Anomaly
http://www.konthaiuk.com/forum/
DNS tampering
Thailand
Country
AS17552
Network
June 26, 2020, 02:32 AM UTC
Date & Time
Websites
Websites
Web Connectivity Test
Runtime: 4.1s

On June 26, 2020, 02:32 AM UTC, http://www.konthaiuk.com/forum/ presented signs of DNS tampering on AS17552 in Thailand. This might mean that http://www.konthaiuk.com/forum/ was blocked, but [false positives](https://ooni.org/support/faq/#why-do-false-positives-occur) can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
(unknown)
Query:
IN A www.konthaiuk.com
Engine:
Name
Class
TTL
Type
DATA
@
IN
TTL
CNAME
HDRedirect-LB5-1afb6e2973825a56.elb.us-east-1.amazonaws.com
@
IN
TTL
A
23.20.239.12

TCP Connections

Connection to 23.20.239.12:80 succeeded.

HTTP Requests

URL
GET http://tcsd.info/
Response Headers
content-encoding:
set-cookie:
sid=cd733106-b757-11ea-93a8-1c608ae43ba9; path=/; domain=.tcsd.info; expires=Wed, 14 Jul 2088 06:04:39 GMT; max-age=2147483647; HttpOnly
server:
nginx
cache-control:
max-age=0, private, must-revalidate
date:
Fri, 26 Jun 2020 02:50:32 GMT
content-type:
text/html; charset=utf-8
Response Body
<html><head><title>Loading...</title></head><body><script type='text/javascript'>window.location.replace('http://tcsd.info/?js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTU5MzE0NzAzMiwiaWF0IjoxNTkzMTM5ODMyLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyb2R2Z2Y1MzRvb2NzZmpwbDQxMjNiNjQiLCJuYmYiOjE1OTMxMzk4MzIsInRzIjoxNTkzMTM5ODMyNTI0NDU5fQ.2ElvrPpm0sVkYzQcN04GMEyPaGwE-qrIjZIq2gr_RGc&sid=cd733106-b757-11ea-93a8-1c608ae43ba9');</script></body></html>
URL
GET http://www.konthaiuk.com/forum/
Response Headers
Date:
Fri, 26 Jun 2020 02:50:32 GMT
Content-type:
text/plain
Location:
http://tcsd.info/
Response Body

Empty body

Report ID

20200626T023258Z_AS17552_HyCn0e6Zu1IQdiieuas3OQXDmkK0RMfB8YQkEGvVchL7ir6iPF

Platform

macos

OONI Probe version

2.3.0

Measurement Kit version

none

Raw Measurement Data