Audit Trail

Evidence record for domain check

Integrity Verified

Verification ID

d2180ee4-3dae-4e0f-858c-c539c166e8ea

Domain

kln.gov.my

Mode

scheduled

Started

2026-06-13 00:52:26 +08

Finished

2026-06-13 00:53:01 +08

Status

completed

Test Node Profile

dual stack

Engine Version

2.0.0

MGv6C Version

1.0.0

Test Node Identity

{
    "os": "Linux srv1440888 6.8.0-124-generic #124-Ubuntu SMP PREEMPT_DYNAMIC Tue May 26 13:00:45 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.31",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

Node Network Evidence

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "76.13.221.142",
            "v6_egress": "2a02:4780:5e:2789::1"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

DNS Responses

A

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30669
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
kln.gov.my.		3600	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042494 10800 3600 172800 38400

DS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23459
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		86375	IN	DS	33046 8 1 2A8BC4BA8ECDB2CD42030A71B9C00664FAEF3E41
kln.gov.my.		86375	IN	DS	33046 8 2 1692A73EAA4C22EA9048F5FDB85872E6407A7148034D311289C8B491 52ED4AF4

MX

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 5919
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		300	IN	MX	5 alt2.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	10 alt4.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	5 alt1.aspmx.l.google.com.
kln.gov.my.		300	IN	MX	1 aspmx.l.google.com.
kln.gov.my.		300	IN	MX	10 alt3.aspmx.l.google.com.

NS

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56526
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		3600	IN	NS	dns2.gitn.net.my.
kln.gov.my.		3600	IN	NS	dns1.gitn.net.my.

TXT

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25344
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		3600	IN	TXT	"v=spf1 ip4:103.245.89.99 ip4:103.245.89.108 ip4:103.8.147.12/30 ip4:219.92.54.177/32 ip4:103.156.82.32/29 ip4:103.156.83.32/29 include:_spf.google.com ~all"
kln.gov.my.		3600	IN	TXT	"google-site-verification=PGDEH3aqogsJUvwUW6mtsNFR_X3PCItrPjF4nKgunRE"
kln.gov.my.		3600	IN	TXT	"MS=ms26620342"
kln.gov.my.		3600	IN	TXT	"MS=E0F8E18400A7C13FE9E8FB3E68D209B229903979"

AAAA

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 61612
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; AUTHORITY SECTION:
kln.gov.my.		3600	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042494 10800 3600 172800 38400

RRSIG

dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042494 10800 3600 172800 38400
SOA 8 3 3600 20260712124642 20260612114642 35589 kln.gov.my. h1fGLUSJFdrYOCTlmJbhIK/CokzAhdOZj2/Jd8IuLD49ZUxXYca4GlsG i59olv6oSbOV6Sc8Af6Q2dRVBUzCPCeEinKwR0Tqv2YKXwZjY3sUJmMP CvSjJKnQQacuktT7LW8+HFekw4KdvXfmQKlXle/5+CdluBTTSsxtWySr x+I=

DNSKEY

;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58587
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 1232
;; ANSWER SECTION:
kln.gov.my.		3575	IN	DNSKEY	257 3 8 AwEAAdHDEQkUL2nwyJfCeqiNnjXuMENO8Wyu13NOkSoBTkUthgOYwF/E wUzT6ILy9lLP5Z0Gn5vVqFtPIhAHc7OE7RMjEO+4BW0u8FKsLt30Mgyc OPfPRI4MrfjyGPJ7xm5RhIZulPWCqn01uAAxWjQq9aINi02zWxk+13l9 gH3wsoEJOsV+nWuH6yMX670sQ0Q6V3ifOSaDMdnAsrR/7SP1yUeYpBiB 9/d2AMzQg/KiZc+bQl2x43BYjSylUgJ39blmO3nlalf0hoPs6+qxrB5b 7xL0Rj69y7gAKeiDyaGyms0Z8uiD0T3yGsxpAynM/cCNoLf4fe8dIX9t JxCGiHnnc38=
kln.gov.my.		3575	IN	DNSKEY	256 3 8 AwEAAZ2+A6SU22JCVL2Q3MhVyvp/ofA/cZyaSUrnreqcqCBT7zPWRfgu N4UR77PCuYRNdb1/OhzrYOl7wFg3udq07mD9kwY/eVbHZpZPcULDmZgb 7I/peSKm/sz7qIXWLc+c0qd5PYfa0ziNyW4Weajofp5HoByHLTZMI5qR 28MTep7p

