Audit Trail

{
    "os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.32",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

{
    "v4_http": {
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "110.159.228.144",
        "total_time_ms": 199.41,
        "connect_time_ms": 35.82,
        "response_headers": {
            "0": "HTTP/1.1 301 Moved Permanently",
            "1": "Server: nginx/1.20.1",
            "2": "Date: Fri, 03 Jul 2026 19:36:52 GMT",
            "3": "Content-Type: text/html",
            "4": "Content-Length: 169",
            "5": "Connection: keep-alive",
            "6": "Location: https://jps.gov.my/",
            "8": "HTTP/2 302",
            "9": "server: nginx/1.20.1",
            "10": "content-type: text/html; charset=utf-8",
            "11": "location: https://siswa.water.gov.my/login",
            "12": "x-powered-by: PHP/8.3.27",
            "13": "cache-control: no-cache, private",
            "14": "date: Fri, 03 Jul 2026 19:36:52 GMT",
            "15": "set-cookie: siswa_30_session=eyJpdiI6Ilhhczk2SXRJMlo3MlJld3pNK2NENUE9PSIsInZhbHVlIjoiR1hQc0lHdzd3azNsSjlVTmtLTlhDRWRtNmFKV3FTRGgwSkZKY2NVK3N0R3FFZ1ljSkhyS256WjBNUytkemMvRHpUb2F6MERoOG5iZ3lBeVZ1RWJIc3dGUDZ6ajN2SHlPaWdNVzBSTFFVbktYRXVpa0FRbjV2L3JiMVRQMXl5MVoiLCJtYWMiOiJhOWI0ZmIxZjM0MjgzMDAwODExYzQ4NDZjODNjZGVkMGM5YTk4NmQ1NjA2NTY3NjgyODk4YTM5NGVjYWIyYmY4IiwidGFnIjoiIn0%3D; expires=Tue, 28 Jul 2026 19:36:52 GMT; Max-Age=2160000; path=/; secure; httponly; samesite=lax",
            "17": "HTTP/2 200",
            "18": "server: nginx/1.20.1",
            "19": "content-type: text/html; charset=UTF-8",
            "20": "x-powered-by: PHP/8.3.27",
            "21": "cache-control: max-age=0, must-revalidate, no-cache, no-store, private",
            "22": "date: Fri, 03 Jul 2026 19:36:53 GMT",
            "23": "pragma: no-cache",
            "24": "expires: Fri, 01 Jan 1990 00:00:00 GMT",
            "25": "set-cookie: XSRF-TOKEN=eyJpdiI6Im9kR2RYQUpVN3F5QjRiZ3A0azJleWc9PSIsInZhbHVlIjoiOUNtUFRzWENUQkMxSktacjlCVU9YQTdvb21KR1dsZnJtWDhiSnVmaitBZnE5eWJRdDF0Sk5yR2wxTU9FK3lYZjR3OWVRVG1GdFFuYm5FY1FLQnoxYnNCb2grL0JSZGExZUJRditVbDFCYitaZi9GYTRwbjg1V3B0RE52Q1k2b2YiLCJtYWMiOiI1YjVlNzY0MTBiMDNjMGY4MGRjNTk5OWQ0YTAzNjdjYThmYTdkYTEyY2FlYjZiZDMxZGRlZDhjZWUxZTg3NTdkIiwidGFnIjoiIn0%3D; expires=Tue, 28 Jul 2026 19:36:53 GMT; Max-Age=2160000; path=/; secure; samesite=lax",
            "26": "set-cookie: siswa_30_session=eyJpdiI6ImVtZDYrY0F5QzRTODR4alMvMWV0aGc9PSIsInZhbHVlIjoiaHVTU2dDL0VrOFF3UGx1Y0IxcXVoTXhRNEpYTlBPOHhNVGRMOUtLd1p1NGw4eFdTL3JZdlA4VDVXaEJFK3NCczIzZ2pjTG1CamYrQS9ManR5SThWUVlRdXYxUHE0cVFoSlZobENEdkdCSHp0elZqS0U2VnE4RllKNjRUbzJqamgiLCJtYWMiOiI2MjZjOGMwNmJkOWYyYmIzM2Q5Y2QzZTBmOTk0NzU5YzUxYTFmNDUxYjNjYzQwNDY3Y2ZiN2MyNDUwZGZkNzMzIiwidGFnIjoiIn0%3D; expires=Tue, 28 Jul 2026 19:36:53 GMT; Max-Age=2160000; path=/; secure; httponly; samesite=lax"
