Audit Trail

{
    "os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul  1 21:53:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.33",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

{
    "v4_http": {
        "http_code": 520,
        "curl_error": null,
        "primary_ip": "162.159.140.229",
        "total_time_ms": 375.18,
        "connect_time_ms": 0.94,
        "response_headers": [
            "HTTP/1.1 520 <none>",
            "Date: Sat, 08 Aug 2026 10:19:51 GMT",
            "Content-Type: text/plain; charset=UTF-8",
            "Content-Length: 16",
            "Connection: keep-alive",
            "Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0",
            "Expires: Thu, 01 Jan 1970 00:00:01 GMT",
            "Referrer-Policy: same-origin",
            "X-Frame-Options: SAMEORIGIN",
            "Server: cloudflare",
            "CF-RAY: a27dc8fadfb7e708-KUL"
        ],
        "starttransfer_time_ms": 375.14
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n+0M0/SnVi+GqERq8GAeM0tYEUEftBrDNh91gGfuSSSkx\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Let's Encrypt, CN = E8",
                    "Subject": "CN = twitter.com",
                    "Version": "2",
                    "Signature": "30:64:02:30:68:4f:48:48:e2:05:89:19:83:02:25:5d:82:0f:f6:05:9b:41:0b:81:0f:96:24:36:64:de:70:3a:c3:c1:db:52:50:7d:02:3b:47:5a:ad:bd:01:72:0f:2a:62:1c:0e:32:02:30:42:90:bc:87:1e:6a:c5:9b:57:ec:23:f0:78:0e:d8:fb:43:34:fd:29:d5:8b:e1:aa:11:1a:bc:18:07:8c:d2:d6:04:50:47:ed:06:b0:cd:87:dd:60:19:fb:92:49:29:31:",
                    "Start date": "May 24 05:44:39 2026 GMT",
                    "Expire date": "Aug 22 05:44:38 2026 GMT",
                    "Serial Number": "05406190e7737ba15e5b4615ef5becdfb46e",
                    "X509v3 Key Usage": "Digital Signature",
                    "Signature Algorithm": "ecdsa-with-SHA384",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n                01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n    Timestamp : May 24 06:43:09.462 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:0C:E0:8E:46:EC:7E:B6:16:F4:0A:AC:60:\n                8B:1E:F3:DB:A3:6D:0C:0D:DB:D2:06:30:BC:07:D2:09:\n                83:CB:3C:85:02:20:2C:8A:DF:E0:16:FE:52:36:12:4E:\n                45:20:DE:BB:18:63:4D:CF:57:C4:B1:A6:5C:2F:2F:A6:\n                9C:73:AA:7B:27:3F\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:\n                1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A\n    Timestamp : May 24 06:43:10.201 2026 GMT\n    Extensions: 00:00:05:00:0D:0C:6D:8D\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:E0:38:E6:74:6F:73:DC:0D:1B:A4:BA:\n                0B:56:3C:35:9C:7F:F9:26:D8:8B:00:8A:48:29:FD:A0:\n                0C:E8:45:8C:F8:02:21:00:E3:69:70:98:B4:54:4B:C6:\n                4B:82:2D:C7:51:F3:03:99:B3:A8:F0:38:4C:8C:7F:C9:\n                04:D8:48:AB:4E:89:D3:C2",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://e8.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "1E:67:74:07:F9:51:92:2E:14:B1:1A:57:AC:A9:F5:4C:C6:3C:A0:FF",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://e8.c.lencr.org/111.crl",
                    "X509v3 Authority Key Identifier": "8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA",
                    "X509v3 Subject Alternative Name": "DNS:*.twitter.com, DNS:cdn.syndication.twitter.com, DNS:twitter.com"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\nu1igv3OefnWjSQ==\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Internet Security Research Group, CN = ISRG Root X1",
                    "Subject": "C = US, O = Let's Encrypt, CN = E8",
                    "Version": "2",