DNSSEC_VALIDATION

; fully validated
kln.gov.my.		3575	IN	SOA	dns1.gitn.net.my. root.dns1.gitn.net.my. 2026042494 10800 3600 172800 38400
kln.gov.my.		3575	IN	RRSIG	SOA 8 3 3600 20260712124642 20260612114642 35589 kln.gov.my. h1fGLUSJFdrYOCTlmJbhIK/CokzAhdOZj2/Jd8IuLD49ZUxXYca4GlsG i59olv6oSbOV6Sc8Af6Q2dRVBUzCPCeEinKwR0Tqv2YKXwZjY3sUJmMP CvSjJKnQQacuktT7LW8+HFekw4KdvXfmQKlXle/5+CdluBTTSsxtWySr x+I=

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver	Transport	A (IPv4)	AAAA (IPv6)	Delta
System	Default	20.85 ms (p95: 29.83)	16.76 ms (p95: 18.13)	-4.1 ms
Google	IPv4	39.79 ms (p95: 49.01)	30.25 ms (p95: 42.56)	-9.5 ms
Google	IPv6	53.82 ms (p95: 57.05)	51.28 ms (p95: 56.22)	-2.5 ms
Cloudflare	IPv4	22.91 ms (p95: 24.1)	12 ms (p95: 12.17)	-10.9 ms
Cloudflare	IPv6	21.82 ms (p95: 30.3)	21.28 ms (p95: 36.69)	-0.5 ms

TLS Handshake Details

{
    "ipv4": {
        "ip_used": "163.53.153.22",
        "ip_version": 4,
        "raw_handshake": "40971D1EC4780000:error:0A000126:SSL routines:ssl3_read_n:unexpected eof while reading:../ssl/record/rec_layer_s3.c:316:\nCONNECTED(00000010)\n---\nno peer certificate available\n---\nNo client certificate CA names sent\n---\nSSL handshake has read 0 bytes and written 319 bytes\nVerification: OK\n---\nNew, (NONE), Cipher is (NONE)\nSecure Renegotiation IS NOT supported\nCompression: NONE\nExpansion: NONE\nNo ALPN negotiated\nEarly data was not sent\nVerify return code: 0 (ok)\n---"
    }
}

HTTP Response Headers

{
    "v4_http": {
        "http_code": 0,
        "curl_error": "Empty reply from server",
        "primary_ip": "163.53.153.22",
        "total_time_ms": 12.98,
        "connect_time_ms": 6.06,
        "response_headers": [],
        "starttransfer_time_ms": 12.98
    },
    "v4_https": {
        "http_code": 0,
        "curl_error": "OpenSSL SSL_connect: SSL_ERROR_SYSCALL in connection to kln.gov.my:443 ",
        "primary_ip": "163.53.153.22",
        "total_time_ms": 1845.6,
        "connect_time_ms": 6.17,
        "response_headers": [],
        "starttransfer_time_ms": 0
    }
}

Connectivity Test Output

{
    "tcp_connect_v4_80": "000 0.005644 0.012059",
    "tcp_connect_v4_443": "000 0.015873 0.000000"
}

Integrity Details

Algorithm: hmac-sha256-v1

Root Hash: 55b08f5b58ccccf74eb8e7248bdcbdb86f90c111372fde14af6865f9bd8a5a69

http_headers: 1552a59d633d0bff88b429f04a300207f67dd390015d0feaef9390ab1c62ee5f

dns_responses: 11498956b6f0a6a51d685044cc151fee2203d6d15d301e49f54b9c6fa0a0e07a

tls_handshake: 97aa72599ebb7943f08cb4892243918c68441ad7989634ef9b35cd4a037aea23

connectivity_log: 1f4738038096cc9bb383f480ce1e5c57c1d3848a1b82f9caa3a03f2ecf184433

dns_resolution_times: a446e0cee2604952b2f2187b9064c1d15c6d2c94dcf2a67cf3a5d49e53b4ce53