Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul 1 21:53:05 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.33",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "dual_stack",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "76.13.221.142",
"v6_egress": "2a02:4780:5e:2789::1"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62702 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: hea.uum.edu.my. 297 IN A 103.5.180.127
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 46662 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 299 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026062406 10800 3600 604800 86400
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53675 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 299 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026062406 10800 3600 604800 86400
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37424 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 299 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026062406 10800 3600 604800 86400
TXT
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 53745 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 299 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026062406 10800 3600 604800 86400
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17652 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 299 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026062406 10800 3600 604800 86400
RRSIG
DNSKEY
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18425 ;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: uum.edu.my. 299 IN SOA dns1.uum.edu.my. admin.dnsvault.net. 2026062406 10800 3600 604800 86400
DNSSEC_VALIDATION
;; resolution failed: ncache nxrrset ; negative response, fully validated ; hea.uum.edu.my. 299 IN \-SOA ;-$NXRRSET ; uum.edu.my. SOA dns1.uum.edu.my. admin.dnsvault.net. 2026062406 10800 3600 604800 86400 ; uum.edu.my. RRSIG SOA ... ; DEK3638LQVKIUFM2G0ERBVGC5Q2T7TMO.uum.edu.my. RRSIG NSEC3 ... ; DEK3638LQVKIUFM2G0ERBVGC5Q2T7TMO.uum.edu.my. NSEC3 1 0 0 DC8EBCBA33EE44B3 DG9UGP4TN0KG4FJ8ELSJ7ACSO9J031NM A RRSIG
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 21.34 ms (p95: 21.45) | 19.37 ms (p95: 20.93) | -2 ms |
| IPv4 | 55.79 ms (p95: 57.53) | 53.81 ms (p95: 57.17) | -2 ms | |
| IPv6 | 162.42 ms (p95: 171.46) | 78.86 ms (p95: 267.29) | -83.6 ms | |
| Cloudflare | IPv4 | 33.78 ms (p95: 36.59) | 12.98 ms (p95: 22.76) | -20.8 ms |
| Cloudflare | IPv6 | 52.1 ms (p95: 56.7) | 23.97 ms (p95: 44.16) | -28.1 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "103.5.180.127",
"timed_out": false,
"ip_version": 4,
"raw_handshake": "depth=0 C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nverify error:num=18:self-signed certificate\nverify return:1\ndepth=0 C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nverify return:1\nCONNECTED(00000010)\n---\nCertificate chain\n 0 s:C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n i:C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n a:PKEY: rsaEncryption, 2048 (bit); sigalg: RSA-SHA256\n v:NotBefore: Jan 30 06:51:00 2023 GMT; NotAfter: Dec 31 06:51:00 2056 GMT\n-----BEGIN CERTIFICATE-----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\nDNqyb1dfEwDBRzIQ\n-----END CERTIFICATE-----\n---\nServer certificate\nsubject=C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\nissuer=C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com\n---\nNo client certificate CA names sent\nPeer signing digest: SHA256\nPeer signature type: RSA-PSS\nServer Temp Key: X25519, 253 bits\n---\nSSL handshake has read 1681 bytes and written 409 bytes\nVerification error: self-signed certificate\n---\nNew, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384\nServer public key is 2048 bit\nSecure Renegotiation IS supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nSSL-Session:\n Protocol : TLSv1.2\n Cipher : ECDHE-RSA-AES256-GCM-SHA384\n Session-ID: F073865C3AF6B1A121BA5D72A3B77B31589CB8833C85B03922A28DC2D2289A06\n Session-ID-ctx:\n Master-Key: B41C9325D2BB643AE163F7FB76F61B390B8D9EDF59CBF8167111FD22874593AAE579B052A75035FAA1FDEB358C0A8934\n PSK identity: None\n PSK identity hint: None\n SRP username: None\n TLS session ticket lifetime hint: 7200 (seconds)\n TLS session ticket:\n 0000 - 16 d1 0d 9c 1b b6 22 11-4e ca d0 18 12 f3 8d 23 ......\".N......