October 1, 2017 at 4:02:35 PM UTC
VERIFY
Anomaly
HTTP blocking (a blockpage might be served)
Share on Facebook or Twitter
Websites
Websites
Runtime: 233ms
On October 1, 2017 at 4:02:35 PM UTC, http://referendum.cat presented signs of HTTP blocking (a blockpage might be served) on AS3352 in Spain. This might mean that http://referendum.cat was blocked, but false positives can occur. Please explore the network measurement data below.
Failures
HTTP Experiment
null
DNS Experiment
null
Control
null
DNS Queries
Resolver:
81.47.231.72
Query:
IN A referendum.cat
Engine:
NameClassTTLTypeDATAAnswer IP Info
@IN A2.20.44.167Unknown AS
@IN A92.122.241.124Unknown AS
@IN A2.20.44.196Unknown AS
@IN A92.122.241.196Unknown AS
@IN A2.22.126.109Unknown AS
@IN A2.22.126.197Unknown AS
TCP Connections
2.20.44.167:80: succeeded
92.122.241.124:80: succeeded
2.20.44.196:80: succeeded
92.122.241.196:80: succeeded
2.22.126.197:80: succeeded
2.22.126.109:80: succeeded
HTTP Requests
URL
GET http://referendum.cat
Response Headers
Content-Type:
text/html; charset="utf-8"
content-encoding:
Response Body
<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\"> <html> <head> <meta charset="utf-8"/> <title> PHISHING_TSOL_MENSAJE_1 </title> </head> <body> <CENTER> <h1 id="causa" name="PHISHING_TSOL_MENSAJE_1"> </h1> <script type="text/javascript"> var name = document.getElementById("causa").getAttribute('name') var text = "" switch (name) { case "PHISHING_TSOL_MENSAJE_1": text = "Judicial_Guardia_Civil" window.location.replace("http://paginaintervenida.edgesuite.net"); break; case "Administrativo_Ley_del_Juego": text = "Administrativo_Ley_del_Juego" window.location.replace("http://195.235.52.40"); break; case "Judicial_Guardia_Civil": text = "Judicial_Guardia_Civil" window.location.replace("http://webbloqueadaporpolicianacional.com"); break; case "Judicial_Policia_Nacional": text = "Judicial_Policia_Nacional" window.location.replace("http://webbloqueadaporpolicianacional.com"); break; default: text = "ERROR 404 - File url1 not found"; } document.getElementById("causa").innerHTML = text </script> </CENTER> </body> </html>
Measurement UID
0120171001ec6c95323fbed2e58787ab0b04a93f
Report ID
20171001T155442Z_AS3352_WPrjXiNTPtG16TjdsHSLOY7mIpZgEDNhbloWOsg6wn69AwO8rC
Platform
macos
Software Name
ooniprobe (2.1.0)
Measurement Engine
Unavailable
Raw Measurement Data
Loading…