Audit Trail

{
    "os": "Linux srv1440888 6.8.0-101-generic #101-Ubuntu SMP PREEMPT_DYNAMIC Mon Feb  9 10:15:05 UTC 2026 x86_64",
    "hostname": "srv1440888",
    "php_version": "8.3.30",
    "server_ipv4": "76.13.221.142",
    "server_ipv6": "2a02:4780:5e:2789::1"
}

{
    "profile": "dual_stack",
    "enforcement_evidence": {
        "egress_check": {
            "v4_egress": "unreachable",
            "v6_egress": "unreachable"
        },
        "ip_routes_v4": "default via 76.13.221.254 dev eth0 proto static \n76.13.221.0/24 dev eth0 proto kernel scope link src 76.13.221.142 \n",
        "ip_routes_v6": "2a02:4780:5e::/48 dev eth0 proto kernel metric 256 pref medium\nfe80::/64 dev eth0 proto kernel metric 256 pref medium\ndefault via 2a02:4780:5e::1 dev eth0 proto static metric 1024 pref medium\n",
        "sysctl_flags": {
            "net.ipv6.conf.all.disable_ipv6": "0"
        },
        "nftables_summary": "unavailable or no permissions"
    }
}

{
    "v4_http": {
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "162.159.140.229",
        "total_time_ms": 210.36,
        "connect_time_ms": 3.4,
        "response_headers": {
            "0": "HTTP/1.1 301 Moved Permanently",
            "1": "Date: Fri, 06 Mar 2026 09:15:28 GMT",
            "2": "Connection: keep-alive",
            "3": "Location: https://x.com/",
            "4": "set-cookie: __cf_bm=FiFnu0xCLtfmk9BdWLFYmcGHp_50ANJMcTNUXMDoKZ0-1772788528.8950307-1.0.1.1-2k3RUkxmAxVnjL8aXvfxVN3oxUVmXSoBZycNrEWQTsnnqYU1hxC4JE6Sv52bhDshIviT592Rj3N1UDG7MHc3_s2Kz.srvkyNZRF2Tue2Ej_JP2fW0pN5UKWz3KdAP6aO; HttpOnly; Path=/; Domain=x.com; Expires=Fri, 06 Mar 2026 09:45:28 GMT",
            "5": "Server: cloudflare",
            "6": "CF-RAY: 9d8041919980b2e8-KUL",
            "8": "HTTP/2 403",
            "9": "date: Fri, 06 Mar 2026 09:15:29 GMT",
            "10": "perf: 7402827104",
            "11": "server: cloudflare envoy",
            "12": "x-powered-by: Express",
            "13": "cache-control: no-cache, no-store, max-age=0",
            "14": "x-transaction-id: 01fb311f54385416",
            "15": "x-response-time: 7",
            "16": "origin-cf-ray: 9d804191ac124a9b-KUL",
            "17": "strict-transport-security: max-age=631138519; includeSubdomains",
            "18": "x-served-by: t4_p",
            "19": "vary: Accept-Encoding",
            "20": "cf-cache-status: DYNAMIC",
            "21": "set-cookie: guest_id_marketing=v1%3A177278852899472753; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:28 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "22": "set-cookie: guest_id_ads=v1%3A177278852899472753; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:28 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "23": "set-cookie: personalization_id=\"v1_vhXPyexpJ30WrUf3Vm3mPw==\"; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:28 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "24": "set-cookie: guest_id=v1%3A177278852899472753; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:28 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "25": "set-cookie: __cf_bm=Lmd8EyZuoCuiNRlPvABw8na183_xL4vfDlj5lUDfAX4-1772788528.9044445-1.0.1.1-_4gM7DxSiBmJhY8GQZCT.1BFJrATd4wHHlTrX1DH7anHUzxu1XRmOwEILBNf5aqgvTo.U3eYbprkYm34PuIAn_aei_yJwCFTGEbJ6P6NAGQ7FxtRH.u5rMDWrhidSbuw; HttpOnly; Secure; Path=/; Domain=x.com; Expires=Fri, 06 Mar 2026 09:45:29 GMT",
            "26": "cf-ray: 9d804191ac124a9b-KUL"
        },
        "starttransfer_time_ms": 210.29
    },
    "v4_https": {
        "tls": {
            "protocol": 0,
            "certificates": [
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\nI4u3R1JEdRJf6Q4=\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Let's Encrypt, CN = E7",
                    "Subject": "CN = x.com",
