Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
14.05.2019 02:01:27


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
ha101.duckdns.org
A
86.132.125.14
yes
1
0

AAAA

yes


www.ha101.duckdns.org
A
86.132.125.14
yes
1
0

AAAA

yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 00:00:00, Signature-Inception: 11.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
org
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 26.05.2019, 17:00:00, Signature-Inception: 13.05.2019, 16:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

4 DNSKEY RR found

Public Key with Algorithm 7, KeyTag 9795, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 16454, Flags 256

Public Key with Algorithm 7, KeyTag 17883, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 50465, Flags 256

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 9795, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 16454, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 17883, Signer-Name: org

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9795 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 16454 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 17883 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 1 and Digest "Nk36s9ryVMq0d7VnWxB2bdqiSYI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 2 and Digest "OSKzG286TqkrGet7UhIPAx/Y4F/wsDuvz5+JG/5/+OU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
duckdns.org
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


ha101.duckdns.org
0 DS RR in the parent zone found

0 DNSKEY RR found


www.ha101.duckdns.org
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.ha101.duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

ha101.duckdns.org
U  ns1.duckdns.org
54.187.92.222

U  ns2.duckdns.org
54.191.117.119

U  ns3.duckdns.org
52.26.169.94
duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

org
  a0.org.afilias-nst.info / ns000b.app16.mia2.afilias-nst.info


  a2.org.afilias-nst.info / 2.ber.pch


  b0.org.afilias-nst.org / ns000b.app10.ams2.afilias-nst.info


  b2.org.afilias-nst.org / 5.fra.pch


  c0.org.afilias-nst.info / ns000b.app25.ams2.afilias-nst.info


  d0.org.afilias-nst.org / app13.iad1.hosts.meta.redstone.afilias-nst.info-2



SOA - records (beta)

Domain:org
Primary:a0.org.afilias-nst.info
Mail:noc.afilias-nst.info
Serial:2013468522
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:6


Domain:duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:ha101.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:ha101.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:ha101.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.ha101.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.ha101.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.ha101.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://ha101.duckdns.org/
86.132.125.14
200

0.083
H
Server: nginx
Date: Tue, 14 May 2019 00:03:38 GMT
Content-Type: text/html
Content-Length: 1474
Connection: close
Vary: Accept-Encoding
Last-Modified: Mon, 13 May 2019 10:08:44 GMT
ETag: "5cd9422c-5c2"
Accept-Ranges: bytes

• http://www.ha101.duckdns.org/
86.132.125.14
200

0.086
H
Server: nginx
Date: Tue, 14 May 2019 00:03:38 GMT
Content-Type: text/html
Content-Length: 1474
Connection: close
Vary: Accept-Encoding
Last-Modified: Mon, 13 May 2019 10:08:44 GMT
ETag: "5cd9422c-5c2"
Accept-Ranges: bytes

• https://ha101.duckdns.org/
86.132.125.14
-4

0.160
W
SendFailure - The underlying connection was closed: An unexpected error occurred on a send. The handshake failed due to an unexpected packet format.

• https://www.ha101.duckdns.org/
86.132.125.14
-4

0.153
W
SendFailure - The underlying connection was closed: An unexpected error occurred on a send. The handshake failed due to an unexpected packet format.

• http://ha101.duckdns.org:443/
86.132.125.14
200

0.087
Q
Visible Content: </home-assistant>
Content-Type: text/html; charset=utf-8
Content-Length: 3064
Date: Tue, 14 May 2019 00:03:39 GMT
Server: Python/3.7 aiohttp/3.5.4
Connection: close

• http://www.ha101.duckdns.org:443/
86.132.125.14
200

0.084
Q
Visible Content: </home-assistant>
Content-Type: text/html; charset=utf-8
Content-Length: 3064
Date: Tue, 14 May 2019 00:03:39 GMT
Server: Python/3.7 aiohttp/3.5.4
Connection: close

• http://ha101.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
86.132.125.14
404