#\n 0010 - 6f 3a 0f 40 66 04 52 06-f8 d5 5c b6 61 56 1f 0d o:.@f.R...\\.aV..\n 0020 - d4 fc 9b 17 59 a5 b4 38-f0 ac 96 30 60 c2 ca 67 ....Y..8...0`..g\n 0030 - 3c bf 20 63 22 0a 80 87-5d 04 fe d5 b9 92 cc 66 <. c\"...]......f\n 0040 - d0 d9 9f 15 2e 72 e3 6c-93 3d 53 17 58 b9 61 3c .....r.l.=S.X.a<\n 0050 - 66 d2 7f b8 7b 4a 08 64-6a a8 7b 15 4f 9d 8c ce f...{J.dj.{.O...\n 0060 - 9f 16 ca e3 ff dc ab 2b-d8 f9 3b 9a f9 e7 aa de .......+..;.....\n 0070 - 3c e2 2c 34 2b 1d 3f 70-0b 1d e6 92 e6 0d 28 45 <.,4+.?p......(E\n 0080 - e5 ab d0 60 52 a7 da ad-c1 7e 3b 54 cd 65 06 1c ...`R....~;T.e..\n 0090 - 67 17 33 b4 e9 89 d1 73-98 53 75 3e 0f ea c5 f0 g.3....s.Su>....\n 00a0 - f5 7c f0 1c 5b 6c 2c c8-54 98 d0 36 3a d5 19 e8 .|..[l,.T..6:...\n 00b0 - a0 45 85 de c5 93 9b 1a-62 76 b3 6b 4c 6a b6 0d .E......bv.kLj..\n\n Start Time: 1786184181\n Timeout : 7200 (sec)\n Verify return code: 18 (self-signed certificate)\n Extended master secret: yes\n---\nDONE"
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 500,
"curl_error": null,
"primary_ip": "103.5.180.127",
"total_time_ms": 35.46,
"connect_time_ms": 17.57,
"response_headers": [
"HTTP/1.1 500 Internal Server Error",
"Content-Length: 40130",
"Content-Type: text/html"
],
"starttransfer_time_ms": 35.43
},
"v4_https": {
"tls": {
"protocol": 0,
"certificates": [
{
"Cert": "-----BEGIN CERTIFICATE-----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\nDNqyb1dfEwDBRzIQ\n-----END CERTIFICATE-----\n",
"Issuer": "C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com",
"rsa(e)": "10001",
"rsa(n)": "C4C02D4B3D6FF301708DB4DCC599F84D4CC75A036F1A971F8A42CE1B0A4F29C9CB0E78C82D8F752351137DAE9DA9DD511AE37590FA92F830641CE03D2F29F7FEF04D8B3B7F008AE9A595EE4C5087FD3C359035899BA7EBA95A3603A98751A443370D373EFE49B88C31F2937CFA7DA6D64083257C4083F5BBDBCE454D5B91A1F0D218EB9ABB11B48195F33CA920D5A04A3912E40465580985D0ABCF57C4A653C06545F03DC2FE4605FD83E81F697565C5AC803F1A17CC9EE6B9BD703C497B593C5562F053C9FE919B74FF08B7C0A026850CD6BC7F2EFCF410243FDCDABBF624DAFD5A524CD29F48EB34BBE2EDF22598053E5741A3D2C5BCF2A6BC890FC7FAA359",
"Subject": "C = CA, ST = BC, L = Vancouver, O = Fortinet Inc., OU = Fortinet, CN = FortiWEB, emailAddress = support@fortinet.com",
"Version": "2",
"Signature": "88:92:3c:09:3e:6c:76:08:68:a2:15:a1:6e:a7:8b:f7:92:00:b5:96:f9:89:1c:29:73:7e:3c:a6:c5:fc:72:84:a4:b9:65:8e:3b:94:9c:20:71:30:98:62:50:f9:ec:56:ff:ad:ff:ed:2b:0f:e6:39:c9:00:43:6d:c0:6a:ce:a0:3b:c0:2b:1e:86:58:56:0d:f9:15:83:91:a4:4c:3a:c9:65:e7:c0:28:b8:58:55:e8:66:13:f1:0d:b9:2c:d5:2c:54:1a:ad:16:c0:a0:e9:a0:d4:28:73:7f:a5:74:14:23:20:a9:da:98:5c:a3:88:a8:96:2a:c3:2a:9e:d9:df:be:e2:cd:87:ce:6f:a4:f3:75:0a:46:0c:9f:82:cd:25:6b:b4:00:24:90:e1:3f:9a:79:ad:ea:9a:f9:c5:91:f6:a0:8e:5f:92:1e:e8:f2:6e:ca:a1:58:bc:91:09:31:b8:f1:bb:6d:01:0d:84:39:85:1c:e9:dd:25:8a:d9:3a:d3:3c:b0:a6:24:09:6b:85:12:68:50:25:e2:8f:ca:ae:bc:8c:04:5b:9f:ac:5a:46:20:f3:20:59:da:a0:52:b6:13:42:a3:df:4b:e0:c3:9a:53:41:01:cd:8f:70:c8:53:85:ea:bd:2e:7a:0c:0c:da:b2:6f:57:5f:13:00:c1:47:32:10:",
"Start date": "Jan 30 06:51:00 2023 GMT",
"Expire date": "Dec 31 06:51:00 2056 GMT",
"Serial Number": "1e542cd258d3b4e1",
"RSA Public Key": "2048",
"Signature Algorithm": "sha256WithRSAEncryption",
"Public Key Algorithm": "rsaEncryption",
"X509v3 Basic Constraints": "CA:TRUE",
"X509v3 Subject Key Identifier": "DC:09:87:A8:99:F9:89:B1:FF:DB:2D:91:BD:D6:ED:EC:7D:A3:BB:4C",
"X509v3 Authority Key Identifier": "DC:09:87:A8:99:F9:89:B1:FF:DB:2D:91:BD:D6:ED:EC:7D:A3:BB:4C"
}
]
},
"http_code": 500,
"curl_error": null,
"primary_ip": "103.5.180.127",
"total_time_ms": 83.7,
"connect_time_ms": 16.64,
"response_headers": [
"HTTP/1.1 500 Internal Server Error",
"Content-Length: 40130",
"Content-Type: text/html"
],
"starttransfer_time_ms": 83.67
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "200 0.017519 0.614247",
"tcp_connect_v4_443": "000 0.016990 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: 7b85748d42e62cd79a20a003111aff70e9875fe50b7e051a6c38835c7dd08549
http_headers: 2f430adff105de020a61eb5d706f0e0741eaa0362e7c194f87a959ca8eb26186
dns_responses: eb2e03f7027be6351a0710bccfb0d6383aaf070a2d1efd402690717695b5e48e
tls_handshake: bf47e4f00078869b2880699455bdccff067a0dfe19084ca36b2924144a9fc994
connectivity_log: 5e1bb590ac386d9568f80d5a0eeef612e1f8aca9e2856362afe71e55ba6b53ea
dns_resolution_times: f0dedf24bf4de1962212f9ac0d15e5912bb46319c6985079e2bbb88be9acede3