August 27, 2016 at 1:40:01 PM UTC
VERIFY
Anomaly
HTTP blocking (a blockpage might be served)
Websites
Websites
Runtime: 2.8s
Share on Facebook or Twitter
On August 27, 2016 at 1:40:01 PM UTC, http://xnxx.com presented signs of HTTP blocking (a blockpage might be served) on AS8452 in Egypt. This might mean that http://xnxx.com was blocked, but false positives can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
163.121.194.6
Query:
IN A xnxx.com
Engine:
Name
Class
TTL
Type
DATA
Answer IP Info
@
IN
TTL
A
141.0.174.37
Unknown AS
@
IN
TTL
A
141.0.174.38
Unknown AS
@
IN
TTL
A
141.0.174.40
Unknown AS
@
IN
TTL
A
141.0.174.41
Unknown AS
@
IN
TTL
A
141.0.174.42
Unknown AS
@
IN
TTL
A
141.0.174.43
Unknown AS
@
IN
TTL
A
141.0.174.44
Unknown AS
@
IN
TTL
A
141.0.174.34
Unknown AS
@
IN
TTL
A
141.0.174.35
Unknown AS
@
IN
TTL
A
141.0.174.36
Unknown AS

TCP Connections

141.0.174.37:80: succeeded
141.0.174.40:80: succeeded
141.0.174.38:80: succeeded
141.0.174.43:80: succeeded
141.0.174.41:80: succeeded
141.0.174.42:80: succeeded
141.0.174.34:80: succeeded
141.0.174.36:80: succeeded
141.0.174.35:80: succeeded
141.0.174.44:80: succeeded

HTTP Requests

URL
GET http://go.deliverymodo.com/afu.php?id=723454
Response Headers
content-encoding:
Set-Cookie:
SeenToday=1; expires=Sun, 28-Aug-2016 15:40:02 GMT; path=/
Expires:
Mon, 26 Jul 1997 05:00:00 GMT
Server:
nginx
Pragma:
no-cache
Cache-Control:
private, max-age=0, no-cache
Date:
Sat, 27 Aug 2016 15:40:02 GMT
P3P:
CP="CUR ADM OUR NOR STA NID"
Content-Type:
text/html
Timing-Allow-Origin:
*
Response Body
<!doctype html>
<html lang="en" xmlns="http://www.w3.org/1999/html">
<head>
    <meta charset="UTF-8">
    <title>Redirect</title>
        <link rel="dns-prefetch" href="//click.alibaba.com" />
        <noscript><meta id="meta-refresh" http-equiv="refresh" content="1; url=/?r=/mb/han&zoneid=723454&pbk2=d5b85e96f96a9887d70511923badd3016323533617879557779&zoneid=723454&uuid=c56f13f9-8e20-4119-8b00-6b6cb7e1c3ce&adparams=bm9qcz0x"></noscript>
    <style>
        .click {color: white;display:none;}
    </style>

</head>
<body>


<form action="/" method="get" id="submit-form">
            <input type="hidden" name="r" value="/mb/han" />
            <input type="hidden" name="zoneid" value="723454" />
            <input type="hidden" name="pbk2" value="d5b85e96f96a9887d70511923badd3016323533617879557779" />
            <input type="hidden" name="uuid" value="c56f13f9-8e20-4119-8b00-6b6cb7e1c3ce" />
            <input type="hidden" name="adparams" value="bm9qcz0w" />
                <input type="hidden" name="timeout" value="0" id="timeout" />
</form>
<a href="/index.php?r=/bl&zoneid=723454" class="click">click here</a>

<script type="text/javascript">
    mTop = top;
    mSelf = self;
    submited = false;

    function submit() {

        if (submited) {
            return false;
        }

        submited = true;

                	

                        
        window.document.getElementById("submit-form").submit();
    }

    function submitByTimeout(){
        window.document.getElementById("timeout").value=1;
        submit();
    }
        submit();
    
    
 
</script>
</body>
</html>
URL
GET http://go.ad2upapp.com/afu.php?id=723454
Response Headers
Date:
Sat, 27 Aug 2016 15:40:02 GMT
Content-Type:
text/html
Location:
http://go.deliverymodo.com/afu.php?id=723454
Timing-Allow-Origin:
*
Server:
nginx
Response Body

Empty body

URL
GET http://xnxx.com
Response Headers
Location:
http://go.ad2upapp.com/afu.php?id=723454
Response Body

Empty body

Measurement UID
01201608273032d1db4f923d1234303f4fd27c46
Report ID
20160827T153815Z_AS8452_gAU19jWom21aUc0hwieYQymbvcuTTTYULW8k1W1UXOlEYmhDPq
Platform
Unavailable
Software Name
ooniprobe (1.6.1)
Measurement Engine
Unavailable

Raw Measurement Data

Loading…