Audit Trail

{
    "os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.31",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "unreachable",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

{
    "v4_http": {
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "162.159.140.229",
        "total_time_ms": 210.16,
        "connect_time_ms": 2.99,
        "response_headers": {
            "0": "HTTP/1.1 301 Moved Permanently",
            "1": "Date: Fri, 12 Jun 2026 17:04:34 GMT",
            "2": "Content-Type: text/html; charset=UTF-8",
            "3": "Connection: keep-alive",
            "4": "Location: https://x.com/",
            "5": "set-cookie: __cf_bm=WRq5dJkOPljXums92oVMDcG3c3hg36cNVxaW7nUbYww-1781283874.436531-1.0.1.1-7yzN_q1L6_U.e4cUtTv1gGn54TAOiBYLs6E1uSz8nMQUISidcMsQQ8PvZPo1g5Vbz.qgCqDTiaeRDAYUmqNo.sRQHpvNJtFkuKeA7HW601Ejg3Dp1GsZxCDHb6pf9ixV; HttpOnly; Path=/; Domain=x.com; Expires=Fri, 12 Jun 2026 17:34:34 GMT",
            "6": "Server: cloudflare",
            "7": "CF-RAY: a0aa6f773c1455a9-KUL",
            "9": "HTTP/2 403",
            "10": "date: Fri, 12 Jun 2026 17:04:34 GMT",
            "11": "perf: 7402827104",
            "12": "server: cloudflare envoy",
            "13": "x-powered-by: Express",
            "14": "cache-control: no-cache, no-store, max-age=0",
            "15": "x-transaction-id: 25da169a5178409a",
            "16": "x-response-time: 11",
            "17": "origin-cf-ray: a0aa6f774fc06312-KUL",
            "18": "strict-transport-security: max-age=631138519; includeSubdomains",
            "19": "x-served-by: t4_p",
            "20": "vary: Accept-Encoding",
            "21": "cf-cache-status: DYNAMIC",
            "22": "set-cookie: guest_id_marketing=v1%3A178128387455126871; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "23": "set-cookie: guest_id_ads=v1%3A178128387455126871; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "24": "set-cookie: personalization_id=\"v1_0KfEeK8gbtN+sWnTiEcx4w==\"; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "25": "set-cookie: guest_id=v1%3A178128387455126871; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "26": "set-cookie: __cf_bm=OsXS.64pzIJFKuXVXaAzjKGKAaibvrXdu7W7CDTZHXg-1781283874.4491396-1.0.1.1-9DPvf2LzlOc2wdLekYSHBYpmdbx496MteEK8f4IYWJKbjLj5sH7yW91_3UDQHJHKJburH247H_pgw7Df_Kx4ssSeZYr6WN8G.O0iZAI_4lAhHu93G_b4LbtFgauE6LvS; HttpOnly; Secure; Path=/; Domain=x.com; Expires=Fri, 12 Jun 2026 17:34:34 GMT",
            "27": "cf-ray: a0aa6f774fc06312-KUL"
        },
        "starttransfer_time_ms": 210.06
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----\nMIIDwzCCA0mgAwIBAgISBcQ8XddaC/qrc44DYLjb0SpGMAoGCCqGSM49BAMDMDIx\nCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQDEwJF\nNzAeFw0yNjA1MjgwNjI5NTlaFw0yNjA4MjYwNjI5NThaMBAxDjAMBgNVBAMTBXgu\nY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAECBT65HDzYEoA7EYLwBngIE/6\nQ2UlbM7GnLAX7KHdZhrariNInd8CwVWf585JWB2Owe0uJrs4efY5LT+AdctFwaOC\nAl8wggJbMA4GA1UdDwEB/wQEAwIHgDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV\nHRMBAf8EAjAAMB0GA1UdDgQWBBSPjCORvL8EpGL1BheQf3OvsBqGXzAfBgNVHSME\nGDAWgBSuSJ7chx1EoG/aouVgdAR4wpwAgDAyBggrBgEFBQcBAQQmMCQwIgYIKwYB\nBQUHMAKGFmh0dHA6Ly9lNy5pLmxlbmNyLm9yZy8wXwYDVR0RBFgwVoIMKi5saXZl\nLnguY29tgg0qLndhdGNoLnguY29tggcqLnguY29tghVjZG4uc3luZGljYXRpb24u\neC5jb22CEGNsaWNrLnNlbmQueC5jb22CBXguY29tMBMGA1UdIAQMMAowCAYGZ4EM\nAQIBMC0GA1UdHwQmMCQwIqAgoB6GHGh0dHA6Ly9lNy5jLmxlbmNyLm9yZy83MS5j\ncmwwggELBgorBgEEAdZ5AgQCBIH8BIH5APcAdQDIo8R/x7OtuTVrAT9qehJt4zpO\nQ6XGRvmXrTl1mR3PmgAAAZ5tfBdTAAAEAwBGMEQCIHW1RXCzLBC8ggXO1z6DVzGP\naQuf/ythmeM2t1J9poGiAiB8I5OD5b1utxSBW69avm166shcRDlLcJd92E34M2Vx\n7QB+AGz+UBlDqF6pFrxS0TPk3Mke8UEcfSWEINFzgJ4YGOs6AAABnm18GfkACAAA\nBQANu1aZBAMARzBFAiEA7gYXTjDN153ram5Wkbns3eaO5XfVGwq3K9Uj/RlCpgQC\nIFx+8k0+VkffKjLxEejy9dJyfUKUoc0W2rWOyyG4cdueMAoGCCqGSM49BAMDA2gA\nMGUCMDokR9h1j8vm/GljlbZAKs6JxfCXkbDnXi7Gue8hLDnA0VmHbfK5xHjzNZDa\nstsKuwIxAMUxpuIpSFD7we4oSyx7B+vJF9phxYVkObyNyvcLNAcvzQTmIOe/0C6r\nhiAuaHfDGw==\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Let's