Audit Trail

{
    "os": "Linux srv1440888 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb  9 10:15:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.30",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

{
    "v4_http": {
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "104.21.9.104",
        "total_time_ms": 369.24,
        "connect_time_ms": 169.17,
        "response_headers": {
            "0": "HTTP/1.1 301 Moved Permanently",
            "1": "Date: Fri, 06 Mar 2026 09:17:38 GMT",
            "2": "Location: https://thesun.my/",
            "3": "Cache-Control: max-age=60",
            "4": "Expires: Tue, 20 Jan 2026 01:51:14 GMT",
            "5": "Content-Type: text/plain",
            "7": "HTTP/2 200",
            "8": "date: Fri, 06 Mar 2026 09:17:38 GMT",
            "9": "content-type: text/html; charset=UTF-8",
            "10": "x-dns-prefetch-control: on",
            "11": "link: <https://thesun.my/wp-json/>; rel=\"https://api.w.org/\"",
            "12": "link: <https://thesun.my/wp-json/wp/v2/pages/229296>; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"",
            "13": "link: <https://thesun.my/>; rel=shortlink",
            "14": "cache-control: public, max-age=2592000",
            "15": "expires: Sun, 05 Apr 2026 09:14:20 GMT",
            "16": "x-xss-protection: 1; mode=block",
            "17": "x-litespeed-cache: hit",
            "18": "server: cloudflare",
            "19": "vary: User-Agent",
            "20": "x-content-type-options: nosniff",
            "21": "x-frame-options: SAMEORIGIN",
            "22": "access-control-allow-origin: *",
            "23": "x-turbo-charged-by: LiteSpeed",
            "24": "cf-cache-status: DYNAMIC",
            "25": "report-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aILxnto9dC4RBYnhakMV2%2FB9iMkpWF0u09%2BvQCqmLDfmbCDim5rKrmrW%2BFMB%2BW5ww6QlXfb9Qp1kJ16srXNKDhYjCnbozqxBLA%3D%3D\"}]}",
            "26": "nel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
            "27": "expect-ct: max-age=86400, enforce",
            "28": "referrer-policy: strict-origin-when-cross-origin",
            "29": "cf-ray: 9d8044baa8f6ff85-SIN",
            "30": "alt-svc: h3=\":443\"; ma=86400"
        },
        "starttransfer_time_ms": 369.13
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\naTUp8LdppYxw+FDwlKKwlpf//g==\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Google Trust Services, CN = WE1",
                    "Subject": "CN = thesun.my",
                    "Version": "2",
                    "Signature": "30:46:02:21:00:f2:c9:b0:57:ac:d6:c1:46:94:53:ed:81:8e:95:b7:bd:aa:c0:c9:5a:58:86:0a:91:6a:b4:8e:26:57:23:6d:76:02:21:00:8e:c9:b2:e3:3e:33:9f:1a:ea:4f:c2:52:25:69:35:29:f0:b7:69:a5:8c:70:f8:50:f0:94:a2:b0:96:97:ff:fe:",
                    "Start date": "Jan 18 16:29:47 2026 GMT",
                    "Expire date": "Apr 18 17:28:23 2026 GMT",
                    "Serial Number": "9fcb222c495003d90e4e667a6f274b55",
                    "X509v3 Key Usage": "Digital Signature",
