Shortcuts: 1. Basic DNS | 2. Url-Checks | 3. Comments | 4. Connections | 5. Certificates | 6. CT-Logs | 7. Html-Content | 8. CAA | 9. TXT |


X

DNS-problem - authoritative Nameserver refused, not defined or timeout

Checked:
15.05.2019 12:52:47


Older results

1. Basic DNS and Nameserver Checks

HostTIP-Addressis auth.∑ Queries∑ Timeout
smartie77.duckdns.org
A
77.165.91.54
yes
1
0

AAAA

yes


www.smartie77.duckdns.org
A
77.165.91.54
yes
1
0

AAAA

yes



Zone (*)DNSSEC - Informations (beta)
(root)
1 DS RR published

Status: Valid because published

2 DNSKEY RR found

Public Key with Algorithm 8, KeyTag 20326, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 8, KeyTag 25266, Flags 256

1 RRSIG RR to validate DNSKEY RR found

Algorithm: 8, 0 Labels, original TTL: 172800 sec, Signature-expiration: 01.06.2019, 00:00:00, Signature-Inception: 11.05.2019, 00:00:00, KeyTag 20326, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 20326 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 8, KeyTag 20326, DigestType 2 and Digest "4G1EuAuPHTmpXAsNfGXQhFjogECbvGg0VxBCN8f47I0=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
org
2 DS RR in the parent zone found

1 RRSIG RR to validate DS RR found

Algorithm: 8, 1 Labels, original TTL: 86400 sec, Signature-expiration: 28.05.2019, 05:00:00, Signature-Inception: 15.05.2019, 04:00:00, KeyTag 25266, Signer-Name: (root)

Status: Good - Algorithmus 8 and DNSKEY with KeyTag 25266 used to validate the DS RRSet in the parent zone

4 DNSKEY RR found

Public Key with Algorithm 7, KeyTag 9795, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 16454, Flags 256

Public Key with Algorithm 7, KeyTag 17883, Flags 257 (SEP = Secure Entry Point)

Public Key with Algorithm 7, KeyTag 50465, Flags 256

3 RRSIG RR to validate DNSKEY RR found

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 9795, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 16454, Signer-Name: org

Algorithm: 7, 1 Labels, original TTL: 900 sec, Signature-expiration: 30.05.2019, 15:23:32, Signature-Inception: 09.05.2019, 14:23:32, KeyTag 17883, Signer-Name: org

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 9795 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 16454 used to validate the DNSKEY RRSet

Status: Good - Algorithmus 7 and DNSKEY with KeyTag 17883 used to validate the DNSKEY RRSet

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 1 and Digest "Nk36s9ryVMq0d7VnWxB2bdqiSYI=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone

Status: Valid Chain of trust. Parent-DS with Algorithm 7, KeyTag 9795, DigestType 2 and Digest "OSKzG286TqkrGet7UhIPAx/Y4F/wsDuvz5+JG/5/+OU=" validates local Key with the same values, Key ist Secure Entry Point (SEP) of the zone
duckdns.org
0 DS RR in the parent zone found

DS-Query in the parent zone has a valid NSEC3 RR as result with the hashed domain name between the hashed NSEC3-owner and the hashed NextOwner. So the parent zone confirmes the non-existence of a DS RR.

0 DNSKEY RR found


smartie77.duckdns.org
0 DS RR in the parent zone found

0 DNSKEY RR found


www.smartie77.duckdns.org
0 DS RR in the parent zone found


DomainNameserverNS-IP
www.smartie77.duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

smartie77.duckdns.org
U  ns1.duckdns.org
54.187.92.222

U  ns2.duckdns.org
54.191.117.119

U  ns3.duckdns.org
52.26.169.94
duckdns.org
U  ns1.duckdns.org


U  ns2.duckdns.org


U  ns3.duckdns.org

org
  a0.org.afilias-nst.info / ns000b.app6.mia2.afilias-nst.info


  a2.org.afilias-nst.info / 1.fra.pch


  b0.org.afilias-nst.org / ns000b.app6.ams2.afilias-nst.info


  b2.org.afilias-nst.org / 4.fra.pch


  c0.org.afilias-nst.info / ns000b.app20.ams2.afilias-nst.info


  d0.org.afilias-nst.org / app21.iad1.hosts.meta.redstone.afilias-nst.info-2



SOA - records (beta)

