SearchMAT ChartsCircumvention ChartsCountriesNetworksDomainsFindings
June 4, 2017 at 6:08:59 AM UTC
VERIFY
Anomaly
http://www.babylon-x.com
HTTP blocking (a blockpage might be served)
Egypt
AS8452
Websites
Websites
Web Connectivity Test 
Runtime: 305ms
Share on Facebook or Twitter
On June 4, 2017 at 6:08:59 AM UTC, http://www.babylon-x.com presented signs of HTTP blocking (a blockpage might be served) on AS8452 in Egypt. This might mean that http://www.babylon-x.com was blocked, but false positives can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
104.238.186.189
Query:
IN A www.babylon-x.com
Engine:
Name
Class
TTL
Type
DATA
Answer IP Info
@
IN
TTL
A
185.53.179.6
Unknown AS

TCP Connections

185.53.179.6:80: succeeded

HTTP Requests

URL
GET http://onclkds.com/afu.php?zoneid=1251527
Response Headers
content-encoding:
Set-Cookie:
SeenToday=1; expires=Mon, 05-Jun-2017 08:09:01 GMT; path=/
Expires:
Mon, 26 Jul 1997 05:00:00 GMT
Server:
QRATOR
Pragma:
no-cache
Cache-Control:
private, max-age=0, no-cache
Date:
Sun, 04 Jun 2017 08:09:02 GMT
P3P:
CP="CUR ADM OUR NOR STA NID"
Content-Type:
text/html
Timing-Allow-Origin:
*
Response Body
<!doctype html>
<html lang="en" xmlns="http://www.w3.org/1999/html">
<head>
    <meta charset="UTF-8">
    <title>Redirect</title>
        <link rel="dns-prefetch" href="//content1req.com" />
        <noscript><meta id="meta-refresh" http-equiv="refresh" content="1; url=/?r=/mb/han&zoneid=1251527&pbk2=164593c14faec1c1bd7ddd243c926ade6427692325166215051&zoneid=1251527&uuid=f8b9af3c-543b-47d8-9a24-9c235f0a9505&ad_scheme=1&route_id=0&rotation_type=6&adparams=bm9qcz0x"></noscript>
    <style>
        .click {color: white;display:none;}
    </style>

</head>
<body>




<form action="/" method="get" id="submit-form">
            <input type="hidden" name="r" value="/mb/han" />
            <input type="hidden" name="zoneid" value="1251527" />
            <input type="hidden" name="pbk2" value="164593c14faec1c1bd7ddd243c926ade6427692325166215051" />
            <input type="hidden" name="uuid" value="f8b9af3c-543b-47d8-9a24-9c235f0a9505" />
            <input type="hidden" name="ad_scheme" value="1" />
            <input type="hidden" name="route_id" value="0" />
            <input type="hidden" name="rotation_type" value="6" />
            <input type="hidden" name="adparams" value="bm9qcz0w" />
            <input type="hidden" name="x" value="" id="a" />
    <input type="hidden" name="y" value="" id="b" />
    
    <input type='hidden' name='sw' value='' id='ci_SW' />
<input type='hidden' name='sh' value='' id='ci_SH' />
<input type='hidden' name='wx' value='' id='ci_WX' />
<input type='hidden' name='wy' value='' id='ci_WY' />
<input type='hidden' name='ww' value='' id='ci_WW' />
<input type='hidden' name='wh' value='' id='ci_WH' />
<input type='hidden' name='wiw' value='' id='ci_WIW' />
<input type='hidden' name='wih' value='' id='ci_WIH' />
<input type='hidden' name='wfc' value='' id='ci_WFC' />
<input type='hidden' name='pl' value='' id='ci_PL' />
<input type='hidden' name='drf' value='' id='ci_DRF' />
<input type='hidden' name='np' value='' id='ci_NP' />
<input type='hidden' name='pt' value='' id='ci_PT' />
<input type='hidden' name='nb' value='' id='ci_NB' />
<input type='hidden' name='ng' value='' id='ci_NG' />
<input type='hidden' name='dm' value='' id='ci_DM' />
<input type='hidden' name='cf' value='' id='ci_CF' />
<input type='hidden' name='id' value='4f5b5dcc10fb07bafd88ebfd269a8c45' id='ci_ID' />
<input type='hidden' name='co' value='1' id='ci_co' />
<input type='hidden' name='rf' value='0' id='ci_rf' />
<input type='hidden' name='hs' value='d01d492f13aec958676a3d4656a2a36c' id='ci_hs' />        <input type="hidden" name="ix" value="" id="ix" />
    <input type="hidden" name="fs" value="" id="fs" />
    <input type="hidden" name="timeout" value="0" id="timeout" />
</form>
<a href="/index.php?r=/bl&zoneid=1251527" class="click">click here</a>

