SearchMAT ChartsCircumvention ChartsCountriesNetworksDomainsFindings
January 28, 2020 at 12:12:57 PM UTC
VERIFY
Anomaly
http://www.counter-strike.net/
DNS tampering
Portugal
AS199155
Websites
Websites
Web Connectivity Test 
Runtime: 2.3s
Share on Facebook or Twitter
On January 28, 2020 at 12:12:57 PM UTC, http://www.counter-strike.net/ presented signs of DNS tampering on AS199155 in Portugal. This might mean that http://www.counter-strike.net/ was blocked, but false positives can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
74.125.73.87
Query:
IN A www.counter-strike.net
Engine:
system
Name
Class
TTL
Type
DATA
Answer IP Info
@
IN
CNAME
www.counter-strike.net
Unknown AS
@
IN
A
2.20.27.179
Unknown AS

TCP Connections

2.20.27.179:80: succeeded

HTTP Requests

URL
GET http://www.counter-strike.net/
Response Headers
Content-Length:
2513
X-XSS-Protection:
1; mode=block
Content-Security-Policy:
frame-ancestors
X-Content-Type-Options:
nosniff
Connection:
Close
X-Frame-Options:
SAMEORIGIN
Content-Type:
text/html; charset="utf-8"
Response Body
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
    <title>Acesso Não Autorizado</title>
    <style type="text/css">
        html, body { margin: 0; padding: 0; font-family: Verdana, Arial, sans-serif; font-size: 10pt; }
        h1, h2 { height: 82px; text-indent: -999em; margin: 0; padding: 0; margin: 0; }
        div { margin: 0; padding: 0; }
        div.header { background: url(http://www.counter-strike.net:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 0 repeat-x; height: 82px; }
        div.header h1 { background: url(http://www.counter-strike.net:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGHGFHBGCHEGPFHHGG) 0 0 no-repeat; }
        div.header h2 { background: url(http://www.counter-strike.net:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -82px no-repeat; width: 160px; float: right; }
        div.sidebar { width: 195px; height: 200px; float: left; }
        div.main { padding: 5px; margin-left: 195px; }
        div.buttons { margin-top: 30px; text-align: right; }
        h3 { margin: 36px 0; font-size: 16pt; }
        .blocked      h3 { color: #c00; }
        .authenticate h3 { color: #36c; }
        h2.fgd_icon { background: url(http://www.counter-strike.net:8008/XX/YY/ZZ/CI/MGPGHGPGPFGHCDPFGGOGFGEH) 0 -166px repeat-x; width: 90px; height: 92px; margin: 48px auto; }
        .blocked      h2.fgd_icon { background-position: 0 -166px; }
        .authenticate h2.fgd_icon { background-position: -89px -166px; }
        form { width: 300px; margin: 30px 0; }
        label { display: block; width: 300px; margin: 5px 0; line-height: 25px; }
        label input { width: 200px; border: 1px solid #7f9db9; height: 20px; float: right; }
    </style>
</head>
<body class="blocked">
    <div class="main">
    <img src=http://www.counter-strike.net:8008/XX/YY/ZZ/CI/NGFGDG >
<h3>ACESSO NÃO AUTORIZADO</h3>
<div class="notice">
    <p>A página pretendida foi catalogada como contendo conteúdos impróprios (filtro automático).<br>
	Caso considere que a página em questão tem interesse pedagógico por favor solicite, através da direção da sua escola, o seu desbloqueio na Plataforma de Apoio TIC em <a href="http://apoio.dgeec.mec.pt">http://apoio.dgeec.mec.pt</a></p>
    <p>
        URL: http://www.counter-strike.net/<br />
        Categoria: Games
        <br/>IP Cliente: [REDACTED]
        <br/>IP Servidor: 2.20.27.179
    </p>
    <p>
       
    </p>
</div>
    </div>
</body>
</html>
Measurement UID
01202001284903dc63cce3526de1e3d2fea55c2d
Report ID
20200127T131222Z_AS199155_S3hrkYeFavuCizDS5s2GRKYxeUj7AAc5JXxRDRDLIYcfity5qw
Platform
android
Software Name
ooniprobe-android (2.2.0)
Measurement Engine
libmeasurement_kit (0.10.6)

Raw Measurement Data

Loading…