Audit Trail

Evidence record for domain check

Integrity Verified
Verification ID
b1c99110-e990-4a4f-a1d3-0a5dac908d47
Domain
ccb.com
Mode
scheduled
Started
2026-06-13 01:07:11 +08
Finished
2026-06-13 01:08:23 +08
Status
completed
Test Node Profile
dual stack
Engine Version
2.0.0
MGv6C Version
1.0.0
Test Node Identity
{
    "os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.31",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}
Node Network Evidence
{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}
DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56099
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
ccb.com.		300	IN	A	106.37.193.78

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16039
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
com.			873	IN	SOA	a.gtld-servers.net. nstld.verisign-grs.com. 1781284038 1800 900 604800 900

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19909
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
ccb.com.		300	IN	MX	5 mail-in2.ccb.com.
ccb.com.		300	IN	MX	5 mail-in4.ccb.com.
ccb.com.		300	IN	MX	5 mail-in1.ccb.com.
ccb.com.		300	IN	MX	5 mail-in3.ccb.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61518
;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 19

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
ccb.com.		699	IN	NS	ns1.ccb.com.
ccb.com.		699	IN	NS	ns4.ccb.com.
ccb.com.		699	IN	NS	ns3.ccb.com.
ccb.com.		699	IN	NS	ns2.ccb.com.
ccb.com.		699	IN	NS	ns5.ccb.com.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13702
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
ccb.com.		300	IN	TXT	"v=spf1 ip4:223.72.147.0/24 ip4:124.127.253.0/24 -all"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3106
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
ccb.com.		300	IN	AAAA	240e:604:106:12::78

RRSIG

ns2.ccb.com. liuyanan.ccb.com. 2026061224 10800 3600 604800 60

DNSKEY

;; communications error to 127.0.0.1#5335: timed out
;; communications error to 127.0.0.1#5335: timed out
;; communications error to 127.0.0.1#5335: timed out

; <<>> DiG 9.18.39-0ubuntu0.24.04.5-Ubuntu <<>> @127.0.0.1 -p 5335 ccb.com DNSKEY +noall +answer +authority +comments
; (1 server found)
;; global options: +cmd
;; no servers could be reached

DNSSEC_VALIDATION

; unsigned answer
ccb.com.		2461	IN	SOA	ns2.ccb.com. liuyanan.ccb.com. 2026061224 10800 3600 604800 60