<script type="text/javascript">
    mTop = top;
    mSelf = self;
    submited = false;

    function submit() {

        if (submited) {
            return false;
        }

        submited = true;

                        eval(function(p,a,c,k,e,d){e=function(c){return c.toString(36)};if(!''.replace(/^/,String)){while(c--){d[c.toString(a)]=k[c]||c.toString(a)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('c a;c b;c 6;l(9 4.k!=\'8\'){a=4.k;b=4.m}i l(9 3.5!=\'8\'&&9 3.5.7!=\'8\'&&3.5.7!=0){a=3.5.7;b=3.5.g}i{a=3.j(\'h\')[0].7;b=3.j(\'h\')[0].g}o{6=4.n!==4.q?1:0}p(e){6=2}3.d(\'a\').f=a;3.d(\'b\').f=b;3.d(\'6\').f=6;',27,27,'|||document|window|documentElement|ix|clientWidth|undefined|typeof|||var|getElementById||value|clientHeight|body|else|getElementsByTagName|innerWidth|if|innerHeight|self|try|catch|top'.split('|'),0,{}));
        
        
        var flash = 0;
        try {
            var FlashDetect=new function(){
                var self=this;self.installed=false;self.raw="";self.major=-1;self.minor=-1;self.revision=-1;self.revisionStr="";var activeXDetectRules=[{"name":"ShockwaveFlash.ShockwaveFlash.7","version":function(obj){return getActiveXVersion(obj);}},{"name":"ShockwaveFlash.ShockwaveFlash.6","version":function(obj){var version="6,0,21";try{obj.AllowScriptAccess="always";version=getActiveXVersion(obj);}catch(err){}
                    return version;}},{"name":"ShockwaveFlash.ShockwaveFlash","version":function(obj){return getActiveXVersion(obj);}}];var getActiveXVersion=function(activeXObj){var version=-1;try{version=activeXObj.GetVariable("$version");}catch(err){}
                    return version;};var getActiveXObject=function(name){var obj=-1;try{obj=new ActiveXObject(name);}catch(err){obj={activeXError:true};}
                    return obj;};var parseActiveXVersion=function(str){var versionArray=str.split(",");return{"raw":str,"major":parseInt(versionArray[0].split(" ")[1],10),"minor":parseInt(versionArray[1],10),"revision":parseInt(versionArray[2],10),"revisionStr":versionArray[2]};};var parseStandardVersion=function(str){var descParts=str.split(/ +/);var majorMinor=descParts[2].split(/\./);var revisionStr=descParts[3];return{"raw":str,"major":parseInt(majorMinor[0],10),"minor":parseInt(majorMinor[1],10),"revisionStr":revisionStr,"revision":parseRevisionStrToInt(revisionStr)};};var parseRevisionStrToInt=function(str){return parseInt(str.replace(/[a-zA-Z]/g,""),10)||self.revision;};self.majorAtLeast=function(version){return self.major>=version;};self.minorAtLeast=function(version){return self.minor>=version;};self.revisionAtLeast=function(version){return self.revision>=version;};self.versionAtLeast=function(major){var properties=[self.major,self.minor,self.revision];var len=Math.min(properties.length,arguments.length);for(i=0;i<len;i++){if(properties[i]>=arguments[i]){if(i+1<len&&properties[i]==arguments[i]){continue;}else{return true;}}else{return false;}}};self.FlashDetect=function(){if(navigator.plugins&&navigator.plugins.length>0){var type='application/x-shockwave-flash';var mimeTypes=navigator.mimeTypes;if(mimeTypes&&mimeTypes[type]&&mimeTypes[type].enabledPlugin&&mimeTypes[type].enabledPlugin.description){var version=mimeTypes[type].enabledPlugin.description;var versionObj=parseStandardVersion(version);self.raw=versionObj.raw;self.major=versionObj.major;self.minor=versionObj.minor;self.revisionStr=versionObj.revisionStr;self.revision=versionObj.revision;self.installed=true;}}else if(navigator.appVersion.indexOf("Mac")==-1&&window.execScript){var version=-1;for(var i=0;i<activeXDetectRules.length&&version==-1;i++){var obj=getActiveXObject(activeXDetectRules[i].name);if(!obj.activeXError){self.installed=true;version=activeXDetectRules[i].version(obj);if(version!=-1){var versionObj=parseActiveXVersion(version);self.raw=versionObj.raw;self.major=versionObj.major;self.minor=versionObj.minor;self.revision=versionObj.revision;self.revisionStr=versionObj.revisionStr;}}}}}();
            };