                    "Signature": "67:13:48:46:20:d2:ac:09:85:a2:d1:7c:75:ca:0c:43:e6:a8:a1:12:36:74:44:8d:ed:4d:9c:f5:c2:e0:13:1f:76:70:60:f2:29:f7:b9:16:11:ac:9a:9c:3d:63:d1:c0:e1:21:8c:f2:e0:29:03:a3:68:c1:f0:3e:6d:d1:ae:b3:65:6c:e5:af:df:1d:01:01:4d:87:cb:8a:26:42:07:74:b4:a1:cb:e9:d4:c9:e6:71:73:96:cd:78:ca:75:2e:ed:20:4b:31:38:31:ca:9f:98:d3:2f:22:97:a2:c1:64:98:3b:dc:3c:d8:e6:fc:a2:db:d7:70:ed:89:51:88:b7:b2:f1:c8:59:19:b7:fb:bd:3b:0d:46:cb:e7:55:cc:71:8d:a2:65:d9:42:ab:85:9a:f6:76:ee:93:75:93:53:88:2b:e8:b6:3c:33:35:40:68:34:06:db:ee:14:dd:e2:7a:a9:41:75:d1:b0:67:47:5b:ae:57:20:d8:b3:d4:61:af:0b:9c:45:59:df:b8:38:f6:f4:23:0b:4e:ca:65:33:97:f9:c1:25:79:85:4a:66:53:0a:7f:bd:5e:cc:e3:0e:1a:1a:e9:ed:ef:89:28:5f:bd:67:e0:47:5a:80:2b:0b:fd:89:39:fa:60:10:53:4f:ad:b9:ed:09:39:f0:15:fd:1e:ad:d6:4f:97:93:db:36:1c:c4:05:7a:8c:69:a5:fc:c0:54:2d:38:15:d1:bd:33:e0:02:d8:95:b1:98:54:ad:e8:10:ae:87:70:84:7b:2d:df:13:9d:90:ae:3f:58:33:be:6b:b6:f2:23:b2:6f:f5:1e:5f:ae:ff:f5:aa:c6:7b:b5:65:0e:23:a5:af:95:a6:e6:62:18:e9:56:ae:a4:8f:f5:ea:20:74:e8:42:1a:2b:27:c9:ec:16:27:04:50:3a:a2:b5:eb:08:86:c9:97:91:c6:cf:c1:7a:4c:3a:e6:fc:12:21:a5:64:06:bb:8f:89:37:cc:3a:8d:19:87:88:15:6b:cf:ea:26:03:1b:25:bc:ab:c3:01:bd:ef:3f:cf:46:09:8b:28:20:e5:f3:3d:dd:b4:0d:19:ee:aa:bb:7e:d6:b4:1a:5d:b8:bb:2b:81:d3:97:6a:23:92:75:2e:f0:33:2a:e5:9d:22:34:f5:b4:ff:2a:0a:8c:52:13:fc:69:8b:1f:21:5f:67:6d:de:1f:bf:8e:e8:d4:80:53:c5:67:41:15:67:4c:52:c8:13:51:17:73:1b:a0:66:67:61:71:54:c6:93:63:4d:63:ca:a5:a8:03:1c:94:26:aa:b0:1c:0e:65:89:9c:cb:05:63:78:d2:bb:58:a0:bf:73:9e:7e:75:a3:49:",
                    "Start date": "Mar 13 00:00:00 2024 GMT",
                    "Expire date": "Mar 12 23:59:59 2027 GMT",
                    "Serial Number": "63959363c24e7082715918bfc3d7ed56",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Client Authentication, TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://x1.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "8F:0D:13:A2:F6:2E:7E:D1:50:6C:33:18:38:5D:59:8E:23:72:91:CA",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://x1.c.lencr.org/",
                    "X509v3 Authority Key Identifier": "79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E"
                }
            ]
        },
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "162.159.140.229",
        "total_time_ms": 240.85,
        "connect_time_ms": 0.89,
        "response_headers": [
            "HTTP/2 200",
            "date: Sat, 08 Aug 2026 10:19:51 GMT",
            "content-type: text/html; charset=UTF-8",
            "perf: 7402827104",
            "server: cloudflare envoy",
            "cache-control: no-cache, no-store, max-age=0",
            "referrer-policy: strict-origin-when-cross-origin",
            "x-frame-options: SAMEORIGIN",
            "x-transaction-id: 9abd98ce6a755924",
            "x-xss-protection: 0",
            "x-download-options: noopen",
            "origin-agent-cluster: ?1",
            "x-content-type-options: nosniff",
            "x-dns-prefetch-control: off",
            "content-security-policy: default-src 'self';script-src 'self' 'nonce-HS/DIrpa4X8b152uqfdhfA==' 'unsafe-inline' 'wasm-unsafe-eval' 'report-sample' https://*.twimg.com https://abs.twimg.com https://accounts.google.com/gsi/client https://appleid.cdn-apple.com https://*.stripe.com https://cdn.plaid.com/link/v2/stable/link-initialize.js https://sdk.dv.socure.io/latest/device-risk-sdk.js https://cdn.getpinwheel.com/pinwheel-v3.2.1.js https://*.x.com;script-src-attr 'none' 'report-sample';style-src 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;style-src-elem 'self' 'unsafe-inline' https://*.twimg.com https://accounts.google.com/gsi/style;img-src 'self' https://x.com:443 https://twitter.com https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv https://abs.twimg.com data: blob: https://play-lh.googleusercontent.com