Encrypt, CN = E7",
                    "Subject": "CN = x.com",
                    "Version": "2",
                    "Signature": "30:65:02:30:3a:24:47:d8:75:8f:cb:e6:fc:69:63:95:b6:40:2a:ce:89:c5:f0:97:91:b0:e7:5e:2e:c6:b9:ef:21:2c:39:c0:d1:59:87:6d:f2:b9:c4:78:f3:35:90:da:b2:db:0a:bb:02:31:00:c5:31:a6:e2:29:48:50:fb:c1:ee:28:4b:2c:7b:07:eb:c9:17:da:61:c5:85:64:39:bc:8d:ca:f7:0b:34:07:2f:cd:04:e6:20:e7:bf:d0:2e:ab:86:20:2e:68:77:c3:1b:",
                    "Start date": "May 28 06:29:59 2026 GMT",
                    "Expire date": "Aug 26 06:29:58 2026 GMT",
                    "Serial Number": "05c43c5dd75a0bfaab738e0360b8dbd12a46",
                    "X509v3 Key Usage": "Digital Signature",
                    "Signature Algorithm": "ecdsa-with-SHA384",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : C8:A3:C4:7F:C7:B3:AD:B9:35:6B:01:3F:6A:7A:12:6D:\n                E3:3A:4E:43:A5:C6:46:F9:97:AD:39:75:99:1D:CF:9A\n    Timestamp : May 28 07:28:29.523 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:75:B5:45:70:B3:2C:10:BC:82:05:CE:D7:\n                3E:83:57:31:8F:69:0B:9F:FF:2B:61:99:E3:36:B7:52:\n                7D:A6:81:A2:02:20:7C:23:93:83:E5:BD:6E:B7:14:81:\n                5B:AF:5A:BE:6D:7A:EA:C8:5C:44:39:4B:70:97:7D:D8:\n                4D:F8:33:65:71:ED\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 6C:FE:50:19:43:A8:5E:A9:16:BC:52:D1:33:E4:DC:C9:\n                1E:F1:41:1C:7D:25:84:20:D1:73:80:9E:18:18:EB:3A\n    Timestamp : May 28 07:28:30.201 2026 GMT\n    Extensions: 00:00:05:00:0D:BB:56:99\n    Signature : ecdsa-with-SHA256\n                30:45:02:21:00:EE:06:17:4E:30:CD:D7:9D:EB:6A:6E:\n                56:91:B9:EC:DD:E6:8E:E5:77:D5:1B:0A:B7:2B:D5:23:\n                FD:19:42:A6:04:02:20:5C:7E:F2:4D:3E:56:47:DF:2A:\n                32:F1:11:E8:F2:F5:D2:72:7D:42:94:A1:CD:16:DA:B5:\n                8E:CB:21:B8:71:DB:9E",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://e7.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "8F:8C:23:91:BC:BF:04:A4:62:F5:06:17:90:7F:73:AF:B0:1A:86:5F",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://e7.c.lencr.org/71.crl",
                    "X509v3 Authority Key Identifier": "AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80",
                    "X509v3 Subject Alternative Name": "DNS:*.live.x.com, DNS:*.watch.x.com, DNS:*.x.com, DNS:cdn.syndication.x.com, DNS:click.send.x.com, DNS:x.com"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n+VUwFj9tmWxyR/M=\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Internet Security Research Group, CN = ISRG Root X1",
                    "Subject": "C = US, O = Let's Encrypt, CN = E7",
                    "Version": "2",