0.090
A
Not Found
Visible Content: &copy; 2018 Synology Inc.
Server: nginx
Date: Tue, 14 May 2019 00:03:38 GMT
Content-Type: text/html
Content-Length: 11939
Connection: close
Vary: Accept-Encoding
ETag: "5b923df6-2ea3"

• http://www.ha101.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
86.132.125.14
404

0.187
A
Not Found
Visible Content: &copy; 2018 Synology Inc.
Server: nginx
Date: Tue, 14 May 2019 00:03:39 GMT
Content-Type: text/html
Content-Length: 11939
Connection: close
Vary: Accept-Encoding
ETag: "5b923df6-2ea3"

3. Comments

Aname "ha101.duckdns.org" is domain, public suffix is "duckdns.org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)"
Agood: All ip addresses are public addresses
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (6 urls)
http://ha101.duckdns.org/ 86.132.125.14


Url with incomplete Content-Type - header - missing charset
http://www.ha101.duckdns.org/ 86.132.125.14


Url with incomplete Content-Type - header - missing charset
http://ha101.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 86.132.125.14


Url with incomplete Content-Type - header - missing charset
http://www.ha101.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de 86.132.125.14


Url with incomplete Content-Type - header - missing charset
CError - more then one version with Http-Status 200
Hfatal error: No https - result with http-status 200, no encryption
Hfatal error: http result with http-status 200, no encryption
Qhttp://ha101.duckdns.org:443/ 86.132.125.14
200

Misconfiguration: http sent over port 443. Wrong port forwarding port 443 to port 80 or wrong vHost definition.
Qhttp://www.ha101.duckdns.org:443/ 86.132.125.14
200

Misconfiguration: http sent over port 443. Wrong port forwarding port 443 to port 80 or wrong vHost definition.
XFatal error: Nameserver isn't defined or has timeout
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org / 54.187.92.222: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org / 54.191.117.119: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org / 52.26.169.94: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
AGood: Nameserver supports Echo Capitalization: 3 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 3 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 54.187.92.222: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 54.191.117.119: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 52.26.169.94: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
AInfo: Different Server-Headers found
ADuration: 133633 milliseconds, 133.633 seconds


4. Connections

No connection informations found. Perhaps only http - connections.


5. Certificates

No certificate informations found. Perhaps only http - connections.


6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
5
5

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
910252781
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-13 22:27:07
2019-08-11 22:27:07
www.ha101.duckdns.org
1 entries


910096386
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-13 20:44:16
2019-08-11 20:44:16
www.ha101.duckdns.org
1 entries


910000226
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-13 19:35:46
2019-08-11 19:35:46
www.ha101.duckdns.org
1 entries


909949142
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-13 19:00:31
2019-08-11 19:00:31
www.ha101.duckdns.org
1 entries


909916725
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-13 18:35:22
2019-08-11 18:35:22
ha101.duckdns.org
1 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
2
2

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1468334958
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-13 17:00:31
2019-08-11 17:00:31
www.ha101.duckdns.org
1 entries


1468262961
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-13 16:35:22
2019-08-11 16:35:22
ha101.duckdns.org
1 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.ha101.duckdns.org



1
0
ha101.duckdns.org



1
0
duckdns.org
0

no CAA entry found
1
0
org
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
ha101.duckdns.org

ok
1
0
www.ha101.duckdns.org

ok
1
0
_acme-challenge.ha101.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.www.ha101.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.ha101.duckdns.org.ha101.duckdns.org

perhaps wrong
1
0
_acme-challenge.www.ha101.duckdns.org.ha101.duckdns.org

perhaps wrong
1
0
_acme-challenge.www.ha101.duckdns.org.www.ha101.duckdns.org

perhaps wrong
1
0



Permalink: https://check-your-website.server-daten.de/?i=75267e0d-9168-47ec-acaf-4a87935c7a7d


Last Result: https://check-your-website.server-daten.de/?q=ha101.duckdns.org - 2019-05-14 02:01:27