Anomaly
http://bk-1x-bet.com/
DNS tampering
Czechia
Country
AS6830
Network
June 28, 2020, 12:19 AM UTC
Date & Time
Websites
Websites
Web Connectivity Test
Runtime: 986ms

On June 28, 2020, 12:19 AM UTC, http://bk-1x-bet.com/ presented signs of DNS tampering on AS6830 in Czechia. This might mean that http://bk-1x-bet.com/ was blocked, but [false positives](https://ooni.org/support/faq/#why-do-false-positives-occur) can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
62.24.68.85
Query:
IN A bk-1x-bet.com
Engine:
system
Name
Class
TTL
Type
DATA
@
IN
CNAME
blocked.dkm.cz
@
IN
A
81.27.195.230

TCP Connections

Connection to 81.27.195.230:80 succeeded.

HTTP Requests

URL
GET https://blocked.dkm.cz/
Response Headers
Date:
Sun, 28 Jun 2020 00:21:03 GMT
Content-Length:
5184
Content-Type:
text/html; charset=UTF-8
Server:
Apache/2.4.10 (Debian)
Response Body
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="cs">
<head>

  <!-- Global Site Tag (gtag.js) - Google Analytics -->
  <script async src="https://www.googletagmanager.com/gtag/js?id=UA-75470544-3"></script>
  <script>
    window.dataLayer = window.dataLayer || [];
    function gtag(){dataLayer.push(arguments)};
    gtag('js', new Date());

    gtag('config', 'UA-75470544-3');
  </script>
  <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
  <meta name="viewport" content="width=device-width, initial-scale=1">

  <title lang="en">451 Unavailable For Legal Reasons</title>

  <!-- Bootstrap CSS -->
  <link rel="stylesheet" href="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/css/bootstrap.min.css" integrity="sha384-BVYiiSIFeK1dGmJRAkycuHAHRg32OmUcww7on3RYdg4Va+PmSTsz/K68vbdEjh4u" crossorigin="anonymous">
  <script src="https://ajax.googleapis.com/ajax/libs/jquery/3.2.1/jquery.min.js"></script>
  <script src="https://maxcdn.bootstrapcdn.com/bootstrap/3.3.7/js/bootstrap.min.js"></script>
  <style type="text/css">
    .list-group-item small {
    width: 100%;
    word-wrap: break-word;
  }
</style>
</head>

<script>
  if (window.location.hostname != "blocked.dkm.cz" && window.location.hostname != "blokacia.dkm.cz") {
  setTimeout("window.top.location.href = 'https://blocked.dkm.cz/index.php?l=cz&ref=' + window.location.hostname;", 750);
}
</script>

<body class="bg-warning">
  <div class="container">
  <p><img src="//blocked.dkm.cz/img/warning.svg" class="img-responsive center-block"></p>
    <div class="alert alert-danger text-center"><strong class="text-uppercase"><p>451 Nedostupné z právních důvodů</p></strong></div>
    <div class="alert alert-danger">
	<p>Internetová stránka <strong></strong> byla zablokována na základě rozhodnutí <abbr title='Seznam nepovolených her'><a href='' target='_blank' class='alert-link'>Ministerstva financí</a></abbr>, neboť na ní byla provozována hazardní hra v rozporu s § 7 odst. 2 písm. b) zákona č. 186/2016 Sb., o hazardních hrách.</p>    </div>
    <div class="panel-group" id="accordion">
            <div class="panel panel-info">
          <div class="panel-heading">
            <h4 class="panel-title">
              <a data-toggle="collapse" data-parent="#accordion" href="#q0">
              	Proč to blokujete?
              </a>
            </h4>
          </div>
          <div id="q0" class="panel-collapse collapse">
            <div class="panel-body">
              Protože je daná stránka na
                <abbr title="Seznam nepovolených her"><a href="http://www.mfcr.cz/blacklist" target="_blank">seznamu</a></abbr>,
                blokování nám ukládá zákon o hazardních hrách.
            </div>
          </div>
        </div>        <div class="panel panel-info">
          <div class="panel-heading">
            <h4 class="panel-title">
              <a data-toggle="collapse" data-parent="#accordion" href="#q1">
              	Jakým způsobem provádíte blokaci?
              </a>
            </h4>
          </div>
          <div id="q1" class="panel-collapse collapse">
            <div class="panel-body">
              Stránky blokujeme pomocí rekurzivních
                <abbr title="Domain Name System">
                <a href="https://cs.wikipedia.org/wiki/Domain_Name_System" target="_blank">DNS</a>
                </abbr> serverů, které provozujeme. Tento způsob je nejsnazší, tedy i nejméně nákladný.
              Žádné <abbr title="Deep Packet Inspection"><a href="https://en.wikipedia.org/wiki/Deep_packet_inspection" target="_blank">DPI</a></abbr> neprovádíme.
            </div>
          </div>
        </div>        <div class="panel panel-info">
          <div class="panel-heading">
            <h4 class="panel-title">
              <a data-toggle="collapse" data-parent="#accordion" href="#q2">
              	Co je DNS?
              </a>
            </h4>
          </div>
          <div id="q2" class="panel-collapse collapse">
            <div class="panel-body">
              <abbr title="Domain Name System"><a href="https://cs.wikipedia.org/wiki/Domain_Name_System" target="_blank">DNS</a></abbr>
              se stará o překlad doménových jmen na IP adresy. Naše servery tedy v případě blokované domény odpovídají
              IP adresou serveru, ze kterého se Vám zobrazuje tato stránka.
            </div>
          </div>
        </div>        <div class="panel panel-info">
          <div class="panel-heading">
            <h4 class="panel-title">
              <a data-toggle="collapse" data-parent="#accordion" href="#q3">
              	Musím používat vaše DNS servery?
              </a>
            </h4>
          </div>
          <div id="q3" class="panel-collapse collapse">
            <div class="panel-body">
              Nemusíte, jedná se pouze o výchozí nastavení. Dotazy na DNS servery mimo naši síť neomezujeme.
            </div>
          </div>
        </div>        
    </div>
  </div>
</body>
</html>

URL
GET http://bk-1x-bet.com/
Response Headers
Date:
Sun, 28 Jun 2020 00:21:03 GMT
Content-Length:
310
Content-Type:
text/html; charset=iso-8859-1
Location:
https://blocked.dkm.cz/
Server:
Apache/2.4.10 (Debian)
Response Body
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://blocked.dkm.cz/">here</a>.</p>
<hr>
<address>Apache/2.4.10 (Debian) Server at bk-1x-bet.com Port 80</address>
</body></html>

Report ID

20200628T001958Z_AS6830_bjIua8FbnP6V6gOVLgHIt6bMm9qTD4uHUWj7X9v6ERJ1km7Pe6

Platform

android

OONI Probe version

2.4.0

Measurement Kit version

0.10.11

Raw Measurement Data