                    "Signature Algorithm": "ecdsa-with-SHA256",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:\n                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21\n    Timestamp : Jan 18 17:29:47.460 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:57:5F:15:1A:A0:6C:E2:80:A2:FF:97:A0:\n                7F:3C:28:22:43:BA:E0:97:BC:45:12:A2:D5:CD:4C:DF:\n                3F:16:7F:A0:02:21:00:88:DD:43:45:88:50:CF:1F:A9:\n                19:E6:45:17:D7:28:DC:09:80:F2:5C:6A:8C:63:71:38:\n                7D:29:54:87:D7:13:68\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 16:83:2D:AB:F0:A9:25:0F:0F:F0:3A:A5:45:FF:C8:BF:\n                C8:23:D0:87:4B:F6:04:29:27:F8:E7:1F:33:13:F5:FA\n    Timestamp : Jan 18 17:29:47.447 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:44:02:20:76:50:B7:F8:60:5F:05:23:A5:48:1E:FD:\n                1C:8A:2D:55:65:70:2C:49:94:A1:99:16:98:24:D6:C0:\n                64:24:50:01:02:20:49:F1:62:72:AD:DC:A7:75:A1:EF:\n                86:93:B6:01:00:68:D7:B8:B9:28:A6:30:25:91:84:9E:\n                41:2E:22:6F:74:19",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "OCSP - URI:http://o.pki.goog/s/we1/n8s\nCA Issuers - URI:http://i.pki.goog/we1.crt",
                    "X509v3 Subject Key Identifier": "03:D4:C7:92:C9:1A:C3:08:76:D8:7A:FD:F0:82:7F:68:26:B3:B6:D9",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://c.pki.goog/we1/p3h7Ul8wx3k.crl",
                    "X509v3 Authority Key Identifier": "90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38",
                    "X509v3 Subject Alternative Name": "DNS:thesun.my, DNS:*.thesun.my"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n7uJW\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Google Trust Services LLC, CN = GTS Root R4",
                    "Subject": "C = US, O = Google Trust Services, CN = WE1",
                    "Version": "2",
                    "Signature": "30:65:02:31:00:e7:02:ab:51:d6:f7:43:95:ce:75:fe:d1:11:94:d5:cc:40:41:7a:26:be:d8:0c:f3:32:2d:3d:90:ae:15:0f:23:48:12:52:8f:3e:64:79:13:af:f5:a6:2c:02:6e:55:b1:02:30:26:89:cc:68:01:62:e7:89:ab:7e:17:e8:14:d6:44:7e:e3:4c:49:0e:bf:6c:80:62:34:b8:b2:a1:7e:3a:16:88:50:bc:a7:88:a0:9f:7d:73:1e:ec:52:41:4d:ee:e2:56:",
                    "Start date": "Dec 13 09:00:00 2023 GMT",
                    "Expire date": "Feb 20 14:00:00 2029 GMT",
                    "Serial Number": "7ff31977972c224a76155d13b6d685e3",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "ecdsa-with-SHA384",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://i.pki.goog/r4.crt",
                    "X509v3 Subject Key Identifier": "90:77:92:35:67:C4:FF:A8:CC:A9:E6:7B:D9:80:79:7B:CC:93:F9:38",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://c.pki.goog/r/r4.crl",
                    "X509v3 Authority Key Identifier": "80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\nvepuoxtGzi4CZ68zJpiq1UvSqTbFJjtbD4seiMHl\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = BE, O = GlobalSign nv-sa, OU = Root CA, CN = GlobalSign Root CA",
                    "Subject": "C = US, O = Google Trust Services LLC, CN = GTS Root R4",
                    "Version": "2",
