Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:53:05 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.33",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "dual_stack",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "76.13.221.142",
"v6_egress": "2a02:4780:5e:2789::1"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24770 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: kehakiman.gov.my. 300 IN A 203.217.178.246
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10169 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: kehakiman.gov.my. 52308 IN DS 60106 8 1 08CC665D62E8AE61972FDEC08C2B76748B281E37 kehakiman.gov.my. 52308 IN DS 60106 8 2 4B22DF17EBF80F23C804405D3175300F10F717887DE06177477390CE 4825F9E3
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22967 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: kehakiman.gov.my. 300 IN MX 10 smtp.kehakiman.gov.my. kehakiman.gov.my. 300 IN MX 10 smtp2.kehakiman.gov.my.
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35529 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: kehakiman.gov.my. 300 IN NS dns1.gitn.net.my. kehakiman.gov.my. 300 IN NS dns2.gitn.net.my.
TXT
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26704 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: kehakiman.gov.my. 300 IN TXT "MS=ms87989179" kehakiman.gov.my. 300 IN TXT "v=spf1 ip4:150.242.181.229 ip4:163.53.152.215 ip4:103.42.207.220 ip4:110.159.225.227 ~all"
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64458 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: kehakiman.gov.my. 300 IN SOA dns1.gitn.net.my. root.dns1.gitn.net.my. 2026052811 10800 3600 604800 38400
RRSIG
dns1.gitn.net.my. root.dns1.gitn.net.my. 2026052811 10800 3600 604800 38400 SOA 8 3 300 20260906193628 20260807183628 18885 kehakiman.gov.my. tXGyiaxfIPnWKe8P1Ai2bikUNFlc4BP/ZddKqBNf/FGhHiPyj1ccEAYG iIKSTolhZvoIebgxe8bNflkJ7GVueuySMV2rQ9Tu3Q0yhS9bEYoNglAF 3AMwTNSEWAt+Z68vMoZrSPRmnGHLc5ggX8pUwfIr8WhW7cHw7su9an7o uY4=
DNSKEY
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58288 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: kehakiman.gov.my. 283 IN DNSKEY 256 3 8 AwEAAfDjZ8y9ypqzvZOQqTEH4OGwYl9b28NEgAuCkHeIOW6bSUTwUPBb hfRU935j+5yeBGB8igbIqxkmFxoBRyyPyWHq1qmwcpZ2kzHqavi0Qmwl p7prWa2dYejXVK1v+6bJnEoSWuWRCSDHB2yDsw5ekCrOGq+hOJS/ZkvF cPJO1s23 kehakiman.gov.my. 283 IN DNSKEY 257 3 8 AwEAAdufVbQ5nSOLXX+8m0CAWHbZXoYnmbu6OzPPOdoliT+5yRQxmUnz /Vpm1kf8vsWOZzVqCGHpgKY/WPj5nczC9D8158pwUE6xnr+EIAfAdVFV wH5UTiOe1kU8oDkZ0gIeiDwqd1AMahUGaNR7U4be5U/YY1xqw0SzcMYV eqQhIc330O/L3EKVTUo54+MlYjh0fdmtVdjw+cKyGB7zgUCh/MzGvJQ0 fPxWbqMsZql2dsxZcjpgn13TwEq95RgvmhDet4JSm4H+Ey+wkML5+frD tEALxRmUPwuorWe0I1lwoooKpnbSrjEKBtyo9pcMrACHR4+Fyc0rtH/g EJgaOVCdzyU=
DNSSEC_VALIDATION
; fully validated kehakiman.gov.my. 283 IN SOA dns1.gitn.net.my. root.dns1.gitn.net.my. 2026052811 10800 3600 604800 38400 kehakiman.gov.my. 283 IN RRSIG SOA 8 3 300 20260906193628 20260807183628 18885 kehakiman.gov.my. tXGyiaxfIPnWKe8P1Ai2bikUNFlc4BP/ZddKqBNf/FGhHiPyj1ccEAYG iIKSTolhZvoIebgxe8bNflkJ7GVueuySMV2rQ9Tu3Q0yhS9bEYoNglAF 3AMwTNSEWAt+Z68vMoZrSPRmnGHLc5ggX8pUwfIr8WhW7cHw7su9an7o uY4=
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 22.91 ms (p95: 23.2) | 23.07 ms (p95: 23.45) | +0.2 ms |
| IPv4 | 57.21 ms (p95: 236.71) | 147.67 ms (p95: 155.06) | +90.5 ms | |
| IPv6 | 42.63 ms (p95: 43.24) | 223.83 ms (p95: 238.23) | +181.2 ms | |
| Cloudflare | IPv4 | 23.05 ms (p95: 23.76) | 23.01 ms (p95: 25.22) | -0 ms |
| Cloudflare | IPv6 | 47.22 ms (p95: 48.82) | 25 ms (p95: 51.06) | -22.2 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "203.217.178.246",
"timed_out": true,
"ip_version": 4,
"raw_handshake": ""
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 0,
"curl_error": "Failed to connect to kehakiman.gov.my port 80 after 8002 ms: Timeout was reached",
"primary_ip": "",
"total_time_ms": 8002.68,
"connect_time_ms": 0,
"response_headers": [],
"starttransfer_time_ms": 0
},
"v4_https": {
"http_code": 0,
"curl_error": "Failed to connect to kehakiman.gov.my port 443 after 8001 ms: Timeout was reached",
"primary_ip": "",
"total_time_ms": 8001.38,
"connect_time_ms": 0,
"response_headers": [],
"starttransfer_time_ms": 0
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "000 0.000000 0.000000",
"tcp_connect_v4_443": "000 0.000000 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 6d9580ffc9fbcfa7371fd5ad96f38a4b714066606782915beceb951343461d41
http_headers: 50fe9b885dfd275789d89c646d7c3cd578546027baad44fdea0315ef379f9db8
dns_responses: 7eaba043f56998921288c71b7d764b286d934d67b10656146193125cabb2e12b
tls_handshake: b4a8f274fbbe1b9ac5c5de3aebae68da45d6c106a012b2e6665406fece3a3468
connectivity_log: c571529628ae93d3d5180dec20e307692d772428bf4569b1feeb29b40bc18e78
dns_resolution_times: 95cdbd5132362a6ba0bc7d0fea453c1e048503955093dca8d7969cbd6625f6cf