Audit Trail
Evidence record for domain check
Integrity Verified
Test Node Identity
{
"os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
"hostname": "srv1440888",
"php_version": "8.3.32",
"server_ipv4": "76.13.221.142",
"server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
"profile": "dual_stack",
"enforcement_evidence": {
"egress_check": {
"v4_egress": "76.13.221.142",
"v6_egress": "2a02:4780:5e:2789::1"
},
"ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
"ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
"sysctl_flags": {
"net.ipv6.conf.all.disable_ipv6": "0"
},
"nftables_summary": "unavailable or no permissions"
}
}
DNS Responses
A
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40254 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: mahkotamedical.com. 1799 IN A 199.60.103.105 mahkotamedical.com. 1799 IN A 199.60.103.5 mahkotamedical.com. 1799 IN A 103.15.235.35
DS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 44375 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: com. 876 IN SOA a.gtld-servers.net. nstld.verisign-grs.com. 1783107546 1800 900 604800 900
MX
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3300 ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: mahkotamedical.com. 3600 IN MX 9 mahkotamedical-com.mail.protection.outlook.com.
NS
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33909 ;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: mahkotamedical.com. 1800 IN NS pdns1.registrar-servers.com. mahkotamedical.com. 1800 IN NS pdns2.registrar-servers.com.
TXT
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23962 ;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; ANSWER SECTION: mahkotamedical.com. 1799 IN TXT "MS=ms43168926" mahkotamedical.com. 1799 IN TXT "MS=ms78550548" mahkotamedical.com. 1799 IN TXT "hes=26a937a07463515760928bb52958306b" mahkotamedical.com. 1799 IN TXT "MS=02418CD062EDB969A3656F28572AFC72C67E4F51" mahkotamedical.com. 1799 IN TXT "v=spf1 include:spf.protection.outlook.com -all" mahkotamedical.com. 1799 IN TXT "_ds-domain-verification=fde8ffbdd43757a420c3d4fcbd6ee64a" mahkotamedical.com. 1799 IN TXT "workplace-domain-verification=74a4e6d8-087c-43cf-97f0-73a731b92e4a" mahkotamedical.com. 1799 IN TXT "BPL=8273482"
AAAA
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56897 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: mahkotamedical.com. 3576 IN SOA pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601
RRSIG
pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601
DNSKEY
;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 39759 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 1232 ;; AUTHORITY SECTION: mahkotamedical.com. 3576 IN SOA pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601
DNSSEC_VALIDATION
; unsigned answer mahkotamedical.com. 3577 IN SOA pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601
DNS Resolution Performance
Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.
| Resolver | Transport | A (IPv4) | AAAA (IPv6) | Delta |
|---|---|---|---|---|
| System | Default | 9.67 ms (p95: 30.15) | 16.43 ms (p95: 20.94) | +6.8 ms |
| IPv4 | 27.6 ms (p95: 31.25) | 24.4 ms (p95: 56.27) | -3.2 ms | |
| IPv6 | 21.87 ms (p95: 52.8) | 20.92 ms (p95: 37.97) | -0.9 ms | |
| Cloudflare | IPv4 | 19.1 ms (p95: 20.27) | 9.86 ms (p95: 10.19) | -9.2 ms |
| Cloudflare | IPv6 | 20.14 ms (p95: 23.53) | 19.77 ms (p95: 36.83) | -0.4 ms |
TLS Handshake Details
{
"ipv4": {
"ip_used": "199.60.103.105",
"ip_version": 4,
"raw_handshake": "4027B8982A730000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 7 bytes and written 320 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
},
"ipv6": {
"ip_used": "2600:9000:2721:1c00:6:c13e:1e80:93a1",
"ip_version": 6,
"raw_handshake": "403759D472700000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 7 bytes and written 320 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
}
}
HTTP Response Headers
{
"v4_http": {
"http_code": 409,
"curl_error": null,
"primary_ip": "199.60.103.105",
"total_time_ms": 7.4,
"connect_time_ms": 1.15,
"response_headers": [
"HTTP/1.1 409 Conflict",
"Date: Fri, 03 Jul 2026 19:39:44 GMT",
"Content-Type: text/plain; charset=UTF-8",
"Content-Length: 16",
"Connection: close",
"X-Frame-Options: SAMEORIGIN",
"Referrer-Policy: same-origin",
"Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0",
"Expires: Thu, 01 Jan 1970 00:00:01 GMT",
"Server: cloudflare",
"CF-RAY: a1585ba48adbc0c2-KUL"
],
"starttransfer_time_ms": 7.35
},
"v6_http": {
"http_code": 403,
"curl_error": null,
"primary_ip": "2600:9000:2721:1c00:6:c13e:1e80:93a1",
"total_time_ms": 16.45,
"connect_time_ms": 8.18,
"response_headers": [
"HTTP/1.1 403 Forbidden",
"Server: CloudFront",
"Date: Fri, 03 Jul 2026 19:39:44 GMT",
"Content-Type: text/html",
"Content-Length: 915",
"Connection: keep-alive",
"X-Cache: Error from cloudfront",
"Via: 1.1 df81bacde2a10797afb0c8500cb1ab52.cloudfront.net (CloudFront)",
"X-Amz-Cf-Pop: SIN2-P6",
"X-Amz-Cf-Id: _RzyHG9GPLx57iyXK2Pe1ZvS-Ialkwq0sJ2pg-u3zO_tsmWZTcrG6Q=="
],
"starttransfer_time_ms": 16.39
},
"v4_https": {
"http_code": 0,
"curl_error": "OpenSSL/3.0.13: error:0A000410:SSL routines::sslv3 alert handshake failure",
"primary_ip": "199.60.103.105",
"total_time_ms": 16.17,
"connect_time_ms": 2.3,
"response_headers": [],
"starttransfer_time_ms": 0
},
"v6_https": {
"http_code": 0,
"curl_error": "OpenSSL/3.0.13: error:0A000410:SSL routines::sslv3 alert handshake failure",
"primary_ip": "2600:9000:2721:1c00:6:c13e:1e80:93a1",
"total_time_ms": 16.71,
"connect_time_ms": 7.31,
"response_headers": [],
"starttransfer_time_ms": 0
}
}
Connectivity Test Output
{
"tcp_connect_v4_80": "409 0.001292 0.006338",
"tcp_connect_v6_80": "403 0.007821 0.016848",
"tcp_connect_v4_443": "000 0.001066 0.000000",
"tcp_connect_v6_443": "000 0.007520 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: efc1dacc6258224806517fbcfea16b50907002a193e684911ffae5ea2f386c69
http_headers: cefbab82dd85f03877a2dc50ea85793be33480d13f7a596bade4476dcd357e1f
dns_responses: 5cc58cd502e937bce7c945974c192e9a9f3074f53a34009b661e35fbe9ced141
tls_handshake: 2f2c2a537f6b638dc4f72290eea18b5d188197da23ec6deb08a365f157928e43
connectivity_log: 0cd8eaaab657304ca459fb645e285801c960e0a0832da1b806c5745a6fff8371
dns_resolution_times: a5b777d98c04d44834efeab99b2788f277d61fab61f3096cbc3e734ef7a80e08