Anomaly
http://www.al-liwa.com/
DNS tampering
Jordan
Country
AS9038
Network
November 27, 2019, 10:20 PM UTC
Date & Time
Websites
Websites
Web Connectivity Test
Runtime: 3.6s

On November 27, 2019, 10:20 PM UTC, http://www.al-liwa.com/ presented signs of DNS tampering on AS9038 in Jordan. This might mean that http://www.al-liwa.com/ was blocked, but [false positives](https://ooni.org/support/faq/#why-do-false-positives-occur) can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
212.118.1.218
Query:
IN A www.al-liwa.com
Engine:
system
Name
Class
TTL
Type
DATA
@
IN
CNAME
www.al-liwa.com
@
IN
A
81.171.22.5

TCP Connections

Connection to 81.171.22.5:80 succeeded.

HTTP Requests

URL
GET http://usa.mohini-ger.com/zcvisitor/21fea609-1164-11ea-8aef-0a6b1860731d?campaignid=a3e411f0-481b-11e8-b0a2-0e497388635c
Response Headers
x-content-security-policy:
default-src 'self'; script-src 'self' 'unsafe-inline'
content-security-policy:
default-src 'self'; script-src 'self' 'unsafe-inline'
Transfer-Encoding:
chunked
Server:
ZeroPark-Traffic
Connection:
keep-alive
Access-Control-Allow-Methods:
GET,POST,OPTIONS
Cache-Control:
no-store, no-cache, pre-check=0, post-check=0
Date:
Wed, 27 Nov 2019 22:20:36 GMT
Access-Control-Allow-Origin:
*
Access-Control-Allow-Headers:
X-Requested-With,Content-Type,x-exadsrtb-version,x-openrtb-version,x-zerortb-version,X-Flag
Content-Type:
text/html;charset=UTF-8
X-WebKit-CSP:
default-src 'self'; script-src 'self' 'unsafe-inline'
Response Body
<!DOCTYPE html>
<html>
	<head>
		<META http-equiv="refresh" content="1;URL='http://usa.mohini-ger.com/zcredirect?visitid=21fea609-1164-11ea-8aef-0a6b1860731d&type=meta'">
	</head>
	<body>
		<script type="text/javascript">
			setTimeout(function () {
				var pageWidth = window.innerWidth ? window.innerWidth : (document.documentElement && document.documentElement.clientWidth ? document.documentElement.clientWidth : document.getElementsByTagName('body')[0].clientWidth);
				var pageHeight = window.innerHeight ? window.innerHeight : (document.documentElement && document.documentElement.clientHeight ? document.documentElement.clientHeight : document.getElementsByTagName('body')[0].clientHeight);
				var iframeDetected = window.self !== window.top;
				window.location="http://usa.mohini-ger.com/zcredirect?visitid=21fea609-1164-11ea-8aef-0a6b1860731d&type=js&browserWidth=" + pageWidth +"&browserHeight=" + pageHeight +"&iframeDetected=" + iframeDetected;
			}, 1);
		</script>
       	</body>
</html>
URL
GET http://www.al-liwa.com/
Response Headers
content-length:
11
set-cookie:
sid=21eae958-1164-11ea-bcff-24846b555312; path=/; domain=.al-liwa.com; expires=Tue, 16 Dec 2087 01:34:43 GMT; max-age=2147483647; HttpOnly
server:
nginx
connection:
close
location:
http://usa.mohini-ger.com/zcvisitor/21fea609-1164-11ea-8aef-0a6b1860731d?campaignid=a3e411f0-481b-11e8-b0a2-0e497388635c
cache-control:
max-age=0, private, must-revalidate
date:
Wed, 27 Nov 2019 22:20:35 GMT
Response Body
Redirecting

Report ID

20191127T222029Z_AS9038_AVPH2YQFQiuYLx32hKn6b3ZHjgLy7owCIh1tie1OLA5sDJ6sC1

Platform

android

OONI Probe version

2.2.0

Measurement Kit version

0.10.6

Raw Measurement Data