Audit Trail

Evidence record for domain check

Integrity Verified
Verification ID
0dd1c757-2800-41b4-a78c-845c91842e19
Domain
hea.uum.edu.my
Mode
scheduled
Started
2026-07-04 03:15:49 +08
Finished
2026-07-04 03:16:01 +08
Status
completed
Test Node Profile
dual stack
Engine Version
2.0.0
MGv6C Version
1.0.0
Test Node Identity
{
    "os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.32",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "unreachable",
            "v6_egress": "unreachable"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}
DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2660
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
hea.uum.edu.my.		292	IN	A	103.5.180.127

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 358
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
uum.edu.my.		293	IN	SOA	dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13046
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
uum.edu.my.		293	IN	SOA	dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5250
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
uum.edu.my.		293	IN	SOA	dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10970
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
uum.edu.my.		293	IN	SOA	dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52810
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
uum.edu.my.		293	IN	SOA	dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400

RRSIG


                    

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11438
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
uum.edu.my.		293	IN	SOA	dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400

DNSSEC_VALIDATION

;; resolution failed: ncache nxrrset
; negative response, fully validated
; hea.uum.edu.my.		292	IN	\-SOA	;-$NXRRSET
; uum.edu.my. SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400
; uum.edu.my. RRSIG SOA ...
; DEK3638LQVKIUFM2G0ERBVGC5Q2T7TMO.uum.edu.my. RRSIG NSEC3 ...
; DEK3638LQVKIUFM2G0ERBVGC5Q2T7TMO.uum.edu.my. NSEC3 1 0 0 DC8EBCBA33EE44B3 DG9UGP4TN0KG4FJ8ELSJ7ACSO9J031NM A RRSIG

