Audit Trail

{
    "os": "Linux srv1440888 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb  9 10:15:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.30",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

{
    "v4_http": {
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "104.247.81.99",
        "total_time_ms": 677.05,
        "connect_time_ms": 225.97,
        "response_headers": [
            "HTTP/1.1 403 Forbidden",
            "Server: nginx",
            "Date: Fri, 06 Mar 2026 09:16:57 GMT",
            "Content-Type: text/html",
            "Content-Length: 146",
            "Connection: keep-alive"
        ],
        "starttransfer_time_ms": 676.99
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Let's Encrypt, CN = E7",
                    "Subject": "CN = dimsum.my",
                    "Version": "2",
                    "Signature": "30:65:02:30:35:b5:1e:52:00:04:56:f4:01:9b:c5:d4:5f:0b:59:69:6c:ef:39:40:45:d8:78:9c:1b:0f:72:a6:60:d8:38:de:bf:eb:59:2b:56:24:b7:72:a4:ac:c0:e1:dc:56:81:07:02:31:00:82:30:4a:67:df:ba:db:d9:d2:cc:81:ed:4e:59:47:50:1d:be:e8:ce:6f:31:dd:4c:7e:75:7c:7c:4b:31:3d:a7:d7:c7:9c:03:f8:90:3d:bf:a1:c6:ee:0f:58:b5:cd:3e:",
                    "Start date": "Mar  3 17:33:54 2026 GMT",
                    "Expire date": "Jun  1 17:33:53 2026 GMT",
                    "Serial Number": "0673d82414a40f08de5cb70571bebd0b7e33",
                    "X509v3 Key Usage": "Digital Signature",
                    "Signature Algorithm": "ecdsa-with-SHA384",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:\n                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7\n    Timestamp : Mar  3 18:32:25.029 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:61:A0:37:89:0C:9D:6B:DD:03:5E:E6:E7:\n                38:8B:7F:B3:0B:D9:98:73:63:96:14:6C:3F:77:BE:7A:\n                F5:FC:8E:5D:02:20:08:4C:A1:8F:F4:FC:E6:78:0B:C1:\n                E0:80:97:18:88:E3:B0:0B:3D:4A:97:2F:64:F9:B8:F6:\n                5A:14:AB:F8:48:30\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 71:7E:95:F3:C2:38:8A:6D:B1:E3:84:49:3D:31:E1:5A:\n                A9:62:08:76:2D:42:00:E0:05:0C:D0:67:B5:A6:61:E2\n    Timestamp : Mar  3 18:32:25.208 2026 GMT\n    Extensions: 00:00:05:00:0A:CE:32:A2\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:B1:DF:1E:A9:CD:44:81:53:B1:A1:5E:\n                98:04:75:E9:1F:BE:1C:FA:48:43:58:B2:AB:DA:9C:3C:\n                59:66:D0:76:09:02:21:00:B1:32:9F:16:2D:3D:A0:45:\n                55:83:D6:51:96:E8:F1:EB:60:30:F1:1F:8B:36:9B:9D:\n                61:BB:AB:DA:B9:49:04:63",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://e7.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "0F:C8:00:47:FC:4F:E9:38:B0:F7:AA:A7:07:E2:1F:58:A6:45:83:81",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://e7.c.lencr.org/52.crl",
                    "X509v3 Authority Key Identifier": "AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80",
                    "X509v3 Subject Alternative Name": "DNS:*.dimsum.my, DNS:dimsum.my"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----\nMIIEVzCCAj+gAwIBAgIRAKp18eYrjwoiCWbTi7/UuqEwDQYJKoZIhvcNAQELBQAw\nTzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh\ncmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjQwMzEzMDAwMDAw\nWhcNMjcwMzEyMjM1OTU5WjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg\nRW5jcnlwdDELMAkGA1UEAxMCRTcwdjAQBgcqhkjOPQIBBgUrgQQAIgNiAARB6AST\nCFh/vjcwDMCgQer+VtqEkz7JANurZxLP+U9TCeioL6sp5Z8VRvRbYk4P1INBmbef\nQHJFHCxcSjKmwtvGBWpl/9ra8HW0QDsUaJW2qOJqceJ0ZVFT3hbUHifBM/2jgfgw\ngfUwDgYDVR0PAQH/BAQDAgGGMB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcD\nATASBgNVHRMBAf8ECDAGAQH/AgEAMB0GA1UdDgQWBBSuSJ7chx1EoG/aouVgdAR4\nwpwAgDAfBgNVHSMEGDAWgBR