Audit Trail

Evidence record for domain check

Integrity Verified
Verification ID
a0cfa655-afbb-4ce3-8ec4-be2043d2ad29
Domain
kbs.gov.my
Mode
manual
Started
2026-08-08 18:11:07 +08
Finished
2026-08-08 18:12:13 +08
Status
completed
Test Node Profile
dual stack
Engine Version
2.0.0
MGv6C Version
1.0.0
Test Node Identity
{
    "os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul  1 21:53:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.33",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}
DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10283
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
kbs.gov.my.		3600	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026062072 3600 900 3600000 3600

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43164
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kbs.gov.my.		58873	IN	DS	35704 8 2 EFCD896BCA7730AF2FFABE58D0C1E7D2990AB94DAE4269AC84B7AE24 6D45531B
kbs.gov.my.		58873	IN	DS	35704 8 1 C53E39ECA042F572904E06C2DEB67B7F0951B50D

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45711
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kbs.gov.my.		300	IN	MX	10 alt3.aspmx.l.google.com.
kbs.gov.my.		300	IN	MX	5 alt2.aspmx.l.google.com.
kbs.gov.my.		300	IN	MX	5 alt1.aspmx.l.google.com.
kbs.gov.my.		300	IN	MX	1 aspmx.l.google.com.
kbs.gov.my.		300	IN	MX	10 alt4.aspmx.l.google.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34115
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kbs.gov.my.		3600	IN	NS	dns1.gitn.net.my.
kbs.gov.my.		3600	IN	NS	dns2.gitn.net.my.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57471
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kbs.gov.my.		300	IN	TXT	"google-site-verification=ijt89L0ft-PhNeBtZVfkyD4rdU85XxeAni8fqx__Cus"
kbs.gov.my.		300	IN	TXT	"v=spf1 ip4:103.8.147.12/30 ip4:219.92.54.177/32 ip4:103.156.82.32/29 ip4:103.156.83.32/29 include:_spf.google.com ~all"
kbs.gov.my.		300	IN	TXT	"MS=E24042AAA3B136D5C11F7E39C30D5AC0224D28F4"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24874
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
kbs.gov.my.		3600	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026062072 3600 900 3600000 3600

RRSIG

dns1.gitn.net.my. root.dns1.gitn.net.my. 2026062072 3600 900 3600000 3600
SOA 8 3 3600 20260906205202 20260807195202 1416 kbs.gov.my. YN22Q99+b6DMqkf29IvF3IKPCwoev3h2dXfJ8+QAVTtdqDfsQPkWN3tN iR7AAc6BBBJpWDbd752xOgm3staMrKbQaivGgwjeRFPdXkN4a6KGR0v+ +r/Fk/bfo13Qk7EnR1hAKAnppl/Oc61RstJ+xXaBVv5wgSArCllBNmhk KOU=

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49536
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kbs.gov.my.		3583	IN	DNSKEY	256 3 8 AwEAAbmXYTkF8YiZBTuo1yD9XtGcEi4P37A3jaXq160nv5bQWZ9E4Cqg NIrPWSRsAIN1tFKy4nwadchU0DsOtjCnlsKbJxDMqkSAD9B7Hf4UjByM 2koKp6TjRmQXlfNWxPSQDXBnKzs3VHfVsprVbisWfYGqMumulJaoR9yk epkKGhA1
kbs.gov.my.		3583	IN	DNSKEY	257 3 8 AwEAAbMEcIMJAC331NDM8i5YpHrcd2c2INnAjDIHLgS+/M4BDa31s6uv wmsxe7+Bk0IilZRiICMTXxrA56JYqZYnHg43JyGovHk6383S+EZ9rMva y6OVO1JUFmVXAf3RotnBKu5idLciOx2TH3KfxjC2eoU99H2E+HNllDsC /KX2ku4PYApsRvUsMVD3CdtXxeqUOtv5c5XLjIX+cwqV3v3F+uyVAWd5 Kt7V7CF8pyVVAIixY5+uuVokya/cQ/iegFyc6Xki4oWlsZIJ8RZDBZ2Y kokJqH5ep5lC3q483bo2kPnIZg7kEcVdoE5cfy9gAjwCzcDO3QnoN6G0 Pr6RRq0E9G0=

DNSSEC_VALIDATION

; fully validated
kbs.gov.my.		3583	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026062072 3600 900 3600000 3600
kbs.gov.my.		3583	IN	RRSIG	SOA 8 3 3600 20260906205202 20260807195202 1416 kbs.gov.my. YN22Q99+b6DMqkf29IvF3IKPCwoev3h2dXfJ8+QAVTtdqDfsQPkWN3tN iR7AAc6BBBJpWDbd752xOgm3staMrKbQaivGgwjeRFPdXkN4a6KGR0v+ +r/Fk/bfo13Qk7EnR1hAKAnppl/Oc61RstJ+xXaBVv5wgSArCllBNmhk KOU=

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 22.68 ms (p95: 24.28) 24.98 ms (p95: 26.06) +2.3 ms
Google IPv4 42.72 ms (p95: 162.03) 147.74 ms (p95: 160.71) +105 ms
Google IPv6 152.35 ms (p95: 164.15) 159.31 ms (p95: 168.79) +7 ms
Cloudflare IPv4 22.68 ms (p95: 23.91) 23.21 ms (p95: 26.8) +0.5 ms
Cloudflare IPv6 33.03 ms (p95: 50.17) 26.95 ms (p95: 35.6) -6.1 ms
TLS Handshake Details
{
    "ipv4": {
        "ip_used": "202.75.6.253",
        "timed_out": true,
        "ip_version": 4,
        "raw_handshake": ""
    }
}
HTTP Response Headers
{
    "v4_http": {
        "http_code": 0,
        "curl_error": "Failed to connect to kbs.gov.my port 80 after 8002 ms: Timeout was reached",
        "primary_ip": "",
        "total_time_ms": 8002.26,
        "connect_time_ms": 0,
        "response_headers": [],
        "starttransfer_time_ms": 0
    },
    "v4_https": {
        "http_code": 0,
        "curl_error": "Failed to connect to kbs.gov.my port 443 after 8002 ms: Timeout was reached",
        "primary_ip": "",
        "total_time_ms": 8002.57,
        "connect_time_ms": 0,
        "response_headers": [],
        "starttransfer_time_ms": 0
    }
}
Connectivity Test Output
{
    "tcp_connect_v4_80": "000 0.000000 0.000000",
    "tcp_connect_v4_443": "000 0.000000 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 020f9878b38d9f9b86419d5b036497b0bdcebada3133ff67b3014fffe25970e2
http_headers: 51ffe1e97d19f0f5297915181e7d61b6384cae8f45c006f38e7839416dbeb709
dns_responses: c7bed2a2b02dfc178a93220f3f31fea918d001c69a6f99a79d1de86a6b740d1a
tls_handshake: 236a68e3dd7bbc3e719fcbf5fab9dbd8ea49cf0b2a75b758e1ba3b3e75a6ddda
connectivity_log: c571529628ae93d3d5180dec20e307692d772428bf4569b1feeb29b40bc18e78
dns_resolution_times: 8c884c87f90c389f152c91a2e3644be8a173b27ce8a5ba9a1fdfe7a0cf5dc687