Dashboard / Banking / affingroup.com
Banking /

Affin Islamic Bank Berhad

affingroup.com

Last checked: 16 hours ago

Download Report
Partially Compliant
MGv6C-1.0
86%
Partial Support
Works on IPv6 Only?
Website Ready
DNS Ready
Email Ready

IPv6 Addresses Detected

2606:4700:20::681a:140 2606:4700:20::ac43:47cd 2606:4700:20::681a:40

IPv4 Addresses Detected

172.67.71.205 104.26.0.64 104.26.1.64

Network Information

WHOIS

IPv6 Network

Organization
Cloudflare, Inc.
Country
US
ASN
AS13335 CLOUDFLARENET - Cloudflare, Inc., US
Network
2606:4700::/32

IPv4 Network

Organization
Cloudflare, Inc.
Country
US
ASN
AS13335 CLOUDFLARENET - Cloudflare, Inc., US
Network
172.64.0.0/13

Web Services

35%
7/8
AAAA Record

The domain has at least one IPv6 address (AAAA DNS record).

✓ 2606:4700:20::681a:140, 2606:4700:20::ac43:47cd, 2606:4700:20::681a:40

+1
Globally Routable IPv6

The IPv6 addresses are publicly routable — not link-local, ULA, loopback or documentation ranges.

✓ All addresses are globally routable.

+1
HTTP over IPv6

Website reachable on port 80 when connecting via IPv6.

✓ HTTP (port 80) responds over IPv6 — 276ms TTFB.

+1
HTTPS over IPv6

Website reachable on port 443 when connecting via IPv6.

✓ HTTPS (port 443) responds over IPv6 — 237ms TTFB.

+1
IPv6-Only Reachability

Website responds when connected exclusively over IPv6, with no IPv4 fallback. Simulates what happens when IPv4 is turned off.

✓ Site is fully reachable via IPv6-only.

+1
TLS Certificate Valid (IPv6)

The SSL/TLS certificate is valid, not expired, and matches the domain when connected via IPv6.

✓ Certificate valid — issued by C = US, O = Google Trust Services, CN = WE1, expires Aug 28 03:45:45 2026 GMT

+1
Dual-Stack (IPv4 + IPv6)

The domain has both A and AAAA records for backwards compatibility during the IPv6 transition.

✓ Domain has both A and AAAA records.

+1
HTTP/3 (QUIC)

Server advertises HTTP/3 support via the Alt-Svc: h3 header.

✗ No HTTP/3 support detected.

0

DNS & DNSSEC

25%
3/5
NS Has AAAA Record

At least one authoritative nameserver has an IPv6 address (AAAA record).

✓ Nameserver has IPv6 address.

+1
NS Reachable via IPv6

Authoritative nameserver accepts TCP connections on port 53 over IPv6.

✓ Nameserver is reachable via IPv6 on port 53.

+1
NS Answers Queries via IPv6

Nameserver actually resolves DNS queries when asked over IPv6 — not just TCP open, but functionally answering.

✓ DNS queries answered over IPv6.

+1
DNSSEC Validated

Full DNSSEC chain-of-trust validation passes. Prevents DNS cache poisoning and spoofing.

✗ DNSSEC validation failed or zone is unsigned.

0
Reverse DNS (PTR)

A PTR record exists in ip6.arpa for the IPv6 address. Important for email delivery and network diagnostics.

✗ No PTR record found.

0
DS Record at Parent

Delegation Signer record exists in the parent zone.

✗ No DS record at parent.

RRSIG Valid

RRSIG signatures are present and not expired.

✓ RRSIG signatures are current and valid.

Signing Algorithm

The cryptographic algorithm used for DNSSEC signing.

ECDSAP256SHA256

Email Services

25%
6/6
MX Record Exists

The domain has at least one MX (Mail Exchange) DNS record pointing to a mail server.

✓ MX record found.

+1
MX Server Has IPv6

The highest-priority MX server resolves to an IPv6 address (AAAA record).

✓ MX server has AAAA record.

+1
SMTP Reachable via IPv6

The MX server accepts SMTP connections (port 25) over IPv6 and responds with a 220 banner.

✓ SMTP port 25 responds over IPv6.

+1
STARTTLS over IPv6

The MX server supports STARTTLS encryption when connected over IPv6.

✓ STARTTLS supported over IPv6.

+1
SPF Record

A TXT record with v=spf1 exists, declaring which servers may send email for this domain.

✓ SPF record found.

+1
DKIM Selector

A DKIM public key is published at a common selector, enabling email signature verification.

DKIM selector found: default._domainkey

DMARC Record

A DMARC policy record exists at _dmarc.<domain>, enabling email authentication reporting.

✓ DMARC record found.

+1

IPv4 Baseline

15%
3/3
A Record

The domain has at least one IPv4 address (A DNS record).

✓ 172.67.71.205, 104.26.0.64, 104.26.1.64

+1
HTTP over IPv4

Website reachable on port 80 when connecting via IPv4.

✓ HTTP (port 80) responds over IPv4 — 252ms TTFB.

+1
HTTPS over IPv4

Website reachable on port 443 when connecting via IPv4.

✓ HTTPS (port 443) responds over IPv4 — 217ms TTFB.

+1

DNS Resolution Performance

Comparison of A (IPv4) vs AAAA (IPv6) query times across resolvers and transports. Shows median (p50) of 3 samples.

Resolver Transport A (IPv4) AAAA (IPv6) Delta
System Default 31.8 ms (p95: 32.25) 41.72 ms (p95: 44.98) +9.9 ms
Google IPv4 22.29 ms (p95: 25.8) 37.73 ms (p95: 38.82) +15.4 ms
Google IPv6 32.01 ms (p95: 41.63) 38.01 ms (p95: 39.27) +6 ms
Cloudflare IPv4 13.37 ms (p95: 45.01) 17.48 ms (p95: 18.68) +4.1 ms
Cloudflare IPv6 24.71 ms (p95: 36.85) 50.95 ms (p95: 65.04) +26.2 ms
Tamper-evident evidence record

This result is backed by an HMAC-SHA256 signed evidence record. Scan the code or follow the link to verify the audit trail independently.

a1829d57-832c-4258-b5f5-e17c8a292efc
View Audit Trail →

Score History

Check History

Last 7 checks

Date Score Status Triggered By
13 Jun 2026
00:48 UTC 		86 % Partial scheduled
07 Mar 2026
01:00 UTC 		86 % Partial manual
06 Mar 2026
18:54 UTC 		86 % Partial manual
06 Mar 2026
17:42 UTC 		86 % Partial manual
06 Mar 2026
17:15 UTC 		86 % Partial manual
06 Mar 2026
11:18 UTC 		86 % Partial manual
04 Mar 2026
03:02 UTC 		86 % Partial manual