Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:53:05 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.33",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "dual_stack",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "unreachable",
"v6_egress": "unreachable"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34655 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: bankrakyat.com.my. 60 IN A 45.60.155.140 bankrakyat.com.my. 60 IN A 45.60.159.140
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33994 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: bankrakyat.com.my. 58674 IN DS 9981 13 2 45AC067C6B742B35B67201788E83D181C98780C64287DA8C38F3A507 47F2B928
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 49177 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: bankrakyat.com.my. 60 IN MX 0 mx2.bankrakyat.com.my. bankrakyat.com.my. 60 IN MX 0 mx1.bankrakyat.com.my.
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 60621 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 4 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: bankrakyat.com.my. 3478 IN NS hpnt4.bankrakyat.com.my. bankrakyat.com.my. 3478 IN NS ns2.bankrakyat.com.my. bankrakyat.com.my. 3478 IN NS ns3.bankrakyat.com.my.
TXT
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45418 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 9, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: bankrakyat.com.my. 3478 IN TXT "jk54b2t4zltw3sr6xxwdb9p6wclsftft" bankrakyat.com.my. 3478 IN TXT "google-site-verification=xGp-DJguir1j4D4dfcQgyIezmhmO0L-X8sp6PpdOHtU" bankrakyat.com.my. 3478 IN TXT "globalsign-domain-verification=442AE5C04430BF18E93E3A6A169F9D39" bankrakyat.com.my. 3478 IN TXT "qhfldc0gk1d4mz1zkss92pq03rb8wf8g" bankrakyat.com.my. 3478 IN TXT "google-site-verification=shtLgWmZ5HrZHol95--947CqYF01H9Qo-84YZ_pCY5s" bankrakyat.com.my. 3478 IN TXT "_ietdkg9nc5qt7mkqy6p87x0sn33gfp4" bankrakyat.com.my. 3478 IN TXT "v=spf1 ip4:1.9.61.235 ip4:1.9.61.236 ip4:1.9.61.165 ip4:1.9.61.237 ip4:1.9.61.238 ip4:20.212.50.172 ip4:20.212.104.53 ip4:168.63.237.150 ip4:207.46.227.230 ip4:168.63.248.182 include:service-now.com include:email-messaging.com -all" bankrakyat.com.my. 3478 IN TXT "FV7uIXEhnkDoGZgJ8r6xuBSkgcNRDmkC9RgApf2Za2E2JDDMJiRMrg1v7mfefb2bwguZ1uIHkbl4dgLzeT3bMA==" bankrakyat.com.my. 3478 IN TXT "globalsign-domain-verification=162a2a62301ce4ea1829c6a33062cd57"
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9939 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: bankrakyat.com.my. 778 IN SOA hpnt4.bankrakyat.com.my. admin.bankrakyat.com.my. 2026080504 10800 3600 2419200 900
RRSIG
hpnt4.bankrakyat.com.my. admin.bankrakyat.com.my. 2026080504 10800 3600 2419200 900 SOA 13 3 3600 20260812093130 20260805083130 41548 bankrakyat.com.my. DAgRYKhcLd+v4A9FCuHd0RbpN+zoGUqay9VmRkqneVCw8HcK+ExIQcHv R9pU1yv5YKpZQALCMJ0E2Nl0gFgfxA==
DNSKEY
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33592 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: bankrakyat.com.my. 3458 IN DNSKEY 257 3 13 KUR9WpXnQLDZZdk5c9sVHiEY0alb4TtD7OhAD9/3yR/J4+lyZCLaKEJD K6dj+GMYNvLwmOxOslrBKp5bz4DuTw== bankrakyat.com.my. 3458 IN DNSKEY 256 3 13 ppajh2FAg5unfWbMx6GazNkeBLx9s7R9M9v9rLq6/HX3DulEPLtsT3GP SbqpeO1is3avVVmAb/lBFCqHfF0WBQ==
DNSSEC_VALIDATION
; fully validated bankrakyat.com.my. 3458 IN SOA hpnt4.bankrakyat.com.my. admin.bankrakyat.com.my. 2026080504 10800 3600 2419200 900 bankrakyat.com.my. 3458 IN RRSIG SOA 13 3 3600 20260812093130 20260805083130 41548 bankrakyat.com.my. DAgRYKhcLd+v4A9FCuHd0RbpN+zoGUqay9VmRkqneVCw8HcK+ExIQcHv R9pU1yv5YKpZQALCMJ0E2Nl0gFgfxA==
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 23.38 ms (p95: 23.87) | 23.35 ms (p95: 24.03) | -0 ms |
| IPv4 | 158.3 ms (p95: 173.15) | 97.46 ms (p95: 162.53) | -60.8 ms | |
| IPv6 | 145.43 ms (p95: 161.29) | 173.92 ms (p95: 180.21) | +28.5 ms | |
| Cloudflare | IPv4 | 25.31 ms (p95: 26.63) | 23.95 ms (p95: 50.25) | -1.4 ms |
| Cloudflare | IPv6 | 29.02 ms (p95: 31.42) | 28.23 ms (p95: 39.43) | -0.8 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "45.60.155.140",
"timed_out": false,
"ip_version": 4,
"raw_handshake": "4037A8FFF2740000:error:0A000458:SSL routines:ssl3_read_bytes:tlsv1 unrecognized name:../ssl/record/rec_layer_s3.c:1599:SSL alert number 112\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 7 bytes and written 319 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 503,
"curl_error": null,
"primary_ip": "45.60.155.140",
"total_time_ms": 318.03,
"connect_time_ms": 158.66,
"response_headers": [
"HTTP/1.1 503 Service Unavailable",
"Content-Type: text/html",
"Cache-Control: no-cache, no-store",
"Connection: close",
"Content-Length: 704",
"X-Iinfo: 11-3777032-0 0NNN RT(1786183279319 0) q(0 -1 -1 -1) r(0 -1)"
],
"starttransfer_time_ms": 317.94
},
"v4_https": {
"http_code": 0,
"curl_error": "OpenSSL/3.0.13: error:0A000458:SSL routines::tlsv1 unrecognized name",
"primary_ip": "45.60.155.140",
"total_time_ms": 317.67,
"connect_time_ms": 158.5,
"response_headers": [],
"starttransfer_time_ms": 0
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "503 0.158782 0.317906",
"tcp_connect_v4_443": "000 0.158528 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 9de795de695b0bc13416e0d85f6d908a8d7cca1c2db2222ddd126c4a632e8d97
http_headers: 833612973d72e0a8ae48bbbf2e25a0c050c7bb589f267d3da8d9858f497b1749
dns_responses: cb5adb98c42e7d3c7267034287d768d0baef1bae98a924000e65cbff4620fbfa
tls_handshake: 8632f019e7400c32d697fc29f6fdc20a269870919adb266cd22cc6f72106fc9b
connectivity_log: b97a9866ea12d661aa4205ea4980a34fae3286fa070a2f1700e700a4e6da1215
dns_resolution_times: fcf9b37484dac759369fc4b797eda718a49486db8cf76ab7f3999d19e81515a8