        },
        "starttransfer_time_ms": 199.26
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS ECC CA G1",
                    "Subject": "C = MY, ST = Selangor, L = Cyberjaya, O = JABATAN PENGAIRAN DAN SALIRAN, CN = *.water.gov.my",
                    "Version": "2",
                    "Signature": "30:46:02:21:00:aa:cf:4f:df:a2:b9:7a:c4:08:62:7c:32:0c:9e:18:5a:8e:5f:05:18:f6:91:f5:29:7d:d1:63:69:b3:69:6d:ac:02:21:00:a8:a8:0d:0c:6e:50:84:fe:de:f4:30:17:b6:67:89:6a:61:06:2f:a4:f6:3b:29:0a:21:67:b8:ce:2b:57:93:4c:",
                    "Start date": "Jun 12 00:00:00 2026 GMT",
                    "Expire date": "Dec 27 23:59:59 2026 GMT",
                    "Serial Number": "051da214454cc4a7d4fc54aec64e839d",
                    "X509v3 Key Usage": "Digital Signature, Key Agreement",
                    "Signature Algorithm": "ecdsa-with-SHA256",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C2:31:7E:57:45:19:A3:45:EE:7F:38:DE:B2:90:41:EB:\n                C7:C2:21:5A:22:BF:7F:D5:B5:AD:76:9A:D9:0E:52:CD\n    Timestamp : Jun 12 15:22:37.773 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:AF:04:80:06:D2:45:79:C3:1E:0A:17:\n                69:1E:C3:35:DF:5B:E4:07:6D:68:C7:23:08:F2:D0:5D:\n                B5:AB:3F:72:AD:02:20:03:78:82:AB:81:30:52:EB:60:\n                9F:B7:92:2D:39:A2:46:3D:72:69:11:C6:30:4D:DB:B3:\n                CA:A6:A0:37:44:A7:B5\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : D7:6D:7D:10:D1:A7:F5:77:C2:C7:E9:5F:D7:00:BF:F9:\n                82:C9:33:5A:65:E1:D0:B3:01:73:17:C0:C8:C5:69:77\n    Timestamp : Jun 12 15:22:37.731 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:5B:22:15:BC:CE:0F:6F:0B:74:45:A2:10:\n                E7:FF:31:6C:36:6D:CC:CF:A6:F1:5A:20:B0:B2:67:3F:\n                58:AF:9E:C6:02:20:1A:18:74:22:72:74:D8:3D:53:08:\n                56:D4:EC:46:C8:15:16:09:24:1C:8B:03:70:D8:55:C7:\n                7B:D8:C0:0E:D6:93\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 94:4E:43:87:FA:EC:C1:EF:81:F3:19:24:26:A8:18:65:\n                01:C7:D3:5F:38:02:01:3F:72:67:7D:55:37:2E:19:D8\n    Timestamp : Jun 12 15:22:37.793 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:38:6E:E6:B8:DA:AF:46:FF:53:74:8E:74:\n                A8:B4:DE:E3:8C:87:2A:93:08:56:76:DC:41:2A:B1:5C:\n                07:DC:EE:30:02:21:00:E5:82:2F:B2:B1:54:17:6A:E7:\n                DB:7D:47:47:26:16:DF:01:F7:0D:08:73:A4:FF:E5:32:\n                76:9C:BF:9B:85:C0:34",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.2\n  CPS: http://www.digicert.com/CPS",
                    "Authority Information Access": "OCSP - URI:http://status.geotrust.com\nCA Issuers - URI:http://cacerts.geotrust.com/GeoTrustTLSECCCAG1.crt",
