Audit Trail

Evidence record for domain check

Integrity Verified
Verification ID
eb12e473-4fbb-455d-8978-7c197dca969a
Domain
mahkotamedical.com
Mode
manual
Started
2026-08-08 18:27:12 +08
Finished
2026-08-08 18:27:33 +08
Status
completed
Test Node Profile
dual stack
Engine Version
2.0.0
MGv6C Version
1.0.0
Test Node Identity
{
    "os": "Linux srv1440888 6.8.0-136-generic #136-Ubuntu SMP PREEMPT_DYNAMIC Wed Jul  1 21:53:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.33",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n10.6.101.0/24 dev wg0 scope link \n10.6.102.0/24 dev wg0 scope link \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n172.29.0.0/24 dev wg0 scope link \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfd7a:115c:a1e0::1136:5807 dev tailscale0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev tailscale0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}
DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41468
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
mahkotamedical.com.	1799	IN	A	199.60.103.5
mahkotamedical.com.	1799	IN	A	103.15.235.35
mahkotamedical.com.	1799	IN	A	199.60.103.105

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62382
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
com.			875	IN	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1786184799 1800 900 604800 900

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62778
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
mahkotamedical.com.	3600	IN	MX	9 mahkotamedical-com.mail.protection.outlook.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 551
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
mahkotamedical.com.	1800	IN	NS	pdns1.registrar-servers.com.
mahkotamedical.com.	1800	IN	NS	pdns2.registrar-servers.com.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17361
;; flags: qr rd ra; QUERY: 1, ANSWER: 8, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
mahkotamedical.com.	1799	IN	TXT	"v=spf1 include:spf.protection.outlook.com -all"
mahkotamedical.com.	1799	IN	TXT	"_ds-domain-verification=fde8ffbdd43757a420c3d4fcbd6ee64a"
mahkotamedical.com.	1799	IN	TXT	"workplace-domain-verification=74a4e6d8-087c-43cf-97f0-73a731b92e4a"
mahkotamedical.com.	1799	IN	TXT	"BPL=8273482"
mahkotamedical.com.	1799	IN	TXT	"MS=ms43168926"
mahkotamedical.com.	1799	IN	TXT	"MS=ms78550548"
mahkotamedical.com.	1799	IN	TXT	"hes=26a937a07463515760928bb52958306b"
mahkotamedical.com.	1799	IN	TXT	"MS=02418CD062EDB969A3656F28572AFC72C67E4F51"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20922
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
mahkotamedical.com.	3582	IN	SOA	pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601

RRSIG

pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 64581
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
mahkotamedical.com.	3581	IN	SOA	pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601

DNSSEC_VALIDATION

; unsigned answer
mahkotamedical.com.	3582	IN	SOA	pdns1.registrar-servers.com. hostmaster.registrar-servers.com. 1780446223 43200 3600 604800 3601

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 21.69 ms (p95: 27.33) 22.55 ms (p95: 28.49) +0.9 ms
Google IPv4 82.09 ms (p95: 89.46) 93.09 ms (p95: 100.04) +11 ms
Google IPv6 89.06 ms (p95: 101.76) 91.3 ms (p95: 98.86) +2.2 ms
Cloudflare IPv4 24.45 ms (p95: 26) 24.68 ms (p95: 26.31) +0.2 ms
Cloudflare IPv6 34.54 ms (p95: 193.66) 33.9 ms (p95: 35.41) -0.6 ms
TLS Handshake Details
{
    "ipv4": {
        "ip_used": "199.60.103.105",
        "timed_out": false,
        "ip_version": 4,
        "raw_handshake": "4097C0D219750000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 7 bytes and written 320 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
    },
    "ipv6": {
        "ip_used": "2600:9000:2721:3e00:6:c13e:1e80:93a1",
        "timed_out": false,
        "ip_version": 6,
        "raw_handshake": "40771528B5780000:error:0A000410:SSL routines:ssl3_read_bytes:sslv3 alert handshake failure:../ssl/record/rec_layer_s3.c:1599:SSL alert number 40\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 7 bytes and written 320 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
    }
}
HTTP Response Headers
{
    "v4_http": {
        "http_code": 409,
        "curl_error": null,
        "primary_ip": "199.60.103.105",
        "total_time_ms": 10.35,
        "connect_time_ms": 1,
        "response_headers": [
            "HTTP/1.1 409 Conflict",
            "Date: Sat, 08 Aug 2026 10:27:33 GMT",
            "Content-Type: text/plain; charset=UTF-8",
            "Content-Length: 16",
            "Connection: close",
            "X-Frame-Options: SAMEORIGIN",
            "Referrer-Policy: same-origin",
            "Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0",
            "Expires: Thu, 01 Jan 1970 00:00:01 GMT",
            "Server: cloudflare",
            "CF-RAY: a27dd4489e8b6312-KUL"
        ],
        "starttransfer_time_ms": 10.31
    },
    "v6_http": {
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "2600:9000:2721:3e00:6:c13e:1e80:93a1",
        "total_time_ms": 14.57,
        "connect_time_ms": 7.31,
        "response_headers": [
            "HTTP/1.1 403 Forbidden",
            "Server: CloudFront",
            "Date: Sat, 08 Aug 2026 10:27:33 GMT",
            "Content-Type: text/html",
            "Content-Length: 915",
            "Connection: keep-alive",
            "X-Cache: Error from cloudfront",
            "Via: 1.1 58fd67189fcd37aeb89133f7788d34ae.cloudfront.net (CloudFront)",
            "X-Amz-Cf-Pop: SIN2-P6",
            "X-Amz-Cf-Id: 4dFQ_XlNwgb1h4Q9NJKpE3FEFH_dORA2Vj1aW2-4ovdobgFOQxv-sg=="
        ],
        "starttransfer_time_ms": 14.52
    },
    "v4_https": {
        "http_code": 0,
        "curl_error": "OpenSSL/3.0.13: error:0A000410:SSL routines::sslv3 alert handshake failure",
        "primary_ip": "199.60.103.105",
        "total_time_ms": 3.12,
        "connect_time_ms": 0.84,
        "response_headers": [],
        "starttransfer_time_ms": 0
    },
    "v6_https": {
        "http_code": 0,
        "curl_error": "OpenSSL/3.0.13: error:0A000410:SSL routines::sslv3 alert handshake failure",
        "primary_ip": "2600:9000:2721:3e00:6:c13e:1e80:93a1",
        "total_time_ms": 14.96,
        "connect_time_ms": 7.2,
        "response_headers": [],
        "starttransfer_time_ms": 0
    }
}
Connectivity Test Output
{
    "tcp_connect_v4_80": "409 0.001132 0.006458",
    "tcp_connect_v6_80": "403 0.006939 0.014000",
    "tcp_connect_v4_443": "000 0.000964 0.000000",
    "tcp_connect_v6_443": "000 0.006999 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: f4750d22245aea5bb3e65be7c75cf59b96575347335b9d56ba9d9b5be28bbab0
http_headers: 069f79c35cf2dff8c061c8580318f5fa05b5736f98c8226c40beb3f30050b8d4
dns_responses: 8280f96e42103365f9cbb1d0d4d724875c19f0ad771de826ef48dc5e3ec480d6
tls_handshake: 9eeed0ee2f4705c53332143926ba9e45313b0a2764a377db3dbc90cb24d83ca9
connectivity_log: c97a1dd691641e9e9ae28128811b9d6b8a022a2f96f4dcc48daed42c7a04196b
dns_resolution_times: d9e900f663c68bde3ee3cd116ca4a14f3c924929bb6bc40595f6dad511ba60f7