Domain:org
Primary:a0.org.afilias-nst.info
Mail:noc.afilias-nst.info
Serial:2013470365
Refresh:1800
Retry:900
Expire:604800
TTL:86400
num Entries:6


Domain:duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:smartie77.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:smartie77.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:smartie77.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.smartie77.duckdns.org
Primary:ns1.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.smartie77.duckdns.org
Primary:ns2.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


Domain:www.smartie77.duckdns.org
Primary:ns3.duckdns.org
Mail:hostmaster.duckdns.org
Serial:2018280802
Refresh:6000
Retry:120
Expire:2419200
TTL:600
num Entries:1


2. Url-Checks


show header:
Domainname Http-StatusredirectSec.G
• http://smartie77.duckdns.org/
77.165.91.54
200

0.070
H
Date: Wed, 15 May 2019 10:54:59 GMT
Server: Apache/2.4.25 (Raspbian)
Last-Modified: Wed, 15 May 2019 02:49:06 GMT
ETag: "29cd-588e431660ba5"
Accept-Ranges: bytes
Content-Length: 10701
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

• http://www.smartie77.duckdns.org/
77.165.91.54
200

0.080
H
Date: Wed, 15 May 2019 10:54:59 GMT
Server: Apache/2.4.25 (Raspbian)
Last-Modified: Wed, 15 May 2019 02:49:06 GMT
ETag: "29cd-588e431660ba5"
Accept-Ranges: bytes
Content-Length: 10701
Vary: Accept-Encoding
Connection: close
Content-Type: text/html

• https://smartie77.duckdns.org/
77.165.91.54
-2

1.063
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 77.165.91.54:443

• https://www.smartie77.duckdns.org/
77.165.91.54
-2

1.080
V
ConnectFailure - Unable to connect to the remote server No connection could be made because the target machine actively refused it 77.165.91.54:443

• http://smartie77.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
77.165.91.54
404

0.054
A
Not Found
Visible Content: Not Found The requested URL /.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de was not found on this server. Apache/2.4.25 (Raspbian) Server at smartie77.duckdns.org Port 80
Date: Wed, 15 May 2019 10:55:01 GMT
Server: Apache/2.4.25 (Raspbian)
Content-Length: 356
Connection: close
Content-Type: text/html; charset=iso-8859-1

• http://www.smartie77.duckdns.org/.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de
77.165.91.54
404

0.047
A
Not Found
Visible Content: Not Found The requested URL /.well-known/acme-challenge/check-your-website-dot-server-daten-dot-de was not found on this server. Apache/2.4.25 (Raspbian) Server at www.smartie77.duckdns.org Port 80
Date: Wed, 15 May 2019 10:55:01 GMT
Server: Apache/2.4.25 (Raspbian)
Content-Length: 360
Connection: close
Content-Type: text/html; charset=iso-8859-1

3. Comments

Aname "smartie77.duckdns.org" is domain, public suffix is "duckdns.org", top-level-domain-type is "generic", tld-manager is "Public Interest Registry (PIR)"
Agood: All ip addresses are public addresses
AGood: Some urls with http status 200/404 have a complete Content-Type header (MediaType / MediaSubType + correct charset):2 complete Content-Type - header (4 urls)
http://smartie77.duckdns.org/ 77.165.91.54


Url with incomplete Content-Type - header - missing charset
http://www.smartie77.duckdns.org/ 77.165.91.54


