Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:53:05 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.33",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "dual_stack",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "76.13.221.142",
"v6_egress": "2a02:4780:5e:2789::1"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26504 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: regencyspecialist.com. 3600 IN A 199.60.103.105 regencyspecialist.com. 3600 IN A 199.60.103.5
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20521 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: com. 881 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 1786184859 1800 900 604800 900
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20076 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: regencyspecialist.com. 3600 IN MX 0 regencyspecialist-com.mail.protection.outlook.com.
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56785 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: regencyspecialist.com. 3600 IN NS ns20.jiix.net. regencyspecialist.com. 3600 IN NS ns20.isodium.net.
TXT
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34149 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: regencyspecialist.com. 600 IN TXT "google-site-verification=l-h4qOWTjwJrzFFb9___Eqn175S7k4WhEi3r4HBnldU" regencyspecialist.com. 600 IN TXT "BPL=6806462" regencyspecialist.com. 600 IN TXT "_ds-domain-verification=897e6184e3063ec886c6007160bb971f" regencyspecialist.com. 600 IN TXT "MS=ms98703516" regencyspecialist.com. 600 IN TXT "v=spf1 a mx ip4:113.23.226.129/27 ip4:113.23.226.161/27 ip4:175.138.31.11/29 ip4:118.100.13.121 ip4:60.51.193.17 ip4:1.9.137.164 include:_spf.psm.kno" "wbe4.com include:spf.protection.outlook.com -all include:8455804.spf02.hubspotemail.net ~all"
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49212 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: regencyspecialist.com. 3581 IN SOA ns20.jiix.net. hostmaster.regencyspecialist.com. 2026062500 3600 3600 1209600 86400
RRSIG
ns20.jiix.net. hostmaster.regencyspecialist.com. 2026062500 3600 3600 1209600 86400
DNSKEY
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3711 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: regencyspecialist.com. 3581 IN SOA ns20.jiix.net. hostmaster.regencyspecialist.com. 2026062500 3600 3600 1209600 86400
DNSSEC_VALIDATION
; unsigned answer regencyspecialist.com. 3581 IN SOA ns20.jiix.net. hostmaster.regencyspecialist.com. 2026062500 3600 3600 1209600 86400
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 25.49 ms (p95: 31.55) | 23.59 ms (p95: 24.34) | -1.9 ms |
| IPv4 | 156.34 ms (p95: 291.35) | 167.16 ms (p95: 172.1) | +10.8 ms | |
| IPv6 | 163.21 ms (p95: 166.2) | 164.54 ms (p95: 173.87) | +1.3 ms | |
| Cloudflare | IPv4 | 22.65 ms (p95: 23.09) | 14.58 ms (p95: 28.12) | -8.1 ms |
| Cloudflare | IPv6 | 25.57 ms (p95: 205.31) | 24.59 ms (p95: 26.32) | -1 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "199.60.103.105",
"timed_out": false,
"ip_version": 4,
"raw_handshake": "4017AC3837740000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 7 bytes and written 323 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
},
"ipv6": {
"ip_used": "2600:9000:2149:ae00:10:b75f:a280:93a1",
"timed_out": false,
"ip_version": 6,
"raw_handshake": "40D7346B00710000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 7 bytes and written 323 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 409,
"curl_error": null,
"primary_ip": "199.60.103.105",
"total_time_ms": 6.9,
"connect_time_ms": 0.87,
"response_headers": [
"HTTP/1.1 409 Conflict",
"Date: Sat, 08 Aug 2026 10:28:23 GMT",
"Content-Type: text/plain; charset=UTF-8",
"Content-Length: 16",
"Connection: close",
"X-Frame-Options: SAMEORIGIN",
"Referrer-Policy: same-origin",
"Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0",
"Expires: Thu, 01 Jan 1970 00:00:01 GMT",
"Server: cloudflare",
"CF-RAY: a27dd57c1dbdcc5f-KUL"
],
"starttransfer_time_ms": 6.88
},
"v6_http": {
"http_code": 403,
"curl_error": null,
"primary_ip": "2600:9000:2149:ae00:10:b75f:a280:93a1",
"total_time_ms": 14.19,
"connect_time_ms": 7,
"response_headers": [
"HTTP/1.1 403 Forbidden",
"Server: CloudFront",
"Date: Sat, 08 Aug 2026 10:28:23 GMT",
"Content-Type: text/html",
"Content-Length: 915",
"Connection: keep-alive",
"X-Cache: Error from cloudfront",
"Via: 1.1 33c5838586a4fe832f9b31ec54f54470.cloudfront.net (CloudFront)",
"X-Amz-Cf-Pop: SIN3-P2",
"X-Amz-Cf-Id: iyxq8ohSqxTZxl2j4rQWJsfwFHLoTCYZOJQtZRPKxoSTlfZ3vL02RQ=="
],
"starttransfer_time_ms": 14.16
},
"v4_https": {
"http_code": 0,
"curl_error": "OpenSSL/3.0.13: error:0A000410:SSL routines::sslv3 alert handshake failure",
"primary_ip": "199.60.103.105",
"total_time_ms": 3.04,
"connect_time_ms": 0.82,
"response_headers": [],
"starttransfer_time_ms": 0
},
"v6_https": {
"http_code": 0,
"curl_error": "OpenSSL/3.0.13: error:0A000410:SSL routines::sslv3 alert handshake failure",
"primary_ip": "2600:9000:2149:ae00:10:b75f:a280:93a1",
"total_time_ms": 14.54,
"connect_time_ms": 7.06,
"response_headers": [],
"starttransfer_time_ms": 0
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "409 0.000941 0.006002",
"tcp_connect_v6_80": "403 0.006900 0.013991",
"tcp_connect_v4_443": "000 0.000961 0.000000",
"tcp_connect_v6_443": "000 0.007123 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 33d6525477ff91d93c63f724dd061d9a4428b1c19b4b5aba0efea50147104f11
http_headers: b6b31401b9cb592bcdfcbcf52c6f1ca4472f02428c335bf878896ca8303fd351
dns_responses: c62f213fdf9dc92feff246175e9558ac11556da807b5c476cc725743c6b4ffd2
tls_handshake: 7928198fcb282e9c1f051aff37043c180a813fdc0c3bb7fe716c50743df3eb7d
connectivity_log: 120314e8057791d72a3361df5ff333f622e100c02057e1288f7c91a3f5d38264
dns_resolution_times: face356c05c7a6ab3a2da61171d63e333e1bf8a5dcce616c275a94958addf865