Anomaly
http://belsat.eu
DNS tampering
Belarus
Country
AS25106
Network
August 23, 2020, 04:57 PM UTC
Date & Time
Websites
Websites
Runtime: 2.5s

On August 23, 2020, 04:57 PM UTC, http://belsat.eu presented signs of DNS tampering on AS25106 in Belarus.

This might mean that http://belsat.eu was blocked, but false positives can occur.

Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
46.56.125.104
Query:
IN A belsat.eu
Engine:
system
Name
Class
TTL
Type
DATA
@
IN
CNAME
belsat.eu
@
IN
A
134.17.0.7

TCP Connections

Connection to 134.17.0.7:80 succeeded.

HTTP Requests

URL
GET https://internet.mts.by/blocked/
Response Headers
Status:
451
X-Request-Id:
7472a24d-b5c0-481e-80b8-0f0cdbd5bcc2
X-XSS-Protection:
1; mode=block
X-Content-Type-Options:
nosniff
X-Powered-By:
Phusion Passenger 5.0.16
Transfer-Encoding:
chunked
Set-Cookie:
_mts_portal_session=QVJYN0oySnJJZ1FDK25IbllQa2lESE9YZ3VadzhMZWxkcW5ld09DNzdudEUyU0I1d0tlK0tSM3ZjWndONmNQTDVtZlRlMUtUNVRtSVJWeXdveG11NWlTYnZsNjllTkE5NlZ0RStGOXRZQ0NaUEZDeDN1TUxIelVNSjBNL2xhbnlqeHF4eDNVQ3VtVVVHZXBVSDBUOGNBPT0tLXpIOFhmcUJQbjJLQjhUWkZxS3J5aUE9PQ%3D%3D--8297b0cc200f3e562efce77eaf426189153689eb; path=/; HttpOnly
Connection:
keep-alive
Server:
nginx/1.6.3
X-Runtime:
0.008057
Cache-Control:
no-cache
Date:
Sun, 23 Aug 2020 15:59:01 GMT
X-Frame-Options:
SAMEORIGIN
Content-Type:
text/html; charset=utf-8
Response Body
<!DOCTYPE html><!--[if lt IE 7]><html class="ie6"></html><![endif]--><!--[if IE 7]><html class="ie7"></html><![endif]--><!--[if lt IE 8]><html class="ie8"></html><![endif]--><!--[if lt IE 9]><html class="ie9"></html><![endif]--><!--[if (gt IE 9)|!(IE)]><html></html><![endif]--><head><meta charset="utf-8" /><meta content="telephone=no" name="format-detection" /><meta content="ie=edge" http-equiv="x-ua-compatible" /><meta content="width=device-width, initial-scale=1, maximum-scale=1" name="viewport" /><title>МТС Портал</title><script src="/assets/application-cf3ef69434e28905be299ed8b15d5c0785ca818d0af16eb39ee69811e19801f3.js"></script><link rel="stylesheet" media="all" href="/assets/application-4eaa307608b064f37261b67dd59030ad511c4cd0d0fa1f5bdf3dca62fd9518ea.css" /><link rel="shortcut icon" type="image/x-icon" href="/assets/favicon-9c0dbbf81f991cd99b1222e90a8fa41119b5bcef46a018181c5ebb2c52eb0f8a.ico" /><meta name="csrf-param" content="authenticity_token" />
<meta name="csrf-token" content="+i4CpwVP2rAOSVO5Ldq1QydeVWsvgqDmwh2nlEIVuLyzHBbJxMDCs6UHFfH5X37r2pH9NodcjGUyQPyIPrRy2A==" /></head><body><div id="dialog-dummy"></div><div class="pageWrap main"><div class="pageInner"><header><a class="logo-wrapper" href="/"><img class="logo-img" src="/assets/logo_text-304df807991db9ccf44351f4f3851fcc131c52b441031a72209c2adc5cd6aca2.svg" alt="Logo text 304df807991db9ccf44351f4f3851fcc131c52b441031a72209c2adc5cd6aca2" /></a></header><div class="pageBlock"><div class="box-access"><img class="access-img" src="/assets/access-aa9c953f10a4b5cc2b9a45763f84aa5d68f4b260a841aa6e67b4d14080edbeca.svg" alt="Access aa9c953f10a4b5cc2b9a45763f84aa5d68f4b260a841aa6e67b4d14080edbeca" /><p>Доступ к ресурсу ограничен на основании решения Министерства информации Республики Беларусь, принятого в соответствии с Законом Республики Беларусь "О средствах массовой информации".</p></div></div></div><footer><ul class="footer-links"><li><a target="_blank" href="http://www.mts.by/">Сайт МТС</a></li><li><a target="_blank" href="https://ihelper.mts.by/selfcare/">Интернет-помощник</a></li><li><a target="_blank" href="https://help.mts.by/hc/ru/requests/new?ticket_form_id=34982">Онлайн-поддержка</a></li><li><a target="_blank" href="http://www.mts.by/contacts/">Контакты</a></li></ul><div class="copyright">© 2002-2020 СООО &laquo;Мобильные ТелеСистемы&raquo;. Все права защищены.</div></footer></div></body></html>
URL
GET http://belsat.eu/
Response Headers
Date:
Sun, 23 Aug 2020 16:18:42 GMT
Content-Length:
240
Content-Type:
text/html; charset=iso-8859-1
Location:
https://internet.mts.by/blocked/
Server:
Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Response Body
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">
<html><head>
<title>301 Moved Permanently</title>
</head><body>
<h1>Moved Permanently</h1>
<p>The document has moved <a href="https://internet.mts.by/blocked/">here</a>.</p>
</body></html>
Report ID
20200823T165741Z_AS25106_zRWSUBh761dxfakfeSIAMYsyz7YlnCxB4SXMmpIJSDZQb7c4pn
Platform
android
Software Name
ooniprobe-android (2.5.2)
Measurement Engine
libmeasurement_kit (0.10.12)

Raw Measurement Data

Loading