Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:53:05 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.33",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "dual_stack",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "unreachable",
"v6_egress": "unreachable"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 8910 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: ccb.com. 157 IN A 111.205.126.206
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20151 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: com. 773 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 1786183184 1800 900 604800 900
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56692 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: ccb.com. 158 IN MX 5 mail-in2.ccb.com. ccb.com. 158 IN MX 5 mail-in4.ccb.com. ccb.com. 158 IN MX 5 mail-in3.ccb.com. ccb.com. 158 IN MX 5 mail-in1.ccb.com.
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23910 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 19 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: ccb.com. 1658 IN NS ns2.ccb.com. ccb.com. 1658 IN NS ns5.ccb.com. ccb.com. 1658 IN NS ns4.ccb.com. ccb.com. 1658 IN NS ns1.ccb.com. ccb.com. 1658 IN NS ns3.ccb.com.
TXT
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62595 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: ccb.com. 158 IN TXT "v=spf1 ip4:223.72.147.0/24 ip4:124.127.253.0/24 -all"
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7962 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: ccb.com. 157 IN AAAA 2409:8700:1821:f2::25
RRSIG
ns2.ccb.com. liuyanan.ccb.com. 2026080653 10800 3600 604800 60
DNSKEY
;; communications error to 127.0.0.1#5335: timed out ;; communications error to 127.0.0.1#5335: timed out ;; communications error to 127.0.0.1#5335: timed out ; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> @127.0.0.1 -p 5335 ccb.com DNSKEY +noall +answer +authority +comments ; (1 server found) ;; global options: +cmd ;; no servers could be reached
DNSSEC_VALIDATION
; unsigned answer ccb.com. 3424 IN SOA ns2.ccb.com. liuyanan.ccb.com. 2026080653 10800 3600 604800 60
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 24.11 ms (p95: 26.22) | 31.14 ms (p95: 37.48) | +7 ms |
| IPv4 | 77.19 ms (p95: 89.54) | 233.79 ms (p95: 352) | +156.6 ms | |
| IPv6 | 233.33 ms (p95: 373.81) | 97.28 ms (p95: 222.58) | -136.1 ms | |
| Cloudflare | IPv4 | 31.47 ms (p95: 35.05) | 34.7 ms (p95: 37.2) | +3.2 ms |
| Cloudflare | IPv6 | 30.93 ms (p95: 37.93) | 25.28 ms (p95: 29.76) | -5.7 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "111.205.126.206",
"timed_out": false,
"ip_version": 4,
"raw_handshake": "40B70521F77F0000:error:0A000152:SSL routines:final_renegotiate:unsafe legacy renegotiation disabled:../ssl/statem/extensions.c:893:\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 91 bytes and written 316 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nSSL-Session:\n Protocol : TLSv1.2\n Cipher : 0000\n Session-ID: 3F542113A1B85F8C70B633A0AD25B6A8CADB78D160683C3F395C1B51869095EC\n Session-ID-ctx:\n Master-Key:\n PSK identity: None\n PSK identity hint: None\n SRP username: None\n Start Time: 1786183346\n Timeout : 7200 (sec)\n Verify return code: 0 (ok)\n Extended master secret: no\n---"
},
"ipv6": {
"ip_used": "2408:864e:c05::149",
"timed_out": false,
"ip_version": 6,
"raw_handshake": "40676FC4A0790000:error:0A000152:SSL routines:final_renegotiate:unsafe legacy renegotiation disabled:../ssl/statem/extensions.c:893:\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 85 bytes and written 316 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nSSL-Session:\n Protocol : TLSv1.2\n Cipher : 0000\n Session-ID: 0DC275E9672E22FFB82A3E2946771DB8A1FE3D0E9B42F17406360E5180CE9251\n Session-ID-ctx:\n Master-Key:\n PSK identity: None\n PSK identity hint: None\n SRP username: None\n Start Time: 1786183344\n Timeout : 7200 (sec)\n Verify return code: 0 (ok)\n Extended master secret: no\n---"
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 200,
"curl_error": null,
"primary_ip": "111.205.126.206",
"total_time_ms": 1000.34,
"connect_time_ms": 198.69,
"response_headers": [
"HTTP/1.1 200 OK",
"Date: Sat, 08 Aug 2026 10:02:33 GMT",
"Server: Apache",
"Accept-Ranges: bytes",
"Vary: Accept-Encoding",
"Cache-Control: max-age=0",
"Expires: Sat, 08 Aug 2026 10:02:33 GMT",
"Content-Length: 439",
"Content-Type: text/html; charset=UTF-8",
"Set-Cookie: null=!pEzpFNecxeUebUGfnjGE6MQLd1/Qg4OAK/UKLmYYZSyc4FG3ipZxXuyurtm9BbJLedT0z1apq2XVKA==; path=/"
],
"starttransfer_time_ms": 1000.3
},
"v6_http": {
"http_code": 200,
"curl_error": null,
"primary_ip": "2408:864e:c05::149",
"total_time_ms": 5466.01,
"connect_time_ms": 1257.89,
"response_headers": [
"HTTP/1.1 200 OK",
"Date: Sat, 08 Aug 2026 10:02:31 GMT",
"Server: Apache",
"Accept-Ranges: bytes",
"Vary: Accept-Encoding",
"Cache-Control: max-age=0",
"Expires: Sat, 08 Aug 2026 10:02:31 GMT",
"Content-Length: 439",
"Content-Type: text/html; charset=UTF-8",
"Set-Cookie: null=!VUNBuWLxqLhE9lPaTbyfSJe/wI/iow6DHXPBPyI14p772fhQr0Vd97yLpbHOh0nn6N/HJ+QH6h4KvPrghTQSp6JLwDHfED5rxVTjP7Pc; path=/"
],
"starttransfer_time_ms": 5465.94
},
"v4_https": {
"http_code": 0,
"curl_error": "OpenSSL/3.0.13: error:0A000152:SSL routines::unsafe legacy renegotiation disabled",
"primary_ip": "111.205.126.206",
"total_time_ms": 406.59,
"connect_time_ms": 202.2,
"response_headers": [],
"starttransfer_time_ms": 0
},
"v6_https": {
"http_code": 0,
"curl_error": "OpenSSL/3.0.13: error:0A000152:SSL routines::unsafe legacy renegotiation disabled",
"primary_ip": "2408:864e:c05::149",
"total_time_ms": 358.57,
"connect_time_ms": 178.55,
"response_headers": [],
"starttransfer_time_ms": 0
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "200 0.205336 0.398718",
"tcp_connect_v6_80": "200 2.221950 2.923805",
"tcp_connect_v4_443": "000 0.190497 0.000000",
"tcp_connect_v6_443": "000 2.271064 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 4ba59946237f894976ff65e948f5dda3c9e9b9bbeb8f5150d83fb8aec81fa1cc
http_headers: 896328e601340ed5221f02293b00e885598199c25be0b6c9abd9fa1745b1af0c
dns_responses: 3c27bbd2178c7f9213ae8c307e08edfe96f00443ae27997d52a17573fda2db52
tls_handshake: c50837011379d37586b239d64f53929bc5d770c0ef40959a35bdd3aa7b8c1f04
connectivity_log: 6a22048fbc7ae483e7914594e04b97ef85974b624ef1e527532613b8c2a5d585
dns_resolution_times: def4bd39bd2222965a39748046e0c3e85908a6bb72d505dc0f8be86fec4a1a3f