October 1, 2017 at 4:02:23 PM UTC
VERIFY
Anomaly
HTTP blocking (a blockpage might be served)
Websites
Websites
Runtime: 1.5s
Share on Facebook or Twitter
On October 1, 2017 at 4:02:23 PM UTC, http://www.referendum.soy presented signs of HTTP blocking (a blockpage might be served) on AS3352 in Spain. This might mean that http://www.referendum.soy was blocked, but false positives can occur. Please explore the network measurement data below.

Failures

HTTP Experiment
null
DNS Experiment
null
Control
null

DNS Queries

Resolver:
81.47.231.72
Query:
IN A www.referendum.soy
Engine:
Name
Class
TTL
Type
DATA
Answer IP Info
@
IN
TTL
CNAME
www.referendum.soy.cdn.cloudflare.net
Unknown AS
@
IN
TTL
A
104.27.182.15
Unknown AS
@
IN
TTL
A
104.27.183.15
Unknown AS

TCP Connections

104.27.182.15:80: succeeded
104.27.183.15:80: succeeded
www.referendum.soy.cdn.cloudflare.net:80: succeeded

HTTP Requests

URL
GET http://www.referendum.soy
Response Headers
Content-Type:
text/html; charset="utf-8"
content-encoding:
Response Body
<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\">
<html>
  <head>
    <meta charset="utf-8"/>
    <title>
      PHISHING_TSOL_MENSAJE_1
    </title>
    
  </head>
  <body>
    <CENTER>
      <h1 id="causa" name="PHISHING_TSOL_MENSAJE_1">
      </h1>
      <script type="text/javascript">
        var name = document.getElementById("causa").getAttribute('name')
            var text = ""
                switch (name) {
                  case "PHISHING_TSOL_MENSAJE_1":
                    text = "Judicial_Guardia_Civil"
                      window.location.replace("http://paginaintervenida.edgesuite.net");
                    break;
                  case "Administrativo_Ley_del_Juego":
                    text = "Administrativo_Ley_del_Juego"
                      window.location.replace("http://195.235.52.40");
                    break;
                  case "Judicial_Guardia_Civil":
                    text = "Judicial_Guardia_Civil"
                      window.location.replace("http://webbloqueadaporpolicianacional.com");
                    break;
                  case "Judicial_Policia_Nacional":
                    text = "Judicial_Policia_Nacional"
                      window.location.replace("http://webbloqueadaporpolicianacional.com");
                    break;
                  default:
                    text = "ERROR 404 - File url1 not found";
                }
        document.getElementById("causa").innerHTML = text
      </script>
    </CENTER>
  </body>
</html>

Measurement UID
0120171001a39e2c3ec7b9856ea1f01be0016fe0
Report ID
20171001T155442Z_AS3352_WPrjXiNTPtG16TjdsHSLOY7mIpZgEDNhbloWOsg6wn69AwO8rC
Platform
macos
Software Name
ooniprobe (2.1.0)
Measurement Engine
Unavailable

Raw Measurement Data

Loading…