Anomaly
http://belsat.eu
DNS tampering
Belarus
Country
AS25106
Network
August 23, 2020, 10:57 PM UTC
Date & Time
Websites
Runtime: 1.3s
On August 23, 2020, 10:57 PM UTC, http://belsat.eu presented signs of DNS tampering on AS25106 in Belarus.
This might mean that http://belsat.eu was blocked, but false positives can occur.
Please explore the network measurement data below.
Failures
HTTP Experiment
null
DNS Experiment
null
Control
null
DNS Queries
Resolver:
87.252.243.96
Query:
IN A belsat.eu
Engine:
system
Name
Class
TTL
Type
DATA
@
IN
CNAME
belsat.eu
@
IN
A
134.17.0.7
TCP Connections
Connection to 134.17.0.7:80 succeeded.
HTTP Requests
URL
GET https://internet.mts.by/blocked/
Response Headers
Status:451X-Request-Id:3edba0c3-7be1-4658-ac22-7540608b589eX-XSS-Protection:1; mode=blockX-Content-Type-Options:nosniffX-Powered-By:Phusion Passenger 5.0.16Transfer-Encoding:chunkedSet-Cookie:_mts_portal_session=dmFFYWNTTjhoZFI0dnVQNmJzVHVvejhtVlhqd3ZDc010V2lHL1g2REhweGlSdjhIazdaR3JKOFc1UVJSQ2lMZm1EaVMrWEF3NDFEa1lmYzVrWHcrQmNEVlF1dWNQVEtkdFcyTlNWQjZzaXR0OGdrSStnT1lMSVN4TCs4UlBQZTN0TDdvRkc2ZWhtMFlxWWo0dC96WkxnPT0tLVJJR1JPVzh1My9WWGVUZ3NTWGcwSUE9PQ%3D%3D--7040d9d0ada3644e6787ea8b16f06c3137f167e5; path=/; HttpOnlyConnection:keep-aliveServer:nginx/1.6.3X-Runtime:0.005590Cache-Control:no-cacheDate:Sun, 23 Aug 2020 21:59:00 GMTX-Frame-Options:SAMEORIGINContent-Type:text/html; charset=utf-8
Response Body
<!DOCTYPE html><!--[if lt IE 7]><html class="ie6"></html><![endif]--><!--[if IE 7]><html class="ie7"></html><![endif]--><!--[if lt IE 8]><html class="ie8"></html><![endif]--><!--[if lt IE 9]><html class="ie9"></html><![endif]--><!--[if (gt IE 9)|!(IE)]><html></html><![endif]--><head><meta charset="utf-8" /><meta content="telephone=no" name="format-detection" /><meta content="ie=edge" http-equiv="x-ua-compatible" /><meta content="width=device-width, initial-scale=1, maximum-scale=1" name="viewport" /><title>МТС Портал</title><script src="/assets/application-cf3ef69434e28905be299ed8b15d5c0785ca818d0af16eb39ee69811e19801f3.js"></script><link rel="stylesheet" media="all" href="/assets/application-4eaa307608b064f37261b67dd59030ad511c4cd0d0fa1f5bdf3dca62fd9518ea.css" /><link rel="shortcut icon" type="image/x-icon" href="/assets/favicon-9c0dbbf81f991cd99b1222e90a8fa41119b5bcef46a018181c5ebb2c52eb0f8a.ico" /><meta name="csrf-param" content="authenticity_token" /> <meta name="csrf-token" content="5L3ZxxTkNCezUkg6C5qBKJqXk543mGDg5MAbILdWUgZrLOGhvjmMfZNotPTGN9k+FUVMA+2sJk9xpNol87I+eA==" /></head><body><div id="dialog-dummy"></div><div class="pageWrap main"><div class="pageInner"><header><a class="logo-wrapper" href="/"><img class="logo-img" src="/assets/logo_text-304df807991db9ccf44351f4f3851fcc131c52b441031a72209c2adc5cd6aca2.svg" alt="Logo text 304df807991db9ccf44351f4f3851fcc131c52b441031a72209c2adc5cd6aca2" /></a></header><div class="pageBlock"><div class="box-access"><img class="access-img" src="/assets/access-aa9c953f10a4b5cc2b9a45763f84aa5d68f4b260a841aa6e67b4d14080edbeca.svg" alt="Access aa9c953f10a4b5cc2b9a45763f84aa5d68f4b260a841aa6e67b4d14080edbeca" /><p>Доступ к ресурсу ограничен на основании решения Министерства информации Республики Беларусь, принятого в соответствии с Законом Республики Беларусь "О средствах массовой информации".</p></div></div></div><footer><ul class="footer-links"><li><a target="_blank" href="http://www.mts.by/">Сайт МТС</a></li><li><a target="_blank" href="https://ihelper.mts.by/selfcare/">Интернет-помощник</a></li><li><a target="_blank" href="https://help.mts.by/hc/ru/requests/new?ticket_form_id=34982">Онлайн-поддержка</a></li><li><a target="_blank" href="http://www.mts.by/contacts/">Контакты</a></li></ul><div class="copyright">© 2002-2020 СООО «Мобильные ТелеСистемы». Все права защищены.</div></footer></div></body></html>
URL
GET http://belsat.eu/
Response Headers
Date:Sun, 23 Aug 2020 22:18:42 GMTContent-Length:240Content-Type:text/html; charset=iso-8859-1Location:https://internet.mts.by/blocked/Server:Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Response Body
<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"> <html><head> <title>301 Moved Permanently</title> </head><body> <h1>Moved Permanently</h1> <p>The document has moved <a href="https://internet.mts.by/blocked/">here</a>.</p> </body></html>
Report ID
20200823T225742Z_AS25106_SIzfVmHTOOUY7kaZWmft1TBakKHBzSk8TXhIFalOUFX7JjM7wY
Platform
android
Software Name
ooniprobe-android (2.5.2)
Measurement Engine
libmeasurement_kit (0.10.12)