                    "Version": "2",
                    "Signature": "30:64:02:30:04:f5:cf:18:c3:71:a7:c4:7b:d3:21:d8:c1:a3:58:a6:6d:07:54:69:76:fb:3f:6e:4e:34:26:91:40:12:5f:4a:12:06:c2:7a:b1:09:c1:a7:9e:bc:d1:58:12:07:30:1c:02:30:65:0f:55:f3:a4:28:b6:ce:23:7e:21:d7:e3:85:1c:b8:bb:30:4d:1e:0f:c1:9e:1d:2d:c6:04:55:46:09:27:a8:62:48:57:57:b3:23:8b:b7:47:52:44:75:12:5f:e9:0e:",
                    "Start date": "Feb  1 16:16:32 2026 GMT",
                    "Expire date": "May  2 16:16:31 2026 GMT",
                    "Serial Number": "05cdf01593c86045dd60fedd1ada4e1eb6ac",
                    "X509v3 Key Usage": "Digital Signature",
                    "Signature Algorithm": "ecdsa-with-SHA384",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "CT Precertificate SCTs": "Signed Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : CB:38:F7:15:89:7C:84:A1:44:5F:5B:C1:DD:FB:C9:6E:\n                F2:9A:59:CD:47:0A:69:05:85:B0:CB:14:C3:14:58:E7\n    Timestamp : Feb  1 17:15:02.644 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:45:02:20:6B:A2:FF:B1:63:CC:D4:DE:73:B1:D9:60:\n                E2:59:0C:55:1A:4D:3A:04:FA:27:98:20:FF:F1:08:68:\n                72:5B:86:2F:02:21:00:D1:64:EB:8F:87:9B:78:23:E0:\n                FE:7C:B3:4F:EC:51:4A:F9:46:AA:CB:A4:85:91:4C:D4:\n                49:40:7D:84:29:1A:88\nSigned Certificate Timestamp:\n    Version   : v1 (0x0)\n    Log ID    : 0E:57:94:BC:F3:AE:A9:3E:33:1B:2C:99:07:B3:F7:90:\n                DF:9B:C2:3D:71:32:25:DD:21:A9:25:AC:61:C5:4E:21\n    Timestamp : Feb  1 17:15:02.621 2026 GMT\n    Extensions: none\n    Signature : ecdsa-with-SHA256\n                30:46:02:21:00:B9:A6:B7:F9:1B:12:B5:8A:66:01:90:\n                09:27:8E:C8:E4:7D:AF:92:EC:B2:80:FA:BD:E3:DD:58:\n                55:3F:5C:6E:EA:02:21:00:F7:DB:3D:25:98:29:EA:24:\n                8F:A7:24:8B:4F:CC:70:B6:DA:C9:D6:52:5C:E0:B6:21:\n                C6:D8:2B:1C:68:FF:12:37",
                    "X509v3 Basic Constraints": "CA:FALSE",
                    "X509v3 Extended Key Usage": "TLS Web Server Authentication, TLS Web Client Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://e7.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "19:6A:D2:2C:7E:25:A0:D3:55:8F:60:C2:94:70:5B:12:F2:74:6F:62",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://e7.c.lencr.org/45.crl",
                    "X509v3 Authority Key Identifier": "AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80",
                    "X509v3 Subject Alternative Name": "DNS:*.x.com, DNS:cdn.syndication.x.com, DNS:x.com"
                },
                {
                    "Cert": "-----BEGIN CERTIFICATE-----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\n+VUwFj9tmWxyR/M=\n-----END CERTIFICATE-----\n",
                    "Issuer": "C = US, O = Internet Security Research Group, CN = ISRG Root X1",
                    "Subject": "C = US, O = Let's Encrypt, CN = E7",
                    "Version": "2",
                    "Signature": "8f:1e:ba:7c:37:4b:93:9c:b0:16:7d:c2:cc:0d:70:d6:a7:f2:94:75:03:68:47:f4:41:9a:57:70:9b:1e:75:d2:46:49:f6:d4:50:eb:db:35:1f:4d:fd:04:35:e8:ad:65:5e:5e:15:17:28:66:19:70:d3:e4:a7:5f:72:bd:11:bc:82:15:ac:dc:45:87:89:6a:1e:d4:51:08:fe:91:05:1b:2d:a9:b6:76:cd:44:60:a9:a9:27:fd:78:a9:d2:26:90:2f:42:1d:7c:70:59:af:7f:7a:16:09:27:9e:24:58:15:c9:0a:39:13:c6:c8:cd:d0:2a:77:7a:ea:0b:4c:b2:df:08:e6:79:11:42:50:20:fc:96:fe:19:cd:de:80:8b:ee:18:a5:9b:a0:4d:46:f3:d3:53:b0:df:4b:4c:30:f7:3c:b8:f4:75:43:2b:38:8b:aa:56:32:c1:f2:91:02:eb:29:3d:7a:7a:e5:ae:a8:d7:42:09:0b:11:88:57:ce:ae:dd:2d:a7:ef:e5:59:22:83:a1:a5:d2:7b:ae:aa:3a:9f:a7:44:35:6e:2d:68:c9:53:40:95:77:ba:69:45:f0:f7:60:9c:82:10:bd:6c:db:0a:10:ed:7e:33:9d:98:63:9f:a8:7c:85:e5:4b:f4:84:41:bb:d5:61:80:4b:67:9c:9e:8a:09:55:ea:dd:d2:33:a1:fe:bd:31:b4:68