5tFnme7bl5AFzgAiIyBpY9umbbjAyBggrBgEFBQcB\nAQQmMCQwIgYIKwYBBQUHMAKGFmh0dHA6Ly94MS5pLmxlbmNyLm9yZy8wEwYDVR0g\nBAwwCjAIBgZngQwBAgEwJwYDVR0fBCAwHjAcoBqgGIYWaHR0cDovL3gxLmMubGVu\nY3Iub3JnLzANBgkqhkiG9w0BAQsFAAOCAgEAjx66fDdLk5ywFn3CzA1w1qfylHUD\naEf0QZpXcJseddJGSfbUUOvbNR9N/QQ16K1lXl4VFyhmGXDT5Kdfcr0RvIIVrNxF\nh4lqHtRRCP6RBRstqbZ2zURgqakn/Xip0iaQL0IdfHBZr396FgknniRYFckKORPG\nyM3QKnd66gtMst8I5nkRQlAg/Jb+Gc3egIvuGKWboE1G89NTsN9LTDD3PLj0dUMr\nOIuqVjLB8pEC6yk9enrlrqjXQgkLEYhXzq7dLafv5Vkig6Gl0nuuqjqfp0Q1bi1o\nyVNAlXe6aUXw92CcghC9bNsKEO1+M52YY5+ofIXlS/SEQbvVYYBLZ5yeiglV6t3S\nM6H+vTG0aP9YHzLn/KVOHzGQfXDP7qM5tkf+7diZe7o2fw6O7IvN6fsQXEQQj8TJ\nUXJxv2/uJhcuy/tSDgXwHM8Uk34WNbRT7zGTGkQRX0gsbjAea/jYAoWv0ZvQRwpq\nPe79D/i7Cep8qWnA+7AE/3B3S/3dEEYmc0lpe1366A/6GEgk3ktr9PEoQrLChs6I\ntu3wnNLB2euC8IKGLQFpGtOO/2/hiAKjyajaBP25w1jF0Wl8Bbqne3uZ2q1GyPFJ\nYRmT7/OXpmOH/FVLtwS+8ng1cAmpCujPwteJZNcDG0sF2n/sc0+SQf49fdyUK0ty\n+VUwFj9tmWxyR/M=\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Internet Security Research Group, CN = ISRG Root X1",
                    "Subject": "C = US, O = Let's Encrypt, CN = E7",
                    "Version": "2",
                    "Signature": "8f:1e:ba:7c:37:4b:93:9c:b0:16:7d:c2:cc:0d:70:d6:a7:f2:94:75:03:68:47:f4:41:9a:57:70:9b:1e:75:d2:46:49:f6:d4:50:eb:db:35:1f:4d:fd:04:35:e8:ad:65:5e:5e:15:17:28:66:19:70:d3:e4:a7:5f:72:bd:11:bc:82:15:ac:dc:45:87:89:6a:1e:d4:51:08:fe:91:05:1b:2d:a9:b6:76:cd:44:60:a9:a9:27:fd:78:a9:d2:26:90:2f:42:1d:7c:70:59:af:7f:7a:16:09:27:9e:24:58:15:c9:0a:39:13:c6:c8:cd:d0:2a:77:7a:ea:0b:4c:b2:df:08:e6:79:11:42:50:20:fc:96:fe:19:cd:de:80:8b:ee:18:a5:9b:a0:4d:46:f3:d3:53:b0:df:4b:4c:30:f7:3c:b8:f4:75:43:2b:38:8b:aa:56:32:c1:f2:91:02:eb:29:3d:7a:7a:e5:ae:a8:d7:42:09:0b:11:88:57:ce:ae:dd:2d:a7:ef:e5:59:22:83:a1:a5:d2:7b:ae:aa:3a:9f:a7:44:35:6e:2d:68:c9:53:40:95:77:ba:69:45:f0:f7:60:9c:82:10:bd:6c:db:0a:10:ed:7e:33:9d:98:63:9f:a8:7c:85:e5:4b:f4:84:41:bb:d5:61:80:4b:67:9c:9e:8a:09:55:ea:dd:d2:33:a1:fe:bd:31:b4:68:ff:58:1f:32:e7:fc:a5:4e:1f:31:90:7d:70:cf:ee:a3:39:b6:47:fe:ed:d8:99:7b:ba:36:7f:0e:8e:ec:8b:cd:e9:fb:10:5c:44:10:8f:c4:c9:51:72:71:bf:6f:ee:26:17:2e:cb:fb:52:0e:05:f0:1c:cf:14:93:7e:16:35:b4:53:ef:31:93:1a:44:11:5f:48:2c:6e:30:1e:6b:f8:d8:02:85:af:d1:9b:d0:47:0a:6a:3d:ee:fd:0f:f8:bb:09:ea:7c:a9:69:c0:fb:b0:04:ff:70:77:4b:fd:dd:10:46:26:73:49:69:7b:5d:fa:e8:0f:fa:18:48:24:de:4b:6b:f4:f1:28:42:b2:c2:86:ce:88:b6:ed:f0:9c:d2:c1:d9:eb:82:f0:82:86:2d:01:69:1a:d3:8e:ff:6f:e1:88:02:a3:c9:a8:da:04:fd:b9:c3:58:c5:d1:69:7c:05:ba:a7:7b:7b:99:da:ad:46:c8:f1:49:61:19:93:ef:f3:97:a6:63:87:fc:55:4b:b7:04:be:f2:78:35:70:09:a9:0a:e8:cf:c2:d7:89:64:d7:03:1b:4b:05:da:7f:ec:73:4f:92:41:fe:3d:7d:dc:94:2b:4b:72:f9:55:30:16:3f:6d:99:6c:72:47:f3:",
                    "Start date": "Mar 13 00:00:00 2024 GMT",
                    "Expire date": "Mar 12 23:59:59 2027 GMT",
                    "Serial Number": "aa75f1e62b8f0a220966d38bbfd4baa1",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Client Authentication, TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://x1.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://x1.c.lencr.org/",
                    "X509v3 Authority Key Identifier": "79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E"
                }
            ]
        },
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "104.247.81.99",
        "total_time_ms": 906.86,
        "connect_time_ms": 225.7,
        "response_headers": [
            "HTTP/2 403",
            "alt-svc: h3=\":8443\"; ma=2592000",
            "server: Caddy",
            "date: Fri, 06 Mar 2026 09:16:59 GMT"
        ],
        "starttransfer_time_ms": 906.82
    }
}

{
    "tcp_connect_v4_80": "403 0.226834 0.680246",
    "tcp_connect_v4_443": "410 0.226200 0.908112"
}