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 27.61 ms (p95: 28.54) 35.72 ms (p95: 51.59) +8.1 ms
Google IPv4 51.26 ms (p95: 51.66) 34.63 ms (p95: 63.4) -16.6 ms
Google IPv6 62.64 ms (p95: 75.53) 59.56 ms (p95: 63.56) -3.1 ms
Cloudflare IPv4 30.59 ms (p95: 36.29) 29.05 ms (p95: 33.32) -1.5 ms
Cloudflare IPv6 67.3 ms (p95: 80.17) 61.76 ms (p95: 91.91) -5.5 ms
TLS Handshake Details
{
    "ipv4": {
        "ip_used": "103.5.180.127",
        "ip_version": 4,
        "raw_handshake": "depth=0 C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nverify error:num=18:self-signed certificate\nverify return:1\ndepth=0 C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nverify return:1\nCONNECTED(00000010)\n---\nCertificate chain\n 0 s:C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n   i:C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n   a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256\n   v:NotBefore: Jan 30 06:51:00 2023 GMT; NotAfter: Dec 31 06:51:00 2056 GMT\n-----BEGIN CERTIFICATE-----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\nDNqyb1dfEwDBRzIQ\n-----END CERTIFICATE-----\n---\nServer certificate\nsubject=C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nissuer=C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n---\nNo client certificate CA names sent\nPeer signing digest: SHA256\nPeer signature type: RSA-PSS\nServer Temp Key: X25519, 253 bits\n---\nSSL handshake has read 1681 bytes and written 409 bytes\nVerification error: self-signed certificate\n---\nNew, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384\nServer public key is 2048 bit\nSecure Renegotiation IS supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nSSL-Session:\n    Protocol  : TLSv1.2\n    Cipher    : ECDHE-RSA-AES256-GCM-SHA384\n    Session-ID: 68FBF7AEDAC86E42DC46264020B9EBD559E34B128DCCCF8C94ACBC49A50569BC\n    Session-ID-ctx: \n    Master-Key: E86C4F6F598559DD265A067151ECA0FAE1A5E9872D6EE8E44C33E4CB9DC54CE82E5F78DB8C5C16DE4620DE87B7451905\n    PSK identity: None\n    PSK identity hint: None\n    SRP username: None\n    TLS session ticket lifetime hint: 7200 (seconds)\n    TLS session ticket:\n    0000 - 16 d1 0d 9c 1b b6 22 11-4e ca d0 18 12 f3 8d 23   ......\".N......#\n    0010 - bf 1e 91 ef e6 7c ad 0d-ad dc cd 51 ab f3 95 59   .....|.....Q...Y\n    0020 - 15 84 5a d3 e2 7f f4 f5-bc 17 68 a3 14 53 de 1c   ..Z.......h..S..\n    0030 - c1 9d 5a 96 eb 6a 01 ea-4c 27 09 c8 be 9e fc bf   ..Z..j..L'......\n    0040 - 86 14 c1 d0 d0 e8 e7 65-11 d6 3b 36 57 44 0e a6   .......e..;6WD..\n    0050 - ec d5 9f 89 1e 69 01 17-08 88 2b b8 9e 66 d4 71   .....i....+..f.q\n    0060 - ff a7 06 2f c4 df e8 5f-ef 96 98 b0 e6 44 77 9b   .../..._.....Dw.\n    0070 - 40 9c 82 f3 55 22 b2 67-bc b3 b0 73 62 1f 7b 39   @...U\".g...sb.{9\n    0080 - bd 15 89 70 1a 96 26 22-48 2d 49 e3 75 63 a1 7f   ...p..&\"H-I.uc..\n    0090 - 58 20 a7 a0 bb 7b 33 49-7b 66 08 eb 19 eb d8 d8   X ...{3I{f......\n    00a0 - fa b0 5f 2e 43 1a 85 96-e6 a7 ce 00 fd ae 26 a1   .._.C.........&.\n    00b0 - 57 4d b1 83 fb 54 e1 e4-df 1c 1b ec fc b2 92 04   WM...T..........\n\n    Start Time: 1783106160\n    Timeout   : 7200 (sec)\n    Verify return code: 18 (self-signed certificate)\n    Extended master secret: yes\n---\nDONE"
    }
}
HTTP Response Headers
{
    "v4_http": {
        "http_code": 500,
        "curl_error": null,
        "primary_ip": "103.5.180.127",
        "total_time_ms": 38.58,
        "connect_time_ms": 19.7,
        "response_headers": [
            "HTTP/1.1 500 Internal Server Error",
            "Content-Length: 40130",
            "Content-Type: text/html"
        ],
        "starttransfer_time_ms": 38.54
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\nDNqyb1dfEwDBRzIQ\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com",
                    "rsa(e)": "10001",
                    "rsa(n)": "C4C02D4B3D6FF301708DB4DCC599F84D4CC75A036F1A971F8A42CE1B0A4F29C9CB0E78C82D8F752351137DAE9DA9DD511AE37590FA92F830641CE03D2F29F7FEF04D8B3B7F008AE9A595EE4C5087FD3C359035899BA7EBA95A3603A98751A443370D373EFE49B88C31F2937CFA7DA6D64083257C4083F5BBDBCE454D5B91A1F0D218EB9ABB11B48195F33CA920D5A04A3912E40465580985D0ABCF57C4A653C06545F03DC2FE4605FD83E81F697565C5AC803F1A17CC9EE6B9BD703C497B593C5562F053C9FE919B74FF08B7C0A026850CD6BC7F2EFCF410243FDCDABBF624DAFD5A524CD29F48EB34BBE2EDF22598053E5741A3D2C5BCF2A6BC890FC7FAA359",
                    "Subject": "C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com",
                    "Version": "2",
                    "Signature": "88:92:3c:09:3e:6c:76:08:68:a2:15:a1:6e:a7:8b:f7:92:00:b5:96:f9:89:1c:29:73:7e:3c:a6:c5:fc:72:84:a4:b9:65:8e:3b:94:9c:20:71:30:98:62:50:f9:ec:56:ff:ad:ff:ed:2b:0f:e6:39:c9:00:43:6d:c0:6a:ce:a0:3b:c0:2b:1e:86:58:56:0d:f9:15:83:91:a4:4c:3a:c9:65:e7:c0:28:b8:58:55:e8:66:13:f1:0d:b9:2c:d5:2c:54:1a:ad:16:c0:a0:e9:a0:d4:28:73:7f:a5:74:14:23:20:a9:da:98:5c:a3:88:a8:96:2a:c3:2a:9e:d9:df:be:e2:cd:87:ce:6f:a4:f3:75:0a:46:0c:9f:82:cd:25:6b:b4:00:24:90:e1:3f:9a:79:ad:ea:9a:f9:c5:91:f6:a0:8e:5f:92:1e:e8:f2:6e:ca:a1:58:bc:91:09:31:b8:f1:bb:6d:01:0d:84:39:85:1c:e9:dd:25:8a:d9:3a:d3:3c:b0:a6:24:09:6b:85:12:68:50:25:e2:8f:ca:ae:bc:8c:04:5b:9f:ac:5a:46:20:f3:20:59:da:a0:52:b6:13:42:a3:df:4b:e0:c3:9a:53:41:01:cd:8f:70:c8:53:85:ea:bd:2e:7a:0c:0c:da:b2:6f:57:5f:13:00:c1:47:32:10:",
                    "Start date": "Jan 30 06:51:00 2023 GMT",
                    "Expire date": "Dec 31 06:51:00 2056 GMT",
                    "Serial Number": "1e542cd258d3b4e1",
                    "RSA Public Key": "2048",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "rsaEncryption",
                    "X509v3 Basic Constraints": "CA:TRUE",
                    "X509v3 Subject Key Identifier": "DC:09:87:A8:99:F9:89:B1:FF:DB:2D:91:BD:D6:ED:EC:7D:A3:BB:4C",
                    "X509v3 Authority Key Identifier": "DC:09:87:A8:99:F9:89:B1:FF:DB:2D:91:BD:D6:ED:EC:7D:A3:BB:4C"
                }
            ]
        },
        "http_code": 500,
        "curl_error": null,
        "primary_ip": "103.5.180.127",
        "total_time_ms": 91.85,
        "connect_time_ms": 18.11,
        "response_headers": [
            "HTTP/1.1 500 Internal Server Error",
            "Content-Length: 40130",
            "Content-Type: text/html"
        ],
        "starttransfer_time_ms": 91.83
    }
}
Connectivity Test Output
{
    "tcp_connect_v4_80": "200 0.020549 0.433248",
    "tcp_connect_v4_443": "000 0.021630 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 52d375de914e17f6c1e1704cc029582d02a5597bbbd271c75b19f2f5ee66607a
http_headers: 50b0e67d0a7d438be47f2f8b8f4eb764bc0c943248356bf030c20fa7769e6bbf
dns_responses: dc557ba0ec5de9591ff59dd02955ed845343c6f79c9da8cad763d6118d0a3f9d
tls_handshake: ab27e8fd5b65111e31603215a599561213442c7dc890295d70b41645034f970e
connectivity_log: 1008f9eefdb530a05c3ec56c36ae0268b0c0868b3a9276a4ee34ba144caefa78
dns_resolution_times: 7f9d2e069d5b0c5ead614a40580b430f9857250b8f8729ea24c2f71022467bed