April 7, 2021 at 11:09:42 PM UTC
VERIFY
Anomaly
Websites
Websites
Runtime: 3.3s
Share on Facebook or Twitter
On April 7, 2021 at 11:09:42 PM UTC, http://www.lingeriebowl.com/ presented signs of DNS tampering on AS8400 in Serbia. This might mean that http://www.lingeriebowl.com/ was blocked, but false positives can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
172.68.152.70
Query:
IN A www.lingeriebowl.com
Engine:
system
Name
Class
TTL
Type
DATA
Answer IP Info
@
IN
A
172.98.192.37
AS31863 (Centrilogic, Inc.)

TCP Connections

172.98.192.37:80: succeeded

HTTP Requests

URL
GET http://ww1.lingeriebowl.com/?sub1=5710d542-97f6-11eb-ac8c-7175fe3c0d83
Response Headers
Cache-Control:
no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Content-Type:
text/html; charset=UTF-8
Date:
Wed, 07 Apr 2021 23:09:46 GMT
Expires:
Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified:
Wed, 07 Apr 2021 23:09:45 GMT
Pragma:
no-cache
Server:
NginX
Vary:
Accept-Encoding
X-Adblock-Key:
MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_SjKcRwhf7s1xs1j95O3PESCjUPfDJJjIZVmjktSOgy/NB9OpFy4P2O3AN0gnuAG7ZxGay9ksBisvBOnJLVy7oA==
X-Cache-Miss-From:
parking-6dfcfcdcd9-7lsvf
Response Body
<!DOCTYPE html><html lang="en"  data-adblockkey=MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANnylWw2vLY4hUn9w06zQKbhKBfvjFUCsdFlb6TdQhxb9RXWXuI4t31c+o8fYOv/s8q1LGPga3DE1L/tHU4LENMCAwEAAQ==_SjKcRwhf7s1xs1j95O3PESCjUPfDJJjIZVmjktSOgy/NB9OpFy4P2O3AN0gnuAG7ZxGay9ksBisvBOnJLVy7oA==><head><meta charset="utf-8"><title>lingeriebowl.com&nbsp;-&nbsp</title><meta name="viewport" content="width=device-width,initial-scale=1.0,maximum-scale=1.0,user-scalable=0"><meta name="description" content=" "><link
        rel="icon"
        type="image/png"
        href="//img.sedoparking.com/templates/logos/sedo_logo.png"
/></head><body><img width="16" height="16" src="http://img.sedoparking.com/images/js_preloader.gif"/><script type="text/javascript">
    var request = new XMLHttpRequest();
    request.open('GET', "//ww1.lingeriebowl.com/search/tsc.php?200=Mjg4NDEwMTY3&21=MjEyLjIwMC42NS4zOA==&681=MTYxNzgzNjk4NjRlZDY0ZDRjMjY5ZWNiNWM2MjhiYWMwMzRjYTg2ZTNh&crc=ecd6f670c2f9f03961fb0b0c4bc69ec643bc9578&cv=1");
    request.send();
            request.onreadystatechange = function() {
            if (request.readyState === 4) {
                if (request.status === 200) {
                     window.location = "//ww1.lingeriebowl.com/search/redirect.php?f=http%3A%2F%2Fxml.sedodna.com%2Fclick%3Fi%3DuyGAks8aq0Q_0&amp;v=Mjg2YThhNTRlYWU1NWI2ZDI3NjcwZTUyMWI3ZDEzNmUJMQl3dzEubGluZ2VyaWVib3dsLmNvbTYwNmUzYmI5YjIxNDMxLjAxOTQzMzQ5CXd3MS5saW5nZXJpZWJvd2wuY29tNjA2ZTNiYjliMjE3NzcuMjI3MjY5MzgJMTYxNzgzNjk4NglhZF82M18w&amp;l=OAk1Yjc0NjhjMjMyNzJlNzZiYjU0NjhkZjhmNmI2MTYyYwkwCTEzCTAJYzdmNDBiZmMxMWMwMWUzMWMzMTIwMzcxMmQ1MDEwM2QJMjg4NDEwMTY3CWxpbmdlcmllYm93bAkwCTYzCTAJMAkxNjE3ODM2OTg2CTAuMDAwNDA1CU4JMAkxCTAJMTIwNQk5MjI0MzE1OQkyMTIuMjAwLjY1LjM4CTA%3D"
                }
            }
        }
    </script></body></html>
URL
GET http://www.lingeriebowl.com/
Response Headers
Cache-Control:
max-age=0, private, must-revalidate
Content-Length:
11
Date:
Wed, 07 Apr 2021 23:09:43 GMT
Location:
http://ww1.lingeriebowl.com/?sub1=5710d542-97f6-11eb-ac8c-7175fe3c0d83
Server:
nginx
Set-Cookie:
sid=5710d542-97f6-11eb-ac8c-7175fe3c0d83; path=/; domain=.lingeriebowl.com; expires=Tue, 26 Apr 2089 02:23:51 GMT; max-age=2147483647; HttpOnly
Response Body
Redirecting

Resolver

Resolver ASN
AS13335
Resolver IP
172.68.152.70
Resolver Network Name
Cloudflare, Inc.
Measurement UID
20210407230946.587495_RS_webconnectivity_1728ef0626d4edc4
Report ID
20210407T230839Z_webconnectivity_RS_8400_n1_QsFDi45QJwOClUSS
Platform
android
Software Name
ooniprobe-android (2.10.1)
Measurement Engine
ooniprobe-engine (3.8.0)

Raw Measurement Data

Loading…