                    "Signature": "18:42:bb:0f:06:d6:03:87:96:e3:3f:63:81:0f:09:a4:a1:68:48:0c:39:22:73:9e:f8:cb:4e:2d:7f:31:e9:9f:e7:09:a1:d2:36:0f:84:ac:79:eb:10:e9:b0:eb:6a:b6:7b:0b:7d:1d:74:b8:9b:65:ab:68:2a:2c:2c:dd:42:fd:c6:71:0b:cf:87:2d:f7:6b:c8:0f:6e:05:7d:56:e2:23:58:58:f9:25:ba:16:85:47:90:d7:96:20:fd:06:09:b6:8c:e0:2e:ae:55:d1:79:75:35:2c:31:5b:3f:65:bc:cd:9c:87:42:a7:91:b1:9b:1e:5e:8e:f1:1a:bb:ca:2d:47:f0:ac:90:63:7e:86:bf:d6:e4:6b:d3:d6:d3:01:8e:05:8a:67:58:b8:ff:f7:a6:84:0d:49:1b:50:5b:3f:3a:0b:25:0b:f2:12:8b:5c:d3:79:57:8d:36:82:ce:ff:26:11:b7:a9:f1:1a:99:ed:ad:82:3e:c8:11:6e:eb:d3:3c:1c:1c:38:c0:41:9a:e1:5e:53:cf:3e:15:20:57:eb:ee:e2:3f:48:a5:f1:be:19:d1:01:6a:23:0c:0c:1d:fb:3f:2f:a2:b5:bd:ea:6e:a3:1b:46:ce:2e:02:67:af:33:26:98:aa:d5:4b:d2:a9:36:c5:26:3b:5b:0f:8b:1e:88:c1:e5:",
                    "Start date": "Nov 15 03:43:21 2023 GMT",
                    "Expire date": "Jan 28 00:00:42 2028 GMT",
                    "Serial Number": "7fe530bf331343bedd821610493d8a1b",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "X509v3 Basic Constraints": "CA:TRUE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://i.pki.goog/gsr1.crt",
                    "X509v3 Subject Key Identifier": "80:4C:D6:EB:74:FF:49:36:A3:D5:D8:FC:B5:3E:C5:6A:F0:94:1D:8C",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://c.pki.goog/r/gsr1.crl",
                    "X509v3 Authority Key Identifier": "60:7B:66:1A:45:0D:97:CA:89:50:2F:7D:04:CD:34:A8:FF:FC:FD:4B"
                }
            ]
        },
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "172.67.159.189",
        "total_time_ms": 701.71,
        "connect_time_ms": 171.34,
        "response_headers": {
            "0": "HTTP/2 301",
            "1": "server: nginx/1.14.0",
            "2": "date: Fri, 06 Mar 2026 09:17:39 GMT",
            "3": "content-type: text/plain",
            "4": "location: https://thesun.my/",
            "5": "cache-control: max-age=60",
            "6": "expires: Tue, 20 Jan 2026 01:51:14 GMT",
            "8": "HTTP/2 200",
            "9": "date: Fri, 06 Mar 2026 09:17:39 GMT",
            "10": "content-type: text/html; charset=UTF-8",
            "11": "x-dns-prefetch-control: on",
            "12": "link: <https://thesun.my/wp-json/>; rel=\"https://api.w.org/\"",
            "13": "link: <https://thesun.my/wp-json/wp/v2/pages/229296>; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\"",
            "14": "link: <https://thesun.my/>; rel=shortlink",
            "15": "cache-control: public, max-age=2592000",
            "16": "expires: Sun, 05 Apr 2026 09:14:20 GMT",
            "17": "x-xss-protection: 1; mode=block",
            "18": "x-litespeed-cache: hit",
            "19": "server: cloudflare",
            "20": "vary: User-Agent",
            "21": "x-content-type-options: nosniff",
            "22": "x-frame-options: SAMEORIGIN",
            "23": "access-control-allow-origin: *",
            "24": "x-turbo-charged-by: LiteSpeed",
            "25": "cf-cache-status: DYNAMIC",
            "26": "report-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9LbEjQVsZcXYl8aL%2F%2FSxCWIlliHgo%2FrxNexWkp6XYaTQEtDzSiDVSky8UP6Y4gyLcPyx3Bbxb9wBMy2wcdSkixcyV%2Bi6DC3lBw%3D%3D\"}]}",
            "27": "nel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}",
            "28": "expect-ct: max-age=86400, enforce",
            "29": "referrer-policy: strict-origin-when-cross-origin",
            "30": "cf-ray: 9d8044c35f05cdd5-SIN",
            "31": "alt-svc: h3=\":443\"; ma=86400"
        },
        "starttransfer_time_ms": 701.59
    }
}

{
    "tcp_connect_v4_80": "301 0.161610 0.323513",
    "tcp_connect_v4_443": "000 0.160126 0.000000"
}