OK
https://ooni.org/nettest/web-connectivity/
Websites
Runtime: 1.9s
On April 04, 2025, 01:48 PM UTC, https://ooni.org/nettest/web-connectivity/ was accessible when tested on AS28118 in Dominican Republic.
Failures
HTTP Experiment
null
DNS Experiment
null
Control
null
DNS Queries
Resolver:
172.253.7.29
Query:
IN A ooni.org
Engine:
system
Name
Class
TTL
Type
DATA
@
IN
A
75.2.60.5
TCP Connections
Connection to 75.2.60.5:443 succeeded.
HTTP Requests
URL
GET https://ooni.org/nettest/web-connectivity/
Response Headers
Accept-Ranges:bytesAge:60Cache-Control:public,max-age=0,must-revalidateCache-Status:"Netlify Edge"; hitContent-Length:13211Content-Type:text/html; charset=UTF-8Date:Fri, 04 Apr 2025 13:48:53 GMTEtag:"cc212dce6cc2aa9435b43b43c86e9430-ssl"Permissions-Policy:interest-cohort=()Server:NetlifyStrict-Transport-Security:max-age=31536000X-Nf-Request-Id:01JR0GZHGV46GH25QC9ZV7WNX4
Response Body
<!doctype html><html lang=en><head><meta charset=utf-8><meta name=viewport content='initial-scale=1,width=device-width'><title>Web Connectivity | OONI</title>
<link rel=canonical href=https://ooni.org/nettest/web-connectivity/><meta name=description content="This test examines whether websites (included in the Citizen Lab test lists) are reachable and if they are not, it
attempts to determine whether access to them is blocked by means of DNS tampering,
TCP/IP blocking or by a transparent HTTP proxy.
Specifically, this test is designed to perform the following:
Resolver identification
DNS lookup
TCP connect
HTTP GET request
By default, this test performs the above (excluding the first step, which is
performed only over the network of the user) both over a control server and over
the network of the user. If the results from both networks match, then there is
no clear sign of network interference; but if the results are different, then
the website that the user is testing is likely censored."><meta property="og:title" content="Web Connectivity"><meta property="og:description" content="This test examines whether websites (included in the Citizen Lab test lists) are reachable and if they are not, it
attempts to determine whether access to them is blocked by means of DNS tampering,
TCP/IP blocking or by a transparent HTTP proxy.
Specifically, this test is designed to perform the following:
Resolver identification
DNS lookup
TCP connect
HTTP GET request
By default, this test performs the above (excluding the first step, which is
performed only over the network of the user) both over a control server and over
the network of the user. If the results from both networks match, then there is
no clear sign of network interference; but if the results are different, then
the website that the user is testing is likely censored."><meta property="og:type" content="article"><meta property="og:url" content="https://ooni.org/nettest/web-connectivity/"><meta property="article:published_time" content="0000-01-01T00:00:00+00:00"><meta property="article:modified_time" content="2021-12-07T18:56:15+01:00"><meta name=twitter:card content="summary"><meta name=twitter:title content="Web Connectivity"><meta name=twitter:description content="This test examines whether websites (included in the Citizen Lab test lists) are reachable and if they are not, it
attempts to determine whether access to them is blocked by means of DNS tampering,
TCP/IP blocking or by a transparent HTTP proxy.
Specifically, this test is designed to perform the following:
Resolver identification
DNS lookup
TCP connect
HTTP GET request
By default, this test performs the above (excluding the first step, which is
performed only over the network of the user) both over a control server and over
the network of the user. If the results from both networks match, then there is
no clear sign of network interference; but if the results are different, then
the website that the user is testing is likely censored."><link rel=stylesheet type=text/css href=/css/bootstrap.min.e2d14d1a1dcdfab34aba5963e76f1aa59cc3291ce469f4336bdbddcea78ab123.css><link rel=stylesheet type=text/css href=/css/index.min.a73d0006e4d94a4799760881ae0dc944e6c5024aae2ef29b387102b5901c0653.css><link rel=icon type=image/png href=/images/favicon.png><script type=text/javascript src=https://cdn.jsdelivr.net/npm/ooni-run/dist/widgets.js defer></script><script defer src=https://eu.umami.is/script.js data-website-id=6c8fa418-795c-41cc-9840-40c43a88648a domains=ooni.org,ooni.github.io,ooni.netlify.com,openobservatory.github.io></script></head><body><nav class="navbar mb-4" id=navbar><div class=container><div class="d-flex flex-column flex-lg-row"><div class="d-flex justify-content-between align-items-center"><div class=nav-menu-brand><a href=/><img src=/images/logos/ooni-horizontal.svg alt="OONI Logo"></a></div><button class="nav-menu-btn d-lg-none" id=menu-btn aria-label="Toggle the menu">
<img src=/images/menu-open.svg class="nav-menu-btn-icon nav-menu-btn-icon_open" alt="Open the menu">
<img src=/images/menu-close.svg class="nav-menu-btn-icon nav-menu-btn-icon_close" alt="Close the menu"></button></div><div class=nav-menu><div class="d-flex flex-column flex-lg-row align-items-start"><div class=nav-menu-item><a href=/about/>About</a></div><div class=nav-menu-item><a href=/nettest/>Tests</a></div><div class=nav-menu-item><a href=/data/>Data</a></div><div class=nav-menu-item><a href=/get-involved/>Get Involved</a></div><div class=nav-menu-item><a href=/reports/>Reports</a></div><div class=nav-menu-item><a href=/blog/>Blog</a></div><div class=nav-menu-item><a href=/donate/>Donate</a></div></div><div class=nav-menu-install><a href=/install/ class="btn explorer-button">Install OONI Probe</a></div></div></div></nav><script type=text/javascript>var navbar=document.getElementById("navbar"),menuBtn=document.getElementById("menu-btn");menuBtn.addEventListener("click",function(){navbar.classList.toggle("navbar_opened")})</script><div class=article><div class=container><div class=row><div class="col-4 toc"><a href=/nettest/>← back to tests</a></div><div class=col-8><h1>Web Connectivity</h1><p>This test examines whether websites (included in the <a href=https://github.com/citizenlab/test-lists/tree/master/lists>Citizen Lab test lists</a>) are reachable and if they are not, it
