Audit Trail

Evidence record for domain check

Integrity Verified

Verification ID

6fad9223-dc26-4804-bd68-18e811a2950e

Domain

kln.gov.my

Mode

manual

Started

2026-03-07 01:03:40 +08

Finished

2026-03-07 01:04:08 +08

Status

completed

Test Node Profile

dual stack

Engine Version

2.0.0

MGv6C Version

1.0.0

Test Node Identity

{
    "os": "Linux srv1440888 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb  9 10:15:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.30",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

Node Network Evidence

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26890
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; AUTHORITY SECTION:
kln.gov.my.		1800	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026030229 10800 3600 172800 38400

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16568
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
kln.gov.my.		21600	IN	DS	33046 8 1 2A8BC4BA8ECDB2CD42030A71B9C00664FAEF3E41
kln.gov.my.		21600	IN	DS	33046 8 2 1692A73EAA4C22EA9048F5FDB85872E6407A7148034D311289C8B491 52ED4AF4

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54942
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
kln.gov.my.		300	IN	MX	10 alt3.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	5 alt1.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	1 aspmx.l.google.com.
kln.gov.my.		300	IN	MX	10 alt4.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	5 alt2.aspmx.l.google.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62444
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
kln.gov.my.		3600	IN	NS	dns1.gitn.net.my.
kln.gov.my.		3600	IN	NS	dns2.gitn.net.my.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63649
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
kln.gov.my.		3600	IN	TXT	"MS=E0F8E18400A7C13FE9E8FB3E68D209B229903979"
kln.gov.my.		3600	IN	TXT	"google-site-verification=PGDEH3aqogsJUvwUW6mtsNFR_X3PCItrPjF4nKgunRE"
kln.gov.my.		3600	IN	TXT	"v=spf1 ip4:103.245.89.99 ip4:103.245.89.108 ip4:103.8.147.12/30 ip4:219.92.54.177/32 ip4:103.156.82.32/29 ip4:103.156.83.32/29 include:_spf.google.com ~all"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26742
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; AUTHORITY SECTION:
kln.gov.my.		1800	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026030229 10800 3600 172800 38400

RRSIG

dns1.gitn.net.my. root.dns1.gitn.net.my. 2026030229 10800 3600 172800 38400
SOA 8 3 3600 20260405081016 20260306071016 35589 kln.gov.my. jNqT12HSlnrmwxY+S5F5Km2/paodTl9bXUtWKTmoWOmkQTchrXGsUqOF tM2mNMg5HOLwMqH6s13EXHghYTYsZ62gc8FcRdJ4oyLeLJF55YfleNdQ ZFzAhXYypHTaEV7W09X7ArQoThIQa2xA5wnA1K3ouysDXJWNr2XcoEBJ cE8=

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 26965
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 512
;; ANSWER SECTION:
kln.gov.my.		2512	IN	DNSKEY	257 3 8 AwEAAdHDEQkUL2nwyJfCeqiNnjXuMENO8Wyu13NOkSoBTkUthgOYwF/E wUzT6ILy9lLP5Z0Gn5vVqFtPIhAHc7OE7RMjEO+4BW0u8FKsLt30Mgyc OPfPRI4MrfjyGPJ7xm5RhIZulPWCqn01uAAxWjQq9aINi02zWxk+13l9 gH3wsoEJOsV+nWuH6yMX670sQ0Q6V3ifOSaDMdnAsrR/7SP1yUeYpBiB 9/d2AMzQg/KiZc+bQl2x43BYjSylUgJ39blmO3nlalf0hoPs6+qxrB5b 7xL0Rj69y7gAKeiDyaGyms0Z8uiD0T3yGsxpAynM/cCNoLf4fe8dIX9t JxCGiHnnc38=
kln.gov.my.		2512	IN	DNSKEY	256 3 8 AwEAAZ2+A6SU22JCVL2Q3MhVyvp/ofA/cZyaSUrnreqcqCBT7zPWRfgu N4UR77PCuYRNdb1/OhzrYOl7wFg3udq07mD9kwY/eVbHZpZPcULDmZgb 7I/peSKm/sz7qIXWLc+c0qd5PYfa0ziNyW4Weajofp5HoByHLTZMI5qR 28MTep7p

DNSSEC_VALIDATION

; fully validated
kln.gov.my.		3600	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026030229 10800 3600 172800 38400
kln.gov.my.		3600	IN	RRSIG	SOA 8 3 3600 20260405081016 20260306071016 35589 kln.gov.my. jNqT12HSlnrmwxY+S5F5Km2/paodTl9bXUtWKTmoWOmkQTchrXGsUqOF tM2mNMg5HOLwMqH6s13EXHghYTYsZ62gc8FcRdJ4oyLeLJF55YfleNdQ ZFzAhXYypHTaEV7W09X7ArQoThIQa2xA5wnA1K3ouysDXJWNr2XcoEBJ cE8=

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver	Transport	A (IPv4)	AAAA (IPv6)	Delta
System	Default	17.01 ms (p95: 18.94)	17.99 ms (p95: 18.03)	+1 ms
Google	IPv4	24.95 ms (p95: 32.17)	28.78 ms (p95: 42.2)	+3.8 ms
Google	IPv6	30.8 ms (p95: 37.17)	34.1 ms (p95: 46.92)	+3.3 ms
Cloudflare	IPv4	19.97 ms (p95: 25.05)	9.9 ms (p95: 9.96)	-10.1 ms
Cloudflare	IPv6	42.67 ms (p95: 45.63)	20.78 ms (p95: 62.62)	-21.9 ms

TLS Handshake Details

{
    "ipv4": {
        "ip_used": "163.53.153.22",
        "ip_version": 4,
        "raw_handshake": "40C7E4CDA57C0000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:316:\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 0 bytes and written 319 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
    }
}

HTTP Response Headers

{
    "v4_http": {
        "http_code": 0,
        "curl_error": "Empty reply from server",
        "primary_ip": "163.53.153.22",
        "total_time_ms": 13.78,
        "connect_time_ms": 6.29,
        "response_headers": [],
        "starttransfer_time_ms": 13.77
    },
    "v4_https": {
        "http_code": 0,
        "curl_error": "OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to kln.gov.my:443 ",
        "primary_ip": "163.53.153.22",
        "total_time_ms": 12.33,
        "connect_time_ms": 5.77,
        "response_headers": [],
        "starttransfer_time_ms": 0
    }
}

Connectivity Test Output

{
    "tcp_connect_v4_80": "000 0.006009 0.011939",
    "tcp_connect_v4_443": "000 0.021219 0.000000"
}

Integrity Details

Algorithm: hmac-sha256-v1

Root Hash: 99fe83975ded645812431a03f1bcb70f5a6dc7d53d8d920e73a0f809a0ece018

http_headers: e1a35d435561dbd4ade169019a335139adec8b4f1019570404b1e2ae978e208f

dns_responses: 00299d56f5e644e9a4fc8d0cfc4a17a20d34215400a9b368c521997fd7f84028

tls_handshake: fa06807e736a9d4e80cb257e1fba21740b1bc54ebdb516edb4ecb4c8ef489261

connectivity_log: a068e04a37d0a9750deb4e05eb8f043112470152c8dd8b289a11870b3adad62c

dns_resolution_times: 24572dc2d4fbd54de8158fca79802b0e1516b49cac8db13c0d179408c2ec579a