            if (FlashDetect.major > 0) {
                flash = 1;
            }
        } catch (e) {
            flash = 2;
        }

        window.document.getElementById("fs").value=flash;

        eval(function(p,a,c,k,e,d){e=function(c){return(c<a?'':e(parseInt(c/a)))+((c=c%a)>35?String.fromCharCode(c+29):c.toString(36))};if(!''.replace(/^/,String)){while(c--){d[e(c)]=k[c]||e(c)}k=[function(e){return d[e]}];e=function(){return'\\w+'};c=1};while(c--){if(k[c]){p=p.replace(new RegExp('\\b'+e(c)+'\\b','g'),k[c])}}return p}('k 1h(d){8{f.j(\'1z\').h=d.S}5(e){}8{f.j(\'1B\').h=d.T}5(e){}8{f.j(\'1D\').h=d.P}5(e){}8{f.j(\'1w\').h=d.M}5(e){}8{f.j(\'1r\').h=d.O}5(e){}8{f.j(\'1s\').h=d.U}5(e){}8{f.j(\'1v\').h=d.V}5(e){}8{f.j(\'1t\').h=d.11}5(e){}8{f.j(\'1O\').h=d.X}5(e){}8{f.j(\'1R\').h=d.Q}5(e){}8{f.j(\'1T\').h=d.13}5(e){}8{f.j(\'1S\').h=d.12}5(e){}8{f.j(\'1N\').h=d.15}5(e){}8{f.j(\'1G\').h=d.Y}5(e){}8{f.j(\'1U\').h=d.W}5(e){}8{f.j(\'1K\').h=d.1L}5(e){}8{f.j(\'1I\').h=d.J}5(e){}}b 4={};8{4.S=n.1m.1M;4.T=n.1m.1Q}5(e){4.S=-1;4.T=-1}8{4.P=n.1P;4.M=n.1F}5(e){4.P=-1;4.M=-1}8{4.O=n.1E;4.U=n.1u}5(e){4.O=-1;4.U=-1}8{4.V=n.1p;4.11=n.1q}5(e){4.V=-1;4.11=-1}8{4.X=n.1x.1C.z}5(e){4.X=-1}8{4.Q=f.1A.1y}5(e){4.Q=\'\'}8{4.13=f.23}5(e){4.13=\'\'}8{4.12=(!(u.G 1V 2k)||u.G.z==0)?0:1}5(e){4.12=-1}8{4.15=n.2h||n.2e}5(e){4.15=\'\'}8{4.Y=1j(u.2g)==="k"?1:0}5(e){4.Y=-1}8{4.W=1j(u.2m)!=="2o"?1:0}5(e){4.W=-1}4.J=0;8{b 1a=1n k(){b 9=2n;9.19=1o;9.y="";9.p=-1;9.s=-1;9.r=-1;9.q="";b L=[{"B":"A.A.7","c":k(l){m H(l)}},{"B":"A.A.6","c":k(l){b c="6,0,21";8{l.2c="22";c=H(l)}5(14){}m c}},{"B":"A.A","c":k(l){m H(l)}}];b H=k(1d){b c=-1;8{c=1d.2d("\\$c")}5(14){}m c};b 1e=k(B){b l=-1;8{l=1n 20(B)}5(14){l={1l:I}}m l};b 1i=k(v){b D=v.F(",");m{"y":v,"p":C(D[0].F(" ")[1],10),"s":C(D[1],10),"r":C(D[2],10),"q":D[2]}};b 1g=k(v){b 16=v.F(/ +/);b N=16[2].F(/\\./);b q=16[3];m{"y":v,"p":C(N[0],10),"s":C(N[1],10),"q":q,"r":1k(q)}};b 1k=k(v){m C(v.1Y(/[a-24-Z]/g,""),10)||9.r};9.25=k(c){m 9.p>=c};9.2a=k(c){m 9.s>=c};9.2b=k(c){m 9.r>=c};9.29=k(p){b K=[9.p,9.s,9.r];b R=28.26(K.z,1b.z);1f(i=0;i<R;i++){t(K[i]>=1b[i]){t(i+1<R&&K[i]==1b[i]){27}17{m I}}17{m 1o}}};9.1a=k(){t(u.G&&u.G.z>0){b E=\'1X/x-1W-1Z\';b w=u.w;t(w&&w[E]&&w[E].18&&w[E].18.1c){b c=w[E].18.1c;b o=1g(c);9.y=o.y;9.p=o.p;9.s=o.s;9.q=o.q;9.r=o.r;9.19=I}}17 t(u.2l.2f("2i")==-1&&n.2j){b c=-1;1f(b i=0;i<L.z&&c==-1;i++){b l=1e(L[i].B);t(!l.1l){9.19=I;c=L[i].c(l);t(c!=-1){b o=1i(c);9.y=o.y;9.p=o.p;9.s=o.s;9.r=o.r;9.q=o.q}}}}}()};t(1a.p>0){4.J=1}}5(e){4.J=2}8{1h(4)}5(e){1H.1J(e)}',62,149,'||||QC|catch|||try|self||var|version|||document||value||getElementById|function|obj|return|window|versionObj|major|revisionStr|revision|minor|if|navigator|str|mimeTypes||raw|length|ShockwaveFlash|name|parseInt|versionArray|type|split|plugins|getActiveXVersion|true|CF|properties|activeXDetectRules|WY|majorMinor|WW|WX|PL|len|SW|SH|WH|WIW|NG|WFC|NB|||WIH|NP|DRF|err|PT|descParts|else|enabledPlugin|installed|FlashDetect|arguments|description|activeXObj|getActiveXObject|for|parseStandardVersion|QCDone|parseActiveXVersion|typeof|parseRevisionStrToInt|activeXError|screen|new|false|innerWidth|innerHeight|ci_WW|ci_WH|ci_WIH|outerHeight|ci_WIW|ci_WY|top|href|ci_SW|location|ci_SH|frames|ci_WX|outerWidth|screenY|ci_NB|console|ci_CF|log|ci_DM|DM|width|ci_PT|ci_WFC|screenX|height|ci_PL|ci_NP|ci_DRF|ci_NG|instanceof|shockwave|application|replace|flash|ActiveXObject||always|referrer|zA|majorAtLeast|min|continue|Math|versionAtLeast|minorAtLeast|revisionAtLeast|AllowScriptAccess|GetVariable|_phantom|indexOf|sendBeacon|callPhantom|Mac|execScript|PluginArray|appVersion|geolocation|this|undefined'.split('|'),0,{}))

