Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.32",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "dual_stack",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "unreachable",
"v6_egress": "unreachable"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2660 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: hea.uum.edu.my. 292 IN A 103.5.180.127
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 358 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 293 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13046 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 293 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5250 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 293 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400
TXT
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10970 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 293 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52810 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 293 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400
RRSIG
DNSKEY
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 11438 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 293 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400
DNSSEC_VALIDATION
;; resolution failed: ncache nxrrset ; negative response, fully validated ; hea.uum.edu.my. 292 IN \-SOA ;-$NXRRSET ; uum.edu.my. SOA dns1.uum.edu.my. admin.dnsvault.net. 2026061978 10800 3600 604800 86400 ; uum.edu.my. RRSIG SOA ... ; DEK3638LQVKIUFM2G0ERBVGC5Q2T7TMO.uum.edu.my. RRSIG NSEC3 ... ; DEK3638LQVKIUFM2G0ERBVGC5Q2T7TMO.uum.edu.my. NSEC3 1 0 0 DC8EBCBA33EE44B3 DG9UGP4TN0KG4FJ8ELSJ7ACSO9J031NM A RRSIG
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 27.61 ms (p95: 28.54) | 35.72 ms (p95: 51.59) | +8.1 ms |
| IPv4 | 51.26 ms (p95: 51.66) | 34.63 ms (p95: 63.4) | -16.6 ms | |
| IPv6 | 62.64 ms (p95: 75.53) | 59.56 ms (p95: 63.56) | -3.1 ms | |
| Cloudflare | IPv4 | 30.59 ms (p95: 36.29) | 29.05 ms (p95: 33.32) | -1.5 ms |
| Cloudflare | IPv6 | 67.3 ms (p95: 80.17) | 61.76 ms (p95: 91.91) | -5.5 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "103.5.180.127",
"ip_version": 4,
"raw_handshake": "depth=0 C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nverify error:num=18:self-signed certificate\nverify return:1\ndepth=0 C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nverify return:1\nCONNECTED(00000010)\n---\nCertificate chain\n 0 s:C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n i:C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256\n v:NotBefore: Jan 30 06:51:00 2023 GMT; NotAfter: Dec 31 06:51:00 2056 GMT\n-----BEGIN CERTIFICATE-----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\nDNqyb1dfEwDBRzIQ\n-----END CERTIFICATE-----\n---\nServer certificate\nsubject=C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nissuer=C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n---\nNo client certificate CA names sent\nPeer signing digest: SHA256\nPeer signature type: