X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
13.04.2019 07:03:10


Older results


1. IP-Addresses

HostTIP-Addressis auth.∑ Queries∑ Timeout
hitpro.duckdns.org
A
14.232.121.87
yes
1
0

AAAA

yes


www.hitpro.duckdns.org


yes
3
3
www.hitpro.duckdns.org
A
14.232.121.87
no



2. DNSSEC

Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 02.05.2019, 00:00:00, Signature-Inception: 11.04.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
org
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 25.04.2019, 17:00:00, Signature-Inception: 12.04.2019, 16:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

4 DNSKEY RR found

Public Key with Algorithm 7, KeyTag 9062, Flags 256

Public Key with Algorithm 7, KeyTag 9795, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 16454, Flags 256

Public Key with Algorithm 7, KeyTag 17883, Flags 257 (SEP = Secure Entry Point)

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 9062, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 9795, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.04.2019, 15:27:52, Signature-Inception: 09.04.2019, 14:27:52, KeyTag 17883, Signer-Name: org

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9062 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9795 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 17883 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 1 and Digest "Nk36s9ryVMq0d7VnWxB2bdqiSYI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 2 and Digest "OSKzG286TqkrGet7UhIPAx/Y4F/wsDuvz5+JG/5/+OU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
duckdns.org
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


hitpro.duckdns.org
0 DS RR in the parent zone found

0 DNSKEY RR found


www.hitpro.duckdns.org
0 DS RR in the parent zone found


3. Name Servers

DomainNameserverNS-IP
www.hitpro.duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

hitpro.duckdns.org
U  ns1.duckdns.org
54.187.92.222

U  ns2.duckdns.org
54.191.117.119

U  ns3.duckdns.org
52.26.169.94
duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

org
  a0.org.afilias-nst.info / ns000b.app6.mia2.afilias-nst.info


  a2.org.afilias-nst.info / 2.ber.pch


  b0.org.afilias-nst.org / ns000b.app7.ams2.afilias-nst.info


  b2.org.afilias-nst.org / 4.fra.pch


  c0.org.afilias-nst.info / ns000a.app31.ams2.afilias-nst.info


  d0.org.afilias-nst.org / ns000b.app23.lax1.afilias-nst.info


4. SOA-Entries


Domain:org
Primary:a0.org.afilias-nst.info
Mail:noc.afilias-nst.info
Serial:2013428835
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:6


Domain:duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:hitpro.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:hitpro.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:hitpro.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.hitpro.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.hitpro.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.hitpro.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


5. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://hitpro.duckdns.org/
14.232.121.87
-14

10.030
T
Timeout - The operation has timed out

• http://www.hitpro.duckdns.org/
14.232.121.87
-14

10.027
T
Timeout - The operation has timed out

• https://hitpro.duckdns.org/
14.232.121.87
-4

0.867
W
SendFailure - The underlying connection was closed: An unexpected error occurred on a send. The handshake failed due to an unexpected packet format.

• https://www.hitpro.duckdns.org/
14.232.121.87
-4

0.866
W
SendFailure - The underlying connection was closed: An unexpected error occurred on a send. The handshake failed due to an unexpected packet format.

• http://hitpro.duckdns.org:443/
14.232.121.87
200

0.437
Q
Visible Content: </home-assistant>
Content-Type: text/html; charset=utf-8
Content-Length: 3001
Date: Sat, 13 Apr 2019 05:06:30 GMT
Server: Python/3.7 aiohttp/3.5.4
Connection: close

• http://www.hitpro.duckdns.org:443/
14.232.121.87
200

0.443
Q
Visible Content: </home-assistant>
Content-Type: text/html; charset=utf-8
Content-Length: 3001
Date: Sat, 13 Apr 2019 05:06:31 GMT
Server: Python/3.7 aiohttp/3.5.4
Connection: close

• http://hitpro.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
14.232.121.87
-14

10.023
T
Timeout - The operation has timed out
Visible Content:

• http://www.hitpro.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
14.232.121.87
-14

10.027
T
Timeout - The operation has timed out
Visible Content:

6. Comments

Aname "hitpro.duckdns.org" is domain, public suffix is "duckdns.org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)"
Agood: All ip addresses are public addresses
AGood: All urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset)
CError - more then one version with Http-Status 200
Hfatal error: No https - result with http-status 200, no encryption
Hfatal error: http result with http-status 200, no encryption
Qhttp://hitpro.duckdns.org:443/ 14.232.121.87
200

Misconfiguration: http sent over port 443. Wrong port forwarding port 443 to port 80 or wrong vHost definition.
Qhttp://www.hitpro.duckdns.org:443/ 14.232.121.87
200

Misconfiguration: http sent over port 443. Wrong port forwarding port 443 to port 80 or wrong vHost definition.
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org / 54.187.92.222: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org / 54.191.117.119: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org / 52.26.169.94: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
AGood: Nameserver supports Echo Capitalization: 3 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 3 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: fatal timeout. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 54.187.92.222: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 54.191.117.119: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 52.26.169.94: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: fatal timeout. NSID: ok. COOKIE: fatal timeout. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 200930 milliseconds, 200.930 seconds


7. Connections

No connection informations found. Perhaps only http - connections.


8. Certificates

No certificate informations found. Perhaps only http - connections.


9. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

No CertSpotter - Certificate-Transparency-Log informations found. The feature is new (startet 2019-05-07), so recheck this domain.


2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
0
7

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1307055559
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-17 06:45:43
2019-06-15 05:45:43
hitpro.duckdns.org
1 entries


1302253833
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-16 09:18:16
2019-06-14 08:18:16
hitpro.duckdns.org
1 entries


1251261640
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-03 14:24:14
2019-06-01 13:24:14
hitpro.duckdns.org
1 entries


1251255832
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-03 14:20:39
2019-06-01 13:20:39
hitpro.duckdns.org
1 entries


1250218380
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-03 03:36:45
2019-06-01 02:36:45
hitpro.duckdns.org
1 entries


1248999042
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-02 16:28:21
2019-05-31 15:28:21
hitpro.duckdns.org
1 entries


1248270987
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-03-02 05:36:13
2019-05-31 04:36:13
hitpro.duckdns.org
1 entries



10. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


11. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.hitpro.duckdns.org



1
0
hitpro.duckdns.org



1
0
duckdns.org
0

no CAA entry found
1
0
org
0

no CAA entry found
1
0


12. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
hitpro.duckdns.org

ok
1
0
www.hitpro.duckdns.org

ok
1
0
_acme-challenge.hitpro.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.www.hitpro.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.hitpro.duckdns.org.hitpro.duckdns.org

perhaps wrong
1
0
_acme-challenge.www.hitpro.duckdns.org.www.hitpro.duckdns.org

perhaps wrong
1
0



Permalink: https://check-your-website.server-daten.de/?i=b0a28529-3a09-499f-bbcd-fe5a5116589d


Last Result: https://check-your-website.server-daten.de/?q=hitpro.duckdns.org - 2019-04-13 07:03:10