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 7.52 ms (p95: 13.36) 11.46 ms (p95: 16.55) +3.9 ms
Google IPv4 20.46 ms (p95: 34.19) 100.17 ms (p95: 262.65) +79.7 ms
Google IPv6 105.6 ms (p95: 255.61) 245.1 ms (p95: 352.73) +139.5 ms
Cloudflare IPv4 22.15 ms (p95: 23.64) 20.9 ms (p95: 22.6) -1.3 ms
Cloudflare IPv6 105.8 ms (p95: 113.38) 19.03 ms (p95: 94.67) -86.8 ms
TLS Handshake Details
{
    "ipv4": {
        "ip_used": "58.49.73.85",
        "ip_version": 4,
        "raw_handshake": "406751F3A97C0000:error:0A000152:SSL routines:final_renegotiate:unsafe legacy renegotiation disabled:../ssl/statem/extensions.c:893:\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 85 bytes and written 316 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nSSL-Session:\n    Protocol  : TLSv1.2\n    Cipher    : 0000\n    Session-ID: 7F5E97FAB7572B7F4CF17318917524C08D54F61773ADC10C53364A9A5894A890\n    Session-ID-ctx: \n    Master-Key: \n    PSK identity: None\n    PSK identity hint: None\n    SRP username: None\n    Start Time: 1781284094\n    Timeout   : 7200 (sec)\n    Verify return code: 0 (ok)\n    Extended master secret: no\n---"
    },
    "ipv6": {
        "ip_used": "2408:8606:3500::78",
        "ip_version": 6,
        "raw_handshake": "40A7D034F17C0000:error:0A000152:SSL routines:final_renegotiate:unsafe legacy renegotiation disabled:../ssl/statem/extensions.c:893:\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 91 bytes and written 316 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nSSL-Session:\n    Protocol  : TLSv1.2\n    Cipher    : 0000\n    Session-ID: 2528192C0ACDBAD9DE974E454BC3ED90771E6B75BD767DCC60AD93FBC9AACFF1\n    Session-ID-ctx: \n    Master-Key: \n    PSK identity: None\n    PSK identity hint: None\n    SRP username: None\n    Start Time: 1781284092\n    Timeout   : 7200 (sec)\n    Verify return code: 0 (ok)\n    Extended master secret: no\n---"
    }
}
HTTP Response Headers
{
    "v4_http": {
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "58.49.73.85",
        "total_time_ms": 1504.84,
        "connect_time_ms": 316.15,
        "response_headers": [
            "HTTP/1.1 200 OK",
            "Date: Fri, 12 Jun 2026 17:08:17 GMT",
            "Server: Apache",
            "Accept-Ranges: bytes",
            "Vary: Accept-Encoding",
            "Cache-Control: max-age=0",
            "Expires: Fri, 12 Jun 2026 17:08:17 GMT",
            "Content-Length: 439",
            "Content-Type: text/html; charset=UTF-8",
            "Set-Cookie: null=!aWNLFJ6+7COYWsTaTbyfSJe/wI/io/f4Rs0EoqsHnmRiXwIAE61LGBKm+hi7zSeHvVd0QFuuKAvJs80=; path=/"
        ],
        "starttransfer_time_ms": 1504.75
    },
    "v6_http": {
        "http_code": 200,
        "curl_error": null,
        "primary_ip": "2408:8606:3500::78",
        "total_time_ms": 337.6,
        "connect_time_ms": 169.04,
        "response_headers": [
            "HTTP/1.1 200 OK",
            "Date: Fri, 12 Jun 2026 17:08:15 GMT",
            "Server: Apache",
            "Accept-Ranges: bytes",
            "Vary: Accept-Encoding",
            "Cache-Control: max-age=0",
            "Expires: Fri, 12 Jun 2026 17:08:15 GMT",
            "Content-Length: 439",
            "Content-Type: text/html; charset=UTF-8",
            "Set-Cookie: null=!KiEPHUoGLGHDcFi2g0jw9uPD3ugWXYBgtSYu9p1lE4ZVgSesH8eqZ1aEfxDDV5WWs/+RLBkLYVghUPccCm8mPMQRQ/BuCzaU3DwOXV1z; path=/"
        ],
        "starttransfer_time_ms": 337.54
    },
    "v4_https": {
        "http_code": 0,
        "curl_error": "OpenSSL/3.0.13: error:0A000152:SSL routines::unsafe legacy renegotiation disabled",
        "primary_ip": "58.49.73.85",
        "total_time_ms": 614.64,
        "connect_time_ms": 306.08,
        "response_headers": [],
        "starttransfer_time_ms": 0
    },
    "v6_https": {
        "http_code": 0,
        "curl_error": "OpenSSL/3.0.13: error:0A000152:SSL routines::unsafe legacy renegotiation disabled",
        "primary_ip": "2408:8606:3500::78",
        "total_time_ms": 338.2,
        "connect_time_ms": 165.44,
        "response_headers": [],
        "starttransfer_time_ms": 0
    }
}
Connectivity Test Output
{
    "tcp_connect_v4_80": "200 0.235051 0.462385",
    "tcp_connect_v6_80": "200 2.238627 2.421071",
    "tcp_connect_v4_443": "000 0.318102 0.000000",
    "tcp_connect_v6_443": "000 1.225567 0.000000"
}
Integrity Details
Algorithm: hmac-sha256-v1
Root Hash: eb459b18d509268db5ea910299474b854ed1b7db65172c473f0cf530e7b0759e
http_headers: 570d590d54062041ad4b0e9166b427b437219ac8a70f05616a8217c5c4e884fe
dns_responses: 15a536b28fc65964032ee8cd3c115a921567876978231fa2c1f3ded441fa7ce5
tls_handshake: adb08f7e9b6ff697830876885ee306827d5efff5ab619a30d30a4c7025b97fb8
connectivity_log: 75f9f526e32b663172bdcb01d78d588d79bb6c7acb1c08a28dee36e9eebeacdb
dns_resolution_times: 6808d63dc4bc53ae3adf0abd1d974742876c637ba81b991c9be6208c98c00560