Url with incomplete Content-Type - header - missing charset
CError - more then one version with Http-Status 200
Hfatal error: No https - result with http-status 200, no encryption
Hfatal error: http result with http-status 200, no encryption
Vhttps://smartie77.duckdns.org/ 77.165.91.54
-2

connect failure - perhaps firewall
Vhttps://www.smartie77.duckdns.org/ 77.165.91.54
-2

connect failure - perhaps firewall
XFatal error: Nameserver isn't defined or has timeout
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns1.duckdns.org / 54.187.92.222: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.187.92.222:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns2.duckdns.org / 54.191.117.119: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 54.191.117.119:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
XFatal error: Nameserver doesn't support TCP connection: ns3.duckdns.org / 52.26.169.94: Fatal error - no NameServer IP-Address or connection. Details: One or more errors occurred. - No connection could be made because the target machine actively refused it 52.26.169.94:53
AGood: Nameserver supports Echo Capitalization: 3 good Nameserver
AGood: Nameserver supports EDNS with max. 512 Byte Udp payload, message is smaller: 3 good Nameserver
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns1.duckdns.org / 54.187.92.222: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns2.duckdns.org / 54.191.117.119: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
Nameserver doesn't pass all EDNS-Checks: ns3.duckdns.org / 52.26.169.94: OP100: ok. FLAGS: ok. V1: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. V1OP100: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found, no OPT100 expected, no OPT100 found. V1FLAGS: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. DNSSEC: ok. V1DNSSEC: SOA NOT expected, but found, BADVER expected, NOERR found, Version 0 expectend and found. NSID: ok. COOKIE: ok. CLIENTSUBNET: ok.
AGood: All SOA have the same Serial Number
Warning: No CAA entry with issue/issuewild found, every CAA can create a certificate
ADuration: 139517 milliseconds, 139.517 seconds


4. Connections

No connection informations found. Perhaps only http - connections.


5. Certificates

No certificate informations found. Perhaps only http - connections.


6. Last Certificates - Certificate Transparency Log Check (BETA)

1. Source CertSpotter - active certificates

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
3
3

CertSpotter-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
899931755
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-08 02:42:42
2019-08-06 02:42:42
smartie77.duckdns.org
1 entries


898978600
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-07 13:28:35
2019-08-05 13:28:35
smartie77.duckdns.org
1 entries


898967313
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-07 13:18:59
2019-08-05 13:18:59
smartie77.duckdns.org
1 entries



2. Source crt.sh - old and new certificates, sometimes very slow.

Issuerlast 7 daysactivenum Certs
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
0
3
3

CRT-IdIssuernot beforenot afterDomain namesLE-Duplicatenext LE
1470923800
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-08 00:42:42
2019-08-06 00:42:42
smartie77.duckdns.org
1 entries


1467225655
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-07 11:28:35
2019-08-05 11:28:35
smartie77.duckdns.org
1 entries


1467169416
CN=Let's Encrypt Authority X3, O=Let's Encrypt, C=US
2019-05-07 11:18:59
2019-08-05 11:18:59
smartie77.duckdns.org
1 entries



7. Html-Content - Entries (BETA - mixed content and other checks)

No Html-Content entries found. Only checked if https + status 200/401/403/404


8. CAA - Entries

DomainnameflagNameValue∑ Queries∑ Timeout
www.smartie77.duckdns.org



1
0
smartie77.duckdns.org



1
0
duckdns.org
0

no CAA entry found
1
0
org
0

no CAA entry found
1
0


9. TXT - Entries

DomainnameTXT EntryStatus∑ Queries∑ Timeout
smartie77.duckdns.org

ok
1
0
www.smartie77.duckdns.org

ok
1
0
_acme-challenge.smartie77.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.www.smartie77.duckdns.org

missing entry or wrong length
1
0
_acme-challenge.smartie77.duckdns.org.smartie77.duckdns.org

perhaps wrong
1
0
_acme-challenge.www.smartie77.duckdns.org.smartie77.duckdns.org

perhaps wrong
1
0
_acme-challenge.www.smartie77.duckdns.org.www.smartie77.duckdns.org

perhaps wrong
1
0



Permalink: https://check-your-website.server-daten.de/?i=859b01c5-f337-4936-91a4-4984d3a88059


Last Result: https://check-your-website.server-daten.de/?q=smartie77.duckdns.org - 2019-05-15 12:52:47