                    "X509v3 Subject Key Identifier": "7E:03:E7:93:32:E7:EA:B3:F7:7E:A6:6F:75:7A:6E:16:49:CC:8A:BD",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://cdp.geotrust.com/GeoTrustTLSECCCAG1.crl",
                    "X509v3 Authority Key Identifier": "BD:82:CF:47:7B:1E:8C:22:85:FE:8C:A8:1F:C3:E1:B2:DF:FD:A6:99",
                    "X509v3 Subject Alternative Name": "DNS:*.water.gov.my"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----\nMIIDIjCCAqegAwIBAgIQA0o/+Ue+OcGZzrgGlh5RbTAKBggqhkjOPQQDAjBhMQsw\nCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3d3cu\nZGlnaWNlcnQuY29tMSAwHgYDVQQDExdEaWdpQ2VydCBHbG9iYWwgUm9vdCBHMzAe\nFw0xNzExMDIxMjU5MzhaFw0yNzExMDIxMjU5MzhaMGAxCzAJBgNVBAYTAlVTMRUw\nEwYDVQQKEwxEaWdpQ2VydCBJbmMxGTAXBgNVBAsTEHd3dy5kaWdpY2VydC5jb20x\nHzAdBgNVBAMTFkdlb1RydXN0IFRMUyBFQ0MgQ0EgRzEwWTATBgcqhkjOPQIBBggq\nhkjOPQMBBwNCAARq1Zj5CUHtNOXYXvkbpA0hbP0z4QRoAVYDNhmA4ZS4c1ZsNCkW\n9dRLoGN903ll4C1knoqPlurtQFbE1zZKQgJVo4IBQDCCATwwHQYDVR0OBBYEFL2C\nz0d7Howihf6MqB/D4bLf/aaZMB8GA1UdIwQYMBaAFLPbSKT5ocXYrjZBzBFjaWIp\nvEvGMA4GA1UdDwEB/wQEAwIBhjAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH\nAwIwEgYDVR0TAQH/BAgwBgEB/wIBADA0BggrBgEFBQcBAQQoMCYwJAYIKwYBBQUH\nMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBCBgNVHR8EOzA5MDegNaAzhjFo\ndHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRHbG9iYWxSb290RzMuY3Js\nMD0GA1UdIAQ2MDQwMgYEVR0gADAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5k\naWdpY2VydC5jb20vQ1BTMAoGCCqGSM49BAMCA2kAMGYCMQDi0sZJgYka7acLC8nc\nY9M1bbgvlkAyznRVT+O15a/l7xFVq230VXPrGeiwGZkfdJ0CMQDMWuDYxQNFeogR\nQNzAmTaQxOW+mxCdxdmL5dLHLJOQaI8N4TjTct2W3oyvTAaYn20=\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = DigiCert Inc, OU = www.digicert.com, CN = DigiCert Global Root G3",
                    "Subject": "C = US, O = DigiCert Inc, OU = www.digicert.com, CN = GeoTrust TLS ECC CA G1",
                    "Version": "2",
                    "Signature": "30:66:02:31:00:e2:d2:c6:49:81:89:1a:ed:a7:0b:0b:c9:dc:63:d3:35:6d:b8:2f:96:40:32:ce:74:55:4f:e3:b5:e5:af:e5:ef:11:55:ab:6d:f4:55:73:eb:19:e8:b0:19:99:1f:74:9d:02:31:00:cc:5a:e0:d8:c5:03:45:7a:88:11:40:dc:c0:99:36:90:c4:e5:be:9b:10:9d:c5:d9:8b:e5:d2:c7:2c:93:90:68:8f:0d:e1:38:d3:72:dd:96:de:8c:af:4c:06:98:9f:6d:",
                    "Start date": "Nov  2 12:59:38 2017 GMT",
                    "Expire date": "Nov  2 12:59:38 2027 GMT",
                    "Serial Number": "034a3ff947be39c199ceb806961e516d",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "ecdsa-with-SHA256",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: X509v3 Any Policy\n  CPS: https://www.digicert.com/CPS",
                    "Authority Information Access": "OCSP - URI:http://ocsp.digicert.com",
                    "X509v3 Subject Key Identifier": "BD:82:CF:47:7B:1E:8C:22:85:FE:8C:A8:1F:C3:E1:B2:DF:FD:A6:99",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://crl3.digicert.com/DigiCertGlobalRootG3.crl",