https://img.youtube.com https://i.ytimg.com https://*.plaid.com https://assets.grok.com https://*.grokusercontent.com https://*.gstatic.com https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;manifest-src 'self' https://x.com:443;font-src 'self' https://*.twimg.com data:;media-src 'self' https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv blob: data: https://*.watch.x.com;connect-src 'self' https://api.x.com https://api.twitter.com https://t.co https://*.twimg.com https://*.pscp.tv https://*.video.pscp.tv wss://*.pscp.tv https://upload.x.com https://sentry.io https://*.sentry.io wss://localhost.x.com:* https://m.castle.io wss://chat-ws.x.com https://*.x.com https://accounts.google.com/gsi/ https://csi.gstatic.com https://appleid.cdn-apple.com https://appleid.apple.com https://*.prelude.dev data: https://*.stripe.com https://*.plaid.com https://*.dv.socure.io https://checkoutshopper-live.adyen.com https://grok.com https://*.grok.com wss://grok.com wss://*.grok.com https://*.x.ai wss://*.x.ai https://media.riffsy.com https://*.giphy.com https://media.tenor.com https://c.tenor.com;frame-src 'self' https://accounts.google.com https://appleid.apple.com https://www.youtube.com https://w.soundcloud.com https://www.pscp.tv https://studio.x.com https://studio-dev.x.com https://iframe.arkoselabs.com https://*.x.com https://*.crbcos.com https://*.plaid.com https://*.stripe.com https://cdn.getpinwheel.com/ https://checkoutshopper-live.adyen.com https://artifacts.grokusercontent.com;worker-src 'self' blob: https://*.twimg.com https://abs.twimg.com;frame-ancestors 'self' https://x.com https://x.com:443 https://twitter.com https://twitter.com:443;base-uri 'self';form-action 'self' https://accounts.google.com;object-src 'none';upgrade-insecure-requests",
            "cross-origin-opener-policy: same-origin-allow-popups",
            "cross-origin-resource-policy: same-origin",
            "x-permitted-cross-domain-policies: none",
            "x-response-time: 57",
            "origin-cf-ray: a27dc8fd3f444a9b-SEA",
            "strict-transport-security: max-age=631138519; includeSubdomains",
            "x-served-by: t4_p",
            "vary: Accept-Encoding",
            "set-cookie: guest_id_marketing=v1%3A178618439132983587; Max-Age=63072000; Expires=Mon, 07 Aug 2028 10:19:51 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None",
            "set-cookie: guest_id_ads=v1%3A178618439132983587; Max-Age=63072000; Expires=Mon, 07 Aug 2028 10:19:51 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None",
            "set-cookie: gt=2086034647822237810; Max-Age=9000; Expires=Sat, 08 Aug 2026 12:49:51 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax",
            "set-cookie: personalization_id=\"v1_EilJeWQ2nIm3CJRrDTMzKw==\"; Max-Age=63072000; Expires=Mon, 07 Aug 2028 10:19:51 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None",
            "set-cookie: guest_id=v1%3A178618439132983587; Max-Age=63072000; Expires=Mon, 07 Aug 2028 10:19:51 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=None",
            "set-cookie: ct0=; Max-Age=-1786184390; Expires=Thu, 01 Jan 1970 00:00:01 GMT; Path=/; Domain=.twitter.com; Secure; SameSite=Lax",
            "set-cookie: __cf_bm=2dVoJUxt2Iq.A73kG7OtpP4AyVI_mD7B9KNmMVk_Zcs-1786184391.2351122-1.0.1.1-XruC9WcSLCG9leyPIc5dKAFJ6Ldh9kyccEnhLSinECCv4k_2oyNlQ6_eX32D9TFrm5xxfwFdDogij61NxVIqK7vH598uM5P2IUs.K6ijzhSsCs2.62vODlLKsN1IEZvs; HttpOnly; Secure; Path=/; Domain=twitter.com; Expires=Sat, 08 Aug 2026 10:49:51 GMT",
            "cf-cache-status: DYNAMIC",
            "cf-ray: a27dc8fd3f444a9b-KUL"
        ],
        "starttransfer_time_ms": 240.79
    }
}

{
    "tcp_connect_v4_80": "520 0.001232 0.361709",
    "tcp_connect_v4_443": "301 0.000930 0.204250"
}