:ff:58:1f:32:e7:fc:a5:4e:1f:31:90:7d:70:cf:ee:a3:39:b6:47:fe:ed:d8:99:7b:ba:36:7f:0e:8e:ec:8b:cd:e9:fb:10:5c:44:10:8f:c4:c9:51:72:71:bf:6f:ee:26:17:2e:cb:fb:52:0e:05:f0:1c:cf:14:93:7e:16:35:b4:53:ef:31:93:1a:44:11:5f:48:2c:6e:30:1e:6b:f8:d8:02:85:af:d1:9b:d0:47:0a:6a:3d:ee:fd:0f:f8:bb:09:ea:7c:a9:69:c0:fb:b0:04:ff:70:77:4b:fd:dd:10:46:26:73:49:69:7b:5d:fa:e8:0f:fa:18:48:24:de:4b:6b:f4:f1:28:42:b2:c2:86:ce:88:b6:ed:f0:9c:d2:c1:d9:eb:82:f0:82:86:2d:01:69:1a:d3:8e:ff:6f:e1:88:02:a3:c9:a8:da:04:fd:b9:c3:58:c5:d1:69:7c:05:ba:a7:7b:7b:99:da:ad:46:c8:f1:49:61:19:93:ef:f3:97:a6:63:87:fc:55:4b:b7:04:be:f2:78:35:70:09:a9:0a:e8:cf:c2:d7:89:64:d7:03:1b:4b:05:da:7f:ec:73:4f:92:41:fe:3d:7d:dc:94:2b:4b:72:f9:55:30:16:3f:6d:99:6c:72:47:f3:",
                    "Start date": "Mar 13 00:00:00 2024 GMT",
                    "Expire date": "Mar 12 23:59:59 2027 GMT",
                    "Serial Number": "aa75f1e62b8f0a220966d38bbfd4baa1",
                    "X509v3 Key Usage": "Digital Signature, Certificate Sign, CRL Sign",
                    "Signature Algorithm": "sha256WithRSAEncryption",
                    "Public Key Algorithm": "id-ecPublicKey",
                    "X509v3 Basic Constraints": "CA:TRUE, pathlen:0",
                    "X509v3 Extended Key Usage": "TLS Web Client Authentication, TLS Web Server Authentication",
                    "X509v3 Certificate Policies": "Policy: 2.23.140.1.2.1",
                    "Authority Information Access": "CA Issuers - URI:http://x1.i.lencr.org/",
                    "X509v3 Subject Key Identifier": "AE:48:9E:DC:87:1D:44:A0:6F:DA:A2:E5:60:74:04:78:C2:9C:00:80",
                    "X509v3 CRL Distribution Points": "Full Name:\n  URI:http://x1.c.lencr.org/",
                    "X509v3 Authority Key Identifier": "79:B4:59:E6:7B:B6:E5:E4:01:73:80:08:88:C8:1A:58:F6:E9:9B:6E"
                }
            ]
        },
        "http_code": 403,
        "curl_error": null,
        "primary_ip": "162.159.140.229",
        "total_time_ms": 228.41,
        "connect_time_ms": 1.43,
        "response_headers": [
            "HTTP/2 403",
            "date: Fri, 06 Mar 2026 09:15:29 GMT",
            "perf: 7402827104",
            "server: cloudflare envoy",
            "x-powered-by: Express",
            "cache-control: no-cache, no-store, max-age=0",
            "x-transaction-id: 1dd0a58d1760f254",
            "x-response-time: 6",
            "origin-cf-ray: 9d8041943e35e454-KUL",
            "strict-transport-security: max-age=631138519; includeSubdomains",
            "x-served-by: t4_p",
            "vary: Accept-Encoding",
            "cf-cache-status: DYNAMIC",
            "set-cookie: guest_id_marketing=v1%3A177278852941142305; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:29 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: guest_id_ads=v1%3A177278852941142305; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:29 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: personalization_id=\"v1_fg1FlhGi3MMXfOrFtqWKdg==\"; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:29 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: guest_id=v1%3A177278852941142305; Max-Age=63072000; Expires=Sun, 05 Mar 2028 09:15:29 GMT; Path=/; Domain=.x.com; Secure; SameSite=None",
            "set-cookie: __cf_bm=mX6RMEmOlKITtblXp6rbmD7fCnZduP7ge3OUkwLd2hA-1772788529.3142292-1.0.1.1-A41XXxeKU_aEuo_XN5vgqnqIMhQdq8bUcKxQaQZo_yPQvQGHW918361iw6bqiHuMghBL3E67QX3NqSBmnmoaiLqguauy0a8QOLsjdnChR08xglb08d4dKHER_7AvXV_q; HttpOnly; Secure; Path=/; Domain=x.com; Expires=Fri, 06 Mar 2026 09:45:29 GMT",
            "cf-ray: 9d8041943e35e454-KUL"
        ],
        "starttransfer_time_ms": 228.36
    }
}

{
    "tcp_connect_v4_80": "301 0.000998 0.004977",
    "tcp_connect_v4_443": "200 0.002071 0.251017"
}