                    "Signature": "8f:1e:ba:7c:37:4b:93:9c:b0:16:7d:c2:cc:0d:70:d6:a7:f2:94:75:03:68:47:f4:41:9a:57:70:9b:1e:75:d2:46:49:f6:d4:50:eb:db:35:1f:4d:fd:04:35:e8:ad:65:5e:5e:15:17:28:66:19:70:d3:e4:a7:5f:72:bd:11:bc:82:15:ac:dc:45:87:89:6a:1e:d4:51:08:fe:91:05:1b:2d:a9:b6:76:cd:44:60:a9:a9:27:fd:78:a9:d2:26:90:2f:42:1d:7c:70:59:af:7f:7a:16:09:27:9e:24:58:15:c9:0a:39:13:c6:c8:cd:d0:2a:77:7a:ea:0b:4c:b2:df:08:e6:79:11:42:50:20:fc:96:fe:19:cd:de:80:8b:ee:18:a5:9b:a0:4d:46:f3:d3:53:b0:df:4b:4c:30:f7:3c:b8:f4:75:43:2b:38:8b:aa:56:32:c1:f2:91:02:eb:29:3d:7a:7a:e5:ae:a8:d7:42:09:0b:11:88:57:ce:ae:dd:2d:a7:ef:e5:59:22:83:a1:a5:d2:7b:ae:aa:3a:9f:a7:44:35:6e:2d:68:c9:53:40:95:77:ba:69:45:f0:f7:60:9c:82:10:bd:6c:db:0a:10:ed:7e:33:9d:98:63:9f:a8:7c:85:e5:4b:f4:84:41:bb:d5:61:80:4b:67:9c:9e:8a:09:55:ea:dd:d2:33:a1:fe:bd:31:b4:68:ff:58:1f:32:e7:fc:a5:4e:1f:31:90:7d:70:cf:ee:a3:39:b6:47:fe:ed:d8:99:7b:ba:36:7f:0e:8e:ec:8b:cd:e9:fb:10:5c:44:10:8f:c4:c9:51:72:71:bf:6f:ee:26:17:2e:cb:fb:52:0e:05:f0:1c:cf:14:93:7e:16:35:b4:53:ef:31:93:1a:44:11:5f:48:2c:6e:30:1e:6b:f8:d8:02:85:af:d1:9b:d0:47:0a:6a:3d:ee:fd:0f:f8:bb:09:ea:7c:a9:69:c0:fb:b0:04:ff:70:77:4b:fd:dd:10:46:26:73:49:69:7b:5d:fa:e8:0f:fa:18:48:24:de:4b:6b:f4:f1:28:42:b2:c2:86:ce:88:b6:ed:f0:9c:d2:c1:d9:eb:82:f0:82:86:2d:01:69:1a:d3:8e:ff:6f:e1:88:02:a3:c9:a8:da:04:fd:b9:c3:58:c5:d1:69:7c:05:ba:a7:7b:7b:99:da:ad:46:c8:f1:49:61:19:93:ef:f3:97:a6:63:87:fc:55:4b:b7:04:be:f2:78:35:70:09:a9:0a:e8:cf:c2:d7:89:64:d7:03:1b:4b:05:da:7f:ec:73:4f:92:41:fe:3d:7d:dc:94:2b:4b:72:f9:55:30:16:3f:6d:99:6c:72:47:f3:",
                    "Start date": "Mar 13 00:00:00 2024 GMT",
                    "Expire date": "Mar 12 23:59:59 2027 GMT",
                    "Serial Number": "aa75f1e62b8f0a220966d38bbfd4baa1",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Client Authentication, TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://x1.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://x1.c.lencr.org/",
                    "X509v3 Authority Key Identifier": "79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E"
                }
            ]
        },
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "162.159.140.229",
        "total_time_ms": 188.55,
        "connect_time_ms": 0.86,
        "response_headers": [
            "HTTP/2 403",
            "date: Fri, 12 Jun 2026 17:04:34 GMT",
            "perf: 7402827104",
            "server: cloudflare envoy",
            "x-powered-by: Express",
            "cache-control: no-cache, no-store, max-age=0",
            "x-transaction-id: 5f2b0b10d2fe6ee2",
            "x-response-time: 8",
            "origin-cf-ray: a0aa6f789e85e454-KUL",
            "strict-transport-security: max-age=631138519; includeSubdomains",
            "x-served-by: t4_p",
            "vary: Accept-Encoding",
            "cf-cache-status: DYNAMIC",
            "set-cookie: guest_id_marketing=v1%3A178128387474768566; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: guest_id_ads=v1%3A178128387474768566; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: personalization_id=\"v1_Ndf/ZtJyEpeNMuoTHIAOIQ==\"; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: guest_id=v1%3A178128387474768566; Max-Age=63072000; Expires=Sun, 11 Jun 2028 17:04:34 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: __cf_bm=8OFZVJCxV0s9VhPiVq9zxeyDDIw4Hq594QvQAx6fxeA-1781283874.650992-1.0.1.1-W_jQzEdBVWIjugv_LSaLoK31Gb79tPJtanvbZVCK1UFnWoM4XH_UvnsZ2mFK_7h5ALW4D529e_5DSDjuTHkXO_ByPJ.6af6pvMTwP5FNW1dpm9lIzmjKv5tCD5Dd4sF0; HttpOnly; Secure; Path=/; Domain=x.com; Expires=Fri, 12 Jun 2026 17:34:34 GMT",
            "cf-ray: a0aa6f789e85e454-KUL"
        ],
        "starttransfer_time_ms": 188.5
    }
}

{
    "tcp_connect_v4_80": "301 0.001409 0.007201",
    "tcp_connect_v4_443": "200 0.001130 0.219634"
}