Audit Trail

Evidence record for domain check

Integrity Verified

Verification ID

6ca09a2c-be0c-4dd4-8899-4e9d33138476

Domain

kln.gov.my

Mode

scheduled

Started

2026-07-04 03:06:55 +08

Finished

2026-07-04 03:07:26 +08

Status

completed

Test Node Profile

dual stack

Engine Version

2.0.0

MGv6C Version

1.0.0

Test Node Identity

{
    "os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.32",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

Node Network Evidence

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26568
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
kln.gov.my.		3600	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042618 10800 3600 172800 38400

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26026
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		86375	IN	DS	33046 8 2 1692A73EAA4C22EA9048F5FDB85872E6407A7148034D311289C8B491 52ED4AF4
kln.gov.my.		86375	IN	DS	33046 8 1 2A8BC4BA8ECDB2CD42030A71B9C00664FAEF3E41

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54879
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		300	IN	MX	10 alt3.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	10 alt4.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	5 alt2.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	5 alt1.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	1 aspmx.l.google.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26480
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		3600	IN	NS	dns1.gitn.net.my.
kln.gov.my.		3600	IN	NS	dns2.gitn.net.my.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37585
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		3600	IN	TXT	"google-site-verification=PGDEH3aqogsJUvwUW6mtsNFR_X3PCItrPjF4nKgunRE"
kln.gov.my.		3600	IN	TXT	"v=spf1 ip4:103.245.89.99 ip4:103.245.89.108 ip4:103.8.147.12/30 ip4:219.92.54.177/32 ip4:103.156.82.32/29 ip4:103.156.83.32/29 include:_spf.google.com ~all"
kln.gov.my.		3600	IN	TXT	"MS=ms26620342"
kln.gov.my.		3600	IN	TXT	"MS=E0F8E18400A7C13FE9E8FB3E68D209B229903979"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 120
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
kln.gov.my.		3600	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042618 10800 3600 172800 38400

RRSIG

dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042618 10800 3600 172800 38400
SOA 8 3 3600 20260802162218 20260703152218 35589 kln.gov.my. mbGaz6RK7Fz2kdE9P2g31S7X9YqiV1rBKf4Dova/q6Oy4OrPUI7QmcwL Kgi7NPj7oR1Axqic6WQFyZL/JO36P9FGh6pHF60KXQbgb8Jje0XAewG5 gvxfrtFY2yZDbFN4pjYH9bAYjUAp4pRCGvgeIo0hQIXLnHFWap9qc6vc ano=

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 52214
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		3576	IN	DNSKEY	257 3 8 AwEAAdHDEQkUL2nwyJfCeqiNnjXuMENO8Wyu13NOkSoBTkUthgOYwF/E wUzT6ILy9lLP5Z0Gn5vVqFtPIhAHc7OE7RMjEO+4BW0u8FKsLt30Mgyc OPfPRI4MrfjyGPJ7xm5RhIZulPWCqn01uAAxWjQq9aINi02zWxk+13l9 gH3wsoEJOsV+nWuH6yMX670sQ0Q6V3ifOSaDMdnAsrR/7SP1yUeYpBiB 9/d2AMzQg/KiZc+bQl2x43BYjSylUgJ39blmO3nlalf0hoPs6+qxrB5b 7xL0Rj69y7gAKeiDyaGyms0Z8uiD0T3yGsxpAynM/cCNoLf4fe8dIX9t JxCGiHnnc38=
kln.gov.my.		3576	IN	DNSKEY	256 3 8 AwEAAZ2+A6SU22JCVL2Q3MhVyvp/ofA/cZyaSUrnreqcqCBT7zPWRfgu N4UR77PCuYRNdb1/OhzrYOl7wFg3udq07mD9kwY/eVbHZpZPcULDmZgb 7I/peSKm/sz7qIXWLc+c0qd5PYfa0ziNyW4Weajofp5HoByHLTZMI5qR 28MTep7p

DNSSEC_VALIDATION

; fully validated
kln.gov.my.		3576	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042618 10800 3600 172800 38400
kln.gov.my.		3576	IN	RRSIG	SOA 8 3 3600 20260802162218 20260703152218 35589 kln.gov.my. mbGaz6RK7Fz2kdE9P2g31S7X9YqiV1rBKf4Dova/q6Oy4OrPUI7QmcwL Kgi7NPj7oR1Axqic6WQFyZL/JO36P9FGh6pHF60KXQbgb8Jje0XAewG5 gvxfrtFY2yZDbFN4pjYH9bAYjUAp4pRCGvgeIo0hQIXLnHFWap9qc6vc ano=

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver	Transport	A (IPv4)	AAAA (IPv6)	Delta
System	Default	21.28 ms (p95: 30.04)	31.61 ms (p95: 37.72)	+10.3 ms
Google	IPv4	26.49 ms (p95: 39.75)	44.03 ms (p95: 53.06)	+17.5 ms
Google	IPv6	42.57 ms (p95: 48.51)	51.46 ms (p95: 52.24)	+8.9 ms
Cloudflare	IPv4	18.85 ms (p95: 19.37)	23.01 ms (p95: 30.11)	+4.2 ms
Cloudflare	IPv6	22.86 ms (p95: 30.33)	34.18 ms (p95: 63.94)	+11.3 ms

TLS Handshake Details

{
    "ipv4": {
        "ip_used": "163.53.153.22",
        "ip_version": 4,
        "raw_handshake": "4047D98E94730000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:316:\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 0 bytes and written 319 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
    }
}

HTTP Response Headers

{
    "v4_http": {
        "http_code": 0,
        "curl_error": "Empty reply from server",
        "primary_ip": "163.53.153.22",
        "total_time_ms": 11.04,
        "connect_time_ms": 6.37,
        "response_headers": [],
        "starttransfer_time_ms": 11.03
    },
    "v4_https": {
        "http_code": 0,
        "curl_error": "OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to kln.gov.my:443 ",
        "primary_ip": "163.53.153.22",
        "total_time_ms": 12.63,
        "connect_time_ms": 7.16,
        "response_headers": [],
        "starttransfer_time_ms": 0
    }
}

Connectivity Test Output

{
    "tcp_connect_v4_80": "000 0.007147 0.013476",
    "tcp_connect_v4_443": "000 0.006075 0.000000"
}

Integrity Details

Algorithm: hmac-sha256-v1

Root Hash: a194e391f3b73b70a0b1aef98bd2f08bb726961d07003bfc4b03194b393450a4

http_headers: ae87b2e62d4f1c25d9d23d1d4c2a86bdf671dfb1095bbef4743293ce997e5dfd

dns_responses: 38967f9465b23e2b7613c6117cb612b0dc29a17e7d02abc2732fb5a6ba7a125a

tls_handshake: 6a0da089e88fdde4272aff0eef4fc493bfa93f50e71f09c0f89ebc3bab985541

connectivity_log: 833860c27af68ec48704d14c1ebbee88d6785bcfa6efdaf4a3678f841e1eb318

dns_resolution_times: c31dc74ddc0eafdef04f6e3242ca85f94bcb50b79ae6e87ee23029fb27a4484f