October 1, 2017 at 3:03:55 PM UTC
VERIFY
Anomaly
HTTP blocking (a blockpage might be served)
Websites
Runtime: 51ms
On October 1, 2017 at 3:03:55 PM UTC, http://www.referendum.legal presented signs of HTTP blocking (a blockpage might be served) on AS3352 in Spain.
This might mean that http://www.referendum.legal was blocked, but false positives can occur.
Please explore the network measurement data below.
Failures
HTTP Experiment
null
DNS Experiment
null
Control
null
DNS Queries
Resolver:
81.47.231.76
Query:
IN A www.referendum.legal
Engine:
Name
Class
TTL
Type
DATA
Answer IP Info
@
IN
TTL
CNAME
www.referendum.legal.cdn.cloudflare.net
Unknown AS
@
IN
TTL
A
104.18.59.130
Unknown AS
@
IN
TTL
A
104.18.58.130
Unknown AS
TCP Connections
Connection to 104.18.58.130:80 succeeded.
Connection to 104.18.59.130:80 succeeded.
Connection to www.referendum.legal.cdn.cloudflare.net:80 succeeded.
HTTP Requests
URL
GET http://www.referendum.legal
Response Headers
Content-Type:text/html; charset="utf-8"content-encoding:
Response Body
<!DOCTYPE html PUBLIC \"-//W3C//DTD HTML 4.01//EN\">
<html>
<head>
<meta charset="utf-8"/>
<title>
PHISHING_TSOL_MENSAJE_1
</title>
</head>
<body>
<CENTER>
<h1 id="causa" name="PHISHING_TSOL_MENSAJE_1">
</h1>
<script type="text/javascript">
var name = document.getElementById("causa").getAttribute('name')
var text = ""
switch (name) {
case "PHISHING_TSOL_MENSAJE_1":
text = "Judicial_Guardia_Civil"
window.location.replace("http://paginaintervenida.edgesuite.net");
break;
case "Administrativo_Ley_del_Juego":
text = "Administrativo_Ley_del_Juego"
window.location.replace("http://195.235.52.40");
break;
case "Judicial_Guardia_Civil":
text = "Judicial_Guardia_Civil"
window.location.replace("http://paginaintervenida.edgesuite.net");
break;
case "Judicial_Policia_Nacional":
text = "Judicial_Policia_Nacional"
window.location.replace("http://webbloqueadaporpolicianacional.com");
break;
default:
text = "ERROR 404 - File url1 not found";
}
document.getElementById("causa").innerHTML = text
</script>
</CENTER>
</body>
</html>
Measurement UID
01201710018021dcec37fcf1a90f378dad8c06f0
Report ID
20171001T150355Z_AS3352_boehDP7q7XcueWXbV2n8OFf9dx7k207oxfhCvbhM2qvbYNvbjK
Platform
macos
Software Name
ooniprobe (2.1.0)
Measurement Engine
Unavailable