                    "X509v3 Authority Key Identifier": "B3:DB:48:A4:F9:A1:C5:D8:AE:36:41:CC:11:63:69:62:29:BC:4B:C6"
                }
            ]
        },
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "110.159.228.144",
        "total_time_ms": 146.88,
        "connect_time_ms": 22.73,
        "response_headers": {
            "0": "HTTP/2 302",
            "1": "server: nginx/1.20.1",
            "2": "content-type: text/html; charset=utf-8",
            "3": "location: https://siswa.water.gov.my/login",
            "4": "x-powered-by: PHP/8.3.27",
            "5": "cache-control: no-cache, private",
            "6": "date: Fri, 03 Jul 2026 19:36:53 GMT",
            "7": "set-cookie: siswa_30_session=eyJpdiI6ImZjbHY3U2prR3VhTVNLckdSM0Q4cnc9PSIsInZhbHVlIjoibzJQOWMwaUZONjFDVm1zd1pkTjB2UjlxaExlSjZQcCtFMU1PWWdZMHZHbjdPY1NYd21xZGt3cEFJcmtMTnhUNmsxVXlHZFFscFAyVUppYVNpQmhyRzlocVJrdTJuUCtSMVVIZ3RYdDZqUlp6WHlYRVdRcGw3L056NlRqR1JOMVoiLCJtYWMiOiI5Y2Q0NmQ2MWM3ZjIyZDI2MGVmZjEzNjJjNzJlZDViOTVmMmM4MWFhMzI1ZDk1ZjRiMDFmNGVkOTU2NzU0Yzg1IiwidGFnIjoiIn0%3D; expires=Tue, 28 Jul 2026 19:36:53 GMT; Max-Age=2160000; path=/; secure; httponly; samesite=lax",
            "9": "HTTP/2 200",
            "10": "server: nginx/1.20.1",
            "11": "content-type: text/html; charset=UTF-8",
            "12": "x-powered-by: PHP/8.3.27",
            "13": "cache-control: max-age=0, must-revalidate, no-cache, no-store, private",
            "14": "date: Fri, 03 Jul 2026 19:36:53 GMT",
            "15": "pragma: no-cache",
            "16": "expires: Fri, 01 Jan 1990 00:00:00 GMT",
            "17": "set-cookie: XSRF-TOKEN=eyJpdiI6IkxPUERXOUlrNXkwWi9PV21EblRTS2c9PSIsInZhbHVlIjoicVFHcmlIM0dqQzNWUENIQ21xU3B2M00yeW9OWXppVE1KTWlvUVdXL3lOTHZiY2d4WGFjS0p3NTBldGMrazU0b3BOWk9UWmR1TTdramZlQUlXbS94Q0hZUGYxUEdrWXU0MXdjZmRrZGppZmZVS2xvd1hzeHJNOERIcGZrd2VOaW8iLCJtYWMiOiIwNzZjYzgzY2ZhMjJmNWJjOGM5YzA5MjRjOTJmMTMzMmE3ZjU0YmUxODI5MjQzZTcwZDg0ZDEyMDFiYWFmMjhkIiwidGFnIjoiIn0%3D; expires=Tue, 28 Jul 2026 19:36:53 GMT; Max-Age=2160000; path=/; secure; samesite=lax",
            "18": "set-cookie: siswa_30_session=eyJpdiI6IlFmTmhEZExQNEZSbDVDb3h5bThvWEE9PSIsInZhbHVlIjoiNXVxQkdONjRGV1NxcW9qRjhVYnJzUEhKZXRJb1hpZFNLa3BtYXJSVllpem1WTC83UGRaeFo2emVZOGRtY2ZLc3lWV29RVDlBYlV1dlh5TTM3bHh1U05RMWZHWVp6TFRsSm5meHI0QTlrWUdKWVpRRXA2RnFDZ2NVb1RWUXR4ZnoiLCJtYWMiOiJjYmViZDcyYTgzMTI5ZmRiZjgzNzZkZThlYWEzY2IzNzg4NDU0Y2E3Yjk0MzJhOTY1NmRmMTU3Nzk0NDlhMWY2IiwidGFnIjoiIn0%3D; expires=Tue, 28 Jul 2026 19:36:53 GMT; Max-Age=2160000; path=/; secure; httponly; samesite=lax"
        },
        "starttransfer_time_ms": 146.79
    }
}

{
    "tcp_connect_v4_80": "301 0.009742 0.021375",
    "tcp_connect_v4_443": "000 0.010616 0.000000"
}