 81.10.140.55:80
Visible Content:

• http://www.dhdr.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
81.10.140.55
-2

1.107
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 81.10.140.55:80
Visible Content:

Comments

Aname "dhdr.duckdns.org" is domain, public suffix is "duckdns.org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)"
Agood: All ip addresses are public addresses
Vhttp://dhdr.duckdns.org/ 81.10.140.55
-2

connect failure - perhaps firewall
Vhttp://www.dhdr.duckdns.org/ 81.10.140.55
-2

connect failure - perhaps firewall
Vhttps://dhdr.duckdns.org/ 81.10.140.55
-2

connect failure - perhaps firewall
Vhttps://www.dhdr.duckdns.org/ 81.10.140.55
-2

connect failure - perhaps firewall
Vhttp://dhdr.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 81.10.140.55
-2

connect failure - perhaps firewall
Vhttp://www.dhdr.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 81.10.140.55
-2

connect failure - perhaps firewall
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org / 54.187.92.222: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org / 54.191.117.119: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org / 52.26.169.94: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
AGood: Nameserver supports Echo Capitalization: 3 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 3 good Nameserver

Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 54.187.92.222: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 54.191.117.119: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: fatal timeout. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 52.26.169.94: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 112436 milliseconds, 112.436 seconds


Connections

No connection informations found. Perhaps only http - connections.


Certificates

No certificate informations found. Perhaps only http - connections.


Last Certificates - Certificate Transparency Log Check (BETA)

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
2
18

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1177412900
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-02-05 15:24:27
2019-05-06 14:24:27
gitea.dhdr.duckdns.org
1 entries


1177412554
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-02-05 15:24:20
2019-05-06 14:24:20
cloud.dhdr.duckdns.org
1 entries


997792979
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-12-02 11:14:50
2019-03-02 11:14:50
gitea.dhdr.duckdns.org
1 entries


997795314
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-12-02 11:14:38
2019-03-02 11:14:38
cloud.dhdr.duckdns.org
1 entries


813051671
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-09-08 10:14:33
2018-12-07 11:14:33
gitea.dhdr.duckdns.org
1 entries


813049370
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-09-08 10:14:25
2018-12-07 11:14:25
cloud.dhdr.duckdns.org
1 entries


625348976
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-07-02 13:25:46
2018-09-30 13:25:46
gitea.dhdr.duckdns.org
1 entries


625363215
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-07-02 13:25:38
2018-09-30 13:25:38
cloud.dhdr.duckdns.org
1 entries


438624996
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-05-01 15:53:20
2018-07-30 15:53:20
miniflux.dhdr.duckdns.org
1 entries


438510588
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-05-01 14:10:04
2018-07-30 14:10:04
portainer.dhdr.duckdns.org
1 entries


438454653
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-05-01 13:19:44
2018-07-30 13:19:44
gitea.dhdr.duckdns.org
1 entries


438454502
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2018-05-01 13:19:35
2018-07-30 13:19:35
cloud.dhdr.duckdns.org
1 entries


277210468
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-12-13 06:03:05
2018-03-13 06:03:05
gitea.dhdr.duckdns.org
1 entries


277210328
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-12-13 06:02:56
2018-03-13 06:02:56
cloud.dhdr.duckdns.org
1 entries


233453073
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-10-17 12:08:11
2018-01-15 13:08:11
pb.dhdr.duckdns.org
1 entries


230948731
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-10-14 06:29:17
2018-01-12 07:29:17
cloud.dhdr.duckdns.org
1 entries


230938917
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-10-14 06:12:50
2018-01-12 07:12:50
gitea.dhdr.duckdns.org
1 entries


230156882
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2017-10-13 06:29:26
2018-01-11 07:29:26
gitea.dhdr.duckdns.org
1 entries



Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
dhdr.duckdns.org



1
0
duckdns.org
0

no CAA entry found
1
0
org
0

no CAA entry found
1
0


TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
dhdr.duckdns.org

ok
1
0
_acme-challenge.dhdr.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.dhdr.duckdns.org.dhdr.duckdns.org

perhaps wrong
1
0



Permalink: https://check-your-website.server-daten.de/?i=d2fea9bc-7db6-426e-a768-1f8032c7401d


Last Result: https://check-your-website.server-daten.de/?q=dhdr.duckdns.org