        
        
        
        
                try {
            navigator.sendBeacon('//my.rtmark.net/img.gif?f=merge&userId=cb0b57b0748f21f4de3c77b3a19dd3dd');
        } catch (e) {}
        
        
        
                try {
            navigator.sendBeacon('//mt.rtmark.net/omr.gif?s=rtg_afu&geo=EG&zoneid=1251527&oaid=1');
        } catch (e) {}
        

        
        window.document.getElementById("submit-form").submit();

    }

    function submitByTimeout(){
        window.document.getElementById("timeout").value=1;
        submit();
    }
        submit();
    
    

</script>
</body>
</html>
URL
GET http://go.pub2srv.com/afu.php?zoneid=1251527
Response Headers
Date:
Sun, 04 Jun 2017 08:09:01 GMT
Content-Type:
text/html
Location:
http://onclkds.com/afu.php?zoneid=1251527
Timing-Allow-Origin:
*
Server:
nginx
Response Body

Empty body

URL
GET http://www.babylon-x.com
Response Headers
Location:
http://go.pub2srv.com/afu.php?zoneid=1251527
Response Body

Empty body

Measurement UID
0120170604cd506d29b2fff6cdf784f6434293bb
Report ID
20170604T075102Z_AS8452_zbpJ7JDsbnj7zRpzQI6cBQ8Mhe0F0vWPryWmqd29l6Ej764JW5
Platform
linux
Software Name
ooniprobe (2.1.0)
Measurement Engine
Unavailable

Raw Measurement Data

Loading…