RSA-PSS\nServer Temp Key: X25519, 253 bits\n---\nSSL handshake has read 1681 bytes and written 409 bytes\nVerification error: self-signed certificate\n---\nNew, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384\nServer public key is 2048 bit\nSecure Renegotiation IS supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nSSL-Session:\n Protocol : TLSv1.2\n Cipher : ECDHE-RSA-AES256-GCM-SHA384\n Session-ID: 68FBF7AEDAC86E42DC46264020B9EBD559E34B128DCCCF8C94ACBC49A50569BC\n Session-ID-ctx: \n Master-Key: E86C4F6F598559DD265A067151ECA0FAE1A5E9872D6EE8E44C33E4CB9DC54CE82E5F78DB8C5C16DE4620DE87B7451905\n PSK identity: None\n PSK identity hint: None\n SRP username: None\n TLS session ticket lifetime hint: 7200 (seconds)\n TLS session ticket:\n 0000 - 16 d1 0d 9c 1b b6 22 11-4e ca d0 18 12 f3 8d 23 ......\".N......#\n 0010 - bf 1e 91 ef e6 7c ad 0d-ad dc cd 51 ab f3 95 59 .....|.....Q...Y\n 0020 - 15 84 5a d3 e2 7f f4 f5-bc 17 68 a3 14 53 de 1c ..Z.......h..S..\n 0030 - c1 9d 5a 96 eb 6a 01 ea-4c 27 09 c8 be 9e fc bf ..Z..j..L'......\n 0040 - 86 14 c1 d0 d0 e8 e7 65-11 d6 3b 36 57 44 0e a6 .......e..;6WD..\n 0050 - ec d5 9f 89 1e 69 01 17-08 88 2b b8 9e 66 d4 71 .....i....+..f.q\n 0060 - ff a7 06 2f c4 df e8 5f-ef 96 98 b0 e6 44 77 9b .../..._.....Dw.\n 0070 - 40 9c 82 f3 55 22 b2 67-bc b3 b0 73 62 1f 7b 39 @...U\".g...sb.{9\n 0080 - bd 15 89 70 1a 96 26 22-48 2d 49 e3 75 63 a1 7f ...p..&\"H-I.uc..\n 0090 - 58 20 a7 a0 bb 7b 33 49-7b 66 08 eb 19 eb d8 d8 X ...{3I{f......\n 00a0 - fa b0 5f 2e 43 1a 85 96-e6 a7 ce 00 fd ae 26 a1 .._.C.........&.\n 00b0 - 57 4d b1 83 fb 54 e1 e4-df 1c 1b ec fc b2 92 04 WM...T..........\n\n Start Time: 1783106160\n Timeout : 7200 (sec)\n Verify return code: 18 (self-signed certificate)\n Extended master secret: yes\n---\nDONE"
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 500,
"curl_error": null,
"primary_ip": "103.5.180.127",
"total_time_ms": 38.58,
"connect_time_ms": 19.7,
"response_headers": [
"HTTP/1.1 500 Internal Server Error",
"Content-Length: 40130",
"Content-Type: text/html"
],
"starttransfer_time_ms": 38.54
},
"v4_https": {
"tls": {
"protocol": 0,
"certificates": [
{
"Cert": "-----BEGIN CERTIFICATE-----\nMIID+DCCAuCgAwIBAgIIHlQs0ljTtOEwDQYJKoZIhvcNAQELBQAwgZExCzAJBgNV\nBAYTAkNBMQswCQYDVQQIEwJCQzESMBAGA1UEBxMJVmFuY291dmVyMRYwFAYDVQQK\nEw1Gb3J0aW5ldCBJbmMuMREwDwYDVQQLEwhGb3J0aW5ldDERMA8GA1UEAxMIRm9y\ndGlXRUIxIzAhBgkqhkiG9w0BCQEWFHN1cHBvcnRAZm9ydGluZXQuY29tMCAXDTIz\nMDEzMDA2NTEwMFoYDzIwNTYxMjMxMDY1MTAwWjCBkTELMAkGA1UEBhMCQ0ExCzAJ\nBgNVBAgTAkJDMRIwEAYDVQQHEwlWYW5jb3V2ZXIxFjAUBgNVBAoTDUZvcnRpbmV0\nIEluYy4xETAPBgNVBAsTCEZvcnRpbmV0MREwDwYDVQQDEwhGb3J0aVdFQjEjMCEG\nCSqGSIb3DQEJARYUc3VwcG9ydEBmb3J0aW5ldC5jb20wggEiMA0GCSqGSIb3DQEB\nAQUAA4IBDwAwggEKAoIBAQDEwC1LPW/zAXCNtNzFmfhNTMdaA28alx+KQs4bCk8p\nycsOeMgtj3UjURN9rp2p3VEa43WQ+pL4MGQc4D0vKff+8E2LO38Aiumlle5MUIf9\nPDWQNYmbp+upWjYDqYdRpEM3DTc+/km4jDHyk3z6fabWQIMlfECD9bvbzkVNW5Gh\n8NIY65q7EbSBlfM8qSDVoEo5EuQEZVgJhdCrz1fEplPAZUXwPcL+RgX9g+gfaXVl\nxayAPxoXzJ7mub1wPEl7WTxVYvBTyf6Rm3T/CLfAoCaFDNa8fy789BAkP9zau/Yk\n2v1aUkzSn0jrNLvi7fIlmAU+V0Gj0sW88qa8iQ/H+qNZAgMBAAGjUDBOMAwGA1Ud\nEwQFMAMBAf8wHQYDVR0OBBYEFNwJh6iZ+Ymx/9stkb3W7ex9o7tMMB8GA1UdIwQY\nMBaAFNwJh6iZ+Ymx/9stkb3W7ex9o7tMMA0GCSqGSIb3DQEBCwUAA4IBAQCIkjwJ\nPmx2CGiiFaFup4v3kgC1lvmJHClzfjymxfxyhKS5ZY47lJwgcTCYYlD57Fb/rf/t\nKw/mOckAQ23Aas6gO8ArHoZYVg35FYORpEw6yWXnwCi4WFXoZhPxDbks1SxUGq0W\nwKDpoNQoc3+ldBQjIKnamFyjiKiWKsMqntnfvuLNh85vpPN1CkYMn4LNJWu0ACSQ\n4T+aea3qmvnFkfagjl+SHujybsqhWLyRCTG48bttAQ2EOYUc6d0litk60zywpiQJ\na4USaFAl4o/KrryMBFufrFpGIPMgWdqgUrYTQqPfS+DDmlNBAc2PcMhTheq9LnoM\nDNqyb1dfEwDBRzIQ\n-----END CERTIFICATE-----\n",
"Issuer": "C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com",
"rsa(e)": "10001",
"rsa(n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
"Subject": "C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com",
"Version": "2",
"Signature": "88:92:3c:09:3e:6c:76:08:68:a2:15:a1:6e:a7:8b:f7:92:00:b5:96:f9:89:1c:29:73:7e:3c:a6:c5:fc:72:84:a4:b9:65:8e:3b:94:9c:20:71:30:98:62:50:f9:ec:56:ff:ad:ff:ed:2b:0f:e6:39:c9:00:43:6d:c0:6a:ce:a0:3b:c0:2b:1e:86:58:56:0d:f9:15:83:91:a4:4c:3a:c9:65:e7:c0:28:b8:58:55:e8:66:13:f1:0d:b9:2c:d5:2c:54:1a:ad:16:c0:a0:e9:a0:d4:28:73:7f:a5:74:14:23:20:a9:da:98:5c:a3:88:a8:96:2a:c3:2a:9e:d9:df:be:e2:cd:87:ce:6f:a4:f3:75:0a:46:0c:9f:82:cd:25:6b:b4:00:24:90:e1:3f:9a:79:ad:ea:9a:f9:c5:91:f6:a0:8e:5f:92:1e:e8:f2:6e:ca:a1:58:bc:91:09:31:b8:f1:bb:6d:01:0d:84:39:85:1c:e9:dd:25:8a:d9:3a:d3:3c:b0:a6:24:09:6b:85:12:68:50:25:e2:8f:ca:ae:bc:8c:04:5b:9f:ac:5a:46:20:f3:20:59:da:a0:52:b6:13:42:a3:df:4b:e0:c3:9a:53:41:01:cd:8f:70:c8:53:85:ea:bd:2e:7a:0c:0c:da:b2:6f:57:5f:13:00:c1:47:32:10:",
"Start date": "Jan 30 06:51:00 2023 GMT",
"Expire date": "Dec 31 06:51:00 2056 GMT",
"Serial Number": "1e542cd258d3b4e1",
"RSA Public Key": "2048",
"Signature Algorithm": "sha256WithRSAEncryption",
"Public Key Algorithm": "rsaEncryption",
"X509v3 Basic Constraints": "CA:TRUE",
"X509v3 Subject Key Identifier": "DC:09:87:A8:99:F9:89:B1:FF:DB:2D:91:BD:D6:ED:EC:7D:A3:BB:4C",
"X509v3 Authority Key Identifier": "DC:09:87:A8:99:F9:89:B1:FF:DB:2D:91:BD:D6:ED:EC:7D:A3:BB:4C"
}
]
},
"http_code": 500,
"curl_error": null,
"primary_ip": "103.5.180.127",
"total_time_ms": 91.85,
"connect_time_ms": 18.11,
"response_headers": [
"HTTP/1.1 500 Internal Server Error",
"Content-Length: 40130",
"Content-Type: text/html"
],
"starttransfer_time_ms": 91.83
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "200 0.020549 0.433248",
"tcp_connect_v4_443": "000 0.021630 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 52d375de914e17f6c1e1704cc029582d02a5597bbbd271c75b19f2f5ee66607a
http_headers: 50b0e67d0a7d438be47f2f8b8f4eb764bc0c943248356bf030c20fa7769e6bbf
dns_responses: dc557ba0ec5de9591ff59dd02955ed845343c6f79c9da8cad763d6118d0a3f9d
tls_handshake: ab27e8fd5b65111e31603215a599561213442c7dc890295d70b41645034f970e
connectivity_log: 1008f9eefdb530a05c3ec56c36ae0268b0c0868b3a9276a4ee34ba144caefa78
dns_resolution_times: 7f9d2e069d5b0c5ead614a40580b430f9857250b8f8729ea24c2f71022467bed