Anomaly
http://www.google.com/search?q=gay
HTTP blocking (a blockpage might be served)
Moldova
Country
AS43289
Network
June 28, 2020, 02:48 AM UTC
Date & Time
Websites
Websites
Web Connectivity Test
Runtime: 11.2s

On June 28, 2020, 02:48 AM UTC, http://www.google.com/search?q=gay presented signs of HTTP blocking (a blockpage might be served) on AS43289 in Moldova. This might mean that http://www.google.com/search?q=gay was blocked, but [false positives](https://ooni.org/support/faq/#why-do-false-positives-occur) can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
51.77.135.89
Query:
IN A www.google.com
Engine:
system
Name
Class
TTL
Type
DATA
@
IN
CNAME
www.google.com
@
IN
A
216.58.213.132

TCP Connections

Connection to 216.58.213.132:80 succeeded.

HTTP Requests

URL
GET http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fq%3Dgay&q=EgSyEa7TGKiK4PcFIhkA8aeDS9LFIKcvufHv0YSPLi6XMF-nNikeMgFy
Response Headers
Content-Length:
2834
X-XSS-Protection:
0
Expires:
Fri, 01 Jan 1990 00:00:00 GMT
Server:
HTTP server (unknown)
Pragma:
no-cache
Cache-Control:
no-store, no-cache, must-revalidate
Date:
Sun, 28 Jun 2020 02:49:16 GMT
Content-Type:
text/html
Response Body
<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head><meta http-equiv="content-type" content="text/html; charset=utf-8"><meta name="viewport" content="initial-scale=1"><title>http://www.google.com/search?q=gay</title></head>
<body style="font-family: arial, sans-serif; background-color: #fff; color: #000; padding:20px; font-size:18px;" onload="e=document.getElementById('captcha');if(e){e.focus();}">
<div style="max-width:400px;">
<hr noshade size="1" style="color:#ccc; background-color:#ccc;"><br>
<form id="captcha-form" action="index" method="post">
<script src="https://www.google.com/recaptcha/api.js" async defer></script>
<script>var submitCallback = function(response) {document.getElementById('captcha-form').submit();};</script>
<div id="recaptcha" class="g-recaptcha" data-sitekey="6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b" data-callback="submitCallback" data-s="_ngHDzs6uwxC35-DlNS5nyhilBlP21R8mJbGcT8TWYG0ubXtzrtH8Vz7QnNwOFC3fia4TVnwYpiEVlBEErepVoOe0aodPydBxydyydybTAVvyYmi26mFL3Sc1Hx2ySOE4AzT40AEvJ10rlPoTyBKhpv4GmfxP8NqN6j0zQgUyrYQsN3MI85xzwjwwqgB_5XLrbJCPSo7y1Vl21i6HYVPpkOvPTRcrvSYENOGdUHhtUuD_SYYmGSbxn0"></div>
<input type='hidden' name='q' value='EgSyEa7TGKiK4PcFIhkA8aeDS9LFIKcvufHv0YSPLi6XMF-nNikeMgFy'><input type="hidden" name="continue" value="http://www.google.com/search?q=gay">
</form>
<hr noshade size="1" style="color:#ccc; background-color:#ccc;">

<div style="font-size:13px;">
<b>About this page</b><br><br>

Our systems have detected unusual traffic from your computer network.  This page checks to see if it&#39;s really you sending the requests, and not a robot.  <a href="#" onclick="document.getElementById('infoDiv').style.display='block';">Why did this happen?</a><br><br>

<div id="infoDiv" style="display:none; background-color:#eee; padding:10px; margin:0 0 15px 0; line-height:1.4em;">
This page appears when Google automatically detects requests coming from your computer network which appear to be in violation of the <a href="//www.google.com/policies/terms/">Terms of Service</a>. The block will expire shortly after those requests stop.  In the meantime, solving the above CAPTCHA will let you continue to use our services.<br><br>This traffic may have been sent by malicious software, a browser plug-in, or a script that sends automated requests.  If you share your network connection, ask your administrator for help &mdash; a different computer using the same IP address may be responsible.  <a href="//support.google.com/websearch/answer/86640">Learn more</a><br><br>Sometimes you may be asked to solve the CAPTCHA if you are using advanced terms that robots are known to use, or sending requests very quickly.
</div>

IP address: [REDACTED]<br>Time: 2020-06-28T02:49:16Z<br>URL: http://www.google.com/search?q=gay<br>
</div>
</div>
</body>
</html>
URL
GET http://www.google.com/search?q=gay
Response Headers
Content-Length:
341
X-XSS-Protection:
0
Set-Cookie:
CGIC=Ij90ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSwqLyo7cT0wLjg; expires=Fri, 25-Dec-2020 02:49:13 GMT; path=/search; domain=.google.com; HttpOnly
Server:
gws
Location:
http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fq%3Dgay&q=EgSyEa7TGKiK4PcFIhkA8aeDS9LFIKcvufHv0YSPLi6XMF-nNikeMgFy
Date:
Sun, 28 Jun 2020 02:49:13 GMT
X-Frame-Options:
SAMEORIGIN
Content-Type:
text/html; charset=UTF-8
x-hallmonitor-challenge:
CgwIqYrg9wUQ5pXDggESBLIRrtM
Response Body
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<TITLE>302 Moved</TITLE></HEAD><BODY>
<H1>302 Moved</H1>
The document has moved
<A HREF="http://www.google.com/sorry/index?continue=http://www.google.com/search%3Fq%3Dgay&amp;q=EgSyEa7TGKiK4PcFIhkA8aeDS9LFIKcvufHv0YSPLi6XMF-nNikeMgFy">here</A>.
</BODY></HTML>

Report ID

20200628T024815Z_AS43289_ciy2VvewvKjFzffmwZ9egm2v10rhMo8qg4Aht06LcbCbGOLlnB

Platform

android

OONI Probe version

2.4.0

Measurement Kit version

0.10.11

Raw Measurement Data