Audit Trail

Evidence record for domain check

Integrity Verified
Verification ID
21c756de-4f14-4e85-ab13-bca4813e7daf
Domain
cybersecurity.my
Mode
manual
Started
2026-08-08 18:24:51 +08
Finished
2026-08-08 18:25:37 +08
Status
completed
Test Node Profile
dual stack
Engine Version
2.0.0
MGv6C Version
1.0.0
Test Node Identity
{
    "os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul  1 21:53:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.33",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}
DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42842
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
cybersecurity.my.	1800	IN	A	211.24.25.21

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26574
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
cybersecurity.my.	59364	IN	DS	42948 13 2 F7358E9A9E3C83EA9A7F203786716608FB1CF82EE1A418819C4A953D 16068662
cybersecurity.my.	59364	IN	DS	42948 13 1 FDE30E165C6A95E194CFD10AF4A0968D36921177

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29081
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
cybersecurity.my.	1800	IN	MX	0 cybersecurity-my.mail.protection.outlook.com.
cybersecurity.my.	1800	IN	MX	5 cybersecurity-my.mail.protection.outlook.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7928
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 5

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
cybersecurity.my.	3600	IN	NS	ns3.cybersecurity.my.
cybersecurity.my.	3600	IN	NS	ns1.cybersecurity.my.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18346
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
cybersecurity.my.	3600	IN	TXT	"MS=ms70372336"
cybersecurity.my.	3600	IN	TXT	"v=spf1 ip4:211.24.25.7 ip4:113.23.255.139 ip4:113.23.247.139 ip4:103.100.206.20 ip4:113.23.205.186 ip4:113.23.255.251 ip4:175.139.192.49 ip4:35.187.254.96 ip4:192.82.59.9 ip4:45.64.170.94 include:spf.protection.outlook.com -all"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43282
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
cybersecurity.my.	1800	IN	AAAA	2001:f40:29:1681:211:24:25:21

RRSIG

ns1.cybersecurity.my. postmaster.cybersecurity.my. 2026080576 10800 1800 604800 3600
SOA 13 2 1800 20260905110021 20260806110021 59818 cybersecurity.my. nZ+aCGrLuspsgzJbVNEBb+CVrv/xT8Go98gqKQX8LuDCy6bWejEn/JIK RiLIvAlPDK6+ELuRe7LQBeF7qSFJxg==

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56789
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
cybersecurity.my.	3590	IN	DNSKEY	256 3 13 X9ebzdo9/2xaU3iy8++YsXXBSXypHkrj8AhOVaaONApBuwhOJ0k5f31t h2wKAFwuRoyUKINa4uYFdq8oM65h8g==
cybersecurity.my.	3590	IN	DNSKEY	257 3 13 mZksx367IZ9QNogqLKUugCqiLvA5ApKFy+Yykd3bCYFW4yqLhu4xEQu3 EqMXgONhnEj4LArJw11/xtlAFVfa4A==
cybersecurity.my.	3590	IN	DNSKEY	256 3 13 CdqXX27p3hxelsGz5hW+hroxHjQ1wqI2LdOu6gR1HhcRf84qup4ylH0W oRXA/mCS+b7G+ncVTlmwBMJj21aiTA==

DNSSEC_VALIDATION

; fully validated
cybersecurity.my.	1790	IN	SOA	ns1.cybersecurity.my. postmaster.cybersecurity.my. 2026080576 10800 1800 604800 3600
cybersecurity.my.	1790	IN	RRSIG	SOA 13 2 1800 20260905110021 20260806110021 59818 cybersecurity.my. nZ+aCGrLuspsgzJbVNEBb+CVrv/xT8Go98gqKQX8LuDCy6bWejEn/JIK RiLIvAlPDK6+ELuRe7LQBeF7qSFJxg==

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 22.96 ms (p95: 23.86) 26.7 ms (p95: 33.96) +3.7 ms
Google IPv4 47.7 ms (p95: 148.7) 86.26 ms (p95: 167.5) +38.6 ms
Google IPv6 165.25 ms (p95: 241.94) 160.07 ms (p95: 163.86) -5.2 ms
Cloudflare IPv4 22.06 ms (p95: 22.72) 22.46 ms (p95: 23.57) +0.4 ms
Cloudflare IPv6 25.12 ms (p95: 51.54) 25.09 ms (p95: 52.67) -0 ms
TLS Handshake Details
{
    "ipv4": {
        "ip_used": "211.24.25.21",
        "timed_out": false,
        "ip_version": 4,
        "raw_handshake": "write:errno=104\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 0 bytes and written 318 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
    },
    "ipv6": {
        "ip_used": "2001:f40:29:1681:211:24:25:21",
        "timed_out": false,
        "ip_version": 6,
        "raw_handshake": "write:errno=104\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 0 bytes and written 318 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
    }
}
HTTP Response Headers
{
    "v4_http": {
        "http_code": 0,
        "curl_error": "Failed to connect to cybersecurity.my port 80 after 8002 ms: Timeout was reached",
        "primary_ip": "",
        "total_time_ms": 8002.7,
        "connect_time_ms": 0,
        "response_headers": [],
        "starttransfer_time_ms": 0
    },
    "v6_http": {
        "http_code": 0,
        "curl_error": "Failed to connect to cybersecurity.my port 80 after 8002 ms: Timeout was reached",
        "primary_ip": "",
        "total_time_ms": 8002.96,
        "connect_time_ms": 0,
        "response_headers": [],
        "starttransfer_time_ms": 0
    },
    "v4_https": {
        "http_code": 0,
        "curl_error": "Recv failure: Connection reset by peer",
        "primary_ip": "211.24.25.21",
        "total_time_ms": 7.29,
        "connect_time_ms": 3.39,
        "response_headers": [],
        "starttransfer_time_ms": 0
    },
    "v6_https": {
        "http_code": 0,
        "curl_error": "Recv failure: Connection reset by peer",
        "primary_ip": "2001:f40:29:1681:211:24:25:21",
        "total_time_ms": 8.9,
        "connect_time_ms": 4.17,
        "response_headers": [],
        "starttransfer_time_ms": 0
    }
}
Connectivity Test Output
{
    "tcp_connect_v4_80": "000 0.000000 0.000000",
    "tcp_connect_v6_80": "000 0.000000 0.000000",
    "tcp_connect_v4_443": "000 0.003632 0.000000",
    "tcp_connect_v6_443": "000 0.004128 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 91d5e08a9c8def360303b0770ae01a10e9ad38eb7461e6dce152ae8ced91b21b
http_headers: d2866b94962f232c682942b1ea6dff64766cafe59dda03d312a3120a0c2c281f
dns_responses: ecf8a557f2231d81497f47dcf94391fcc3a549977cab163575d569568d1526da
tls_handshake: 3e75e9f30b3109743c30f1abb74cd3b79e0cd316a0f5001ac9cf7e0c0129076d
connectivity_log: da267f371b720637be512ed1ee4220182f86b9a07eaf50c2db19fe2cbb70903b
dns_resolution_times: 771ae9ef022c5250523ed229e5036669a3a2a89bb5efdd013fa5921a6f8f771b