attempts to determine whether access to them is blocked by means of DNS tampering,
TCP/IP blocking or by a transparent HTTP proxy.</p><p>Specifically, this test is designed to perform the following:</p><ul><li><p>Resolver identification</p></li><li><p>DNS lookup</p></li><li><p>TCP connect</p></li><li><p>HTTP GET request</p></li></ul><p>By default, this test performs the above (excluding the first step, which is
performed only over the network of the user) both over a control server and over
the network of the user. If the results from both networks match, then there is
no clear sign of network interference; but if the results are different, then
the website that the user is testing is likely censored.</p><p>Below we provide information about how each step performed under the Web
Connectivity test works.</p><h2 id=1-resolver-identification>1. Resolver identification</h2><p>The domain name system (DNS) is what is responsible for transforming a host name
(e.g. torproject.org) into an IP address (e.g. [scrubbed]). Internet Service
Providers, amongst others, run DNS resolvers which map IP addresses to host
names. In some circumstances though, ISPs map the requested host names to the
wrong IP addresses, which is a form of tampering.</p><p>As a first step, the web connectivity test attempts to identify which DNS
resolver is being used by the user. It does so by performing a DNS query to
special domains (such as whoami.akamai.com) which will disclose the IP address
of the resolver.</p><h2 id=2-dns-lookup>2. DNS lookup</h2><p>Once the web connectivity test has identified the DNS resolver of the user, it
then attempts to identify which addresses and are mapped to the tested host
names by the resolver. It does so by performing a DNS lookup, which asks the
resolver to disclose which IP addresses are mapped to the tested host names, as
well as which other host names are linked to the tested host names under DNS
queries.</p><h2 id=3-tcp-connect>3. TCP connect</h2><p>The web connectivity test will then try to connect to the tested websites by
attempting to establish a TCP session on port 80 (or port 443 for URLs that
begin with HTTPS) for the list of IP addresses that were identified in the
previous step (DNS lookup).</p><h2 id=4-http-get-request>4. HTTP GET request</h2><p>As the web connectivity test connects to tested websites (through the previous
step), it sends requests through the HTTP protocol to the servers which are
hosting those websites. A server normally responds to an HTTP GET request with
the content of the webpage that is requested.</p><h2 id=comparison-of-results-identifying-censorship>Comparison of results: Identifying censorship</h2><p>Once the above steps of the web connectivity test are performed <em>both</em> over a
control server and over the network of the user, the collected results are then
compared with the aim of identifying whether and how tested websites are
tampered with. If the compared results do <em>not</em> match, then there is a sign of
network interference.</p><p>Below are the conditions under which the following types of blocking are
identified:</p><ul><li><p><strong>DNS blocking:</strong> If the DNS responses (such as the IP addresses mapped to
host names) do <em>not</em> match;</p></li><li><p><strong>TCP/IP blocking:</strong> If a TCP session to connect to websites was <em>not</em>
established over the network of the user;</p></li><li><p><strong>HTTP blocking:</strong> If the HTTP request over the user’s network failed, or the
<strong>HTTP status codes don’t match</strong>, or all of the following apply:</p><ul><li><p>The body length of compared websites (over the control server and the
network of the user) differs by some percentage</p></li><li><p>The HTTP headers names do not match</p></li><li><p>The HTML title tags do not match</p></li></ul></li></ul><p>The examples below (testing piratebay.se and google.com for censorship in Italy) show
what the output of the web connectivity test could look like:</p><pre tabindex=0><code>Starting test for http://thepiratebay.se/
* doing DNS query for thepiratebay.se
* connecting to [scrubbed]
* doing HTTP(s) request http://thepiratebay.se/
* performing control request with backend
Result for http://thepiratebay.se/
----------------------------------
* BLOCKING DETECTED due to dns
* Is NOT accessible
Starting test for https://google.com/
* doing DNS query for google.com
* connecting to [scrubbed]
* doing HTTP(s) request https://google.com/
* performing control request with backend
Result for https://google.com/
------------------------------
* No blocking detected
* Is accessible
Summary for web_connectivity
----------------------------
Accessible URLS
---------------
* https://google.com/
Not accessible URLS
-------------------
* http://thepiratebay.se/
URLS possibly blocked due to dns
--------------------------------
* http://thepiratebay.se/
</code></pre><p><strong>Note:</strong> DNS resolvers, such as Google or your local ISP, often provide users
with IP addresses that are closest to them geographically. Often this is not
done with the intent of network tampering, but merely for the purpose of
providing users faster access to websites. As a result, some false positives
might arise in OONI measurements. Other false positives might occur when tested
websites serve different content depending on the country that the user is
connecting from, or in the cases when websites return failures even though they
are not tampered with.</p><p>Read the <strong><a href=https://github.com/ooni/spec/blob/master/nettests/ts-017-web-connectivity.md>Web Connectivity test specification</a></strong>.</p></div></div></div></div><footer class=p-4><div class=container><div class=row><div class="col-12 col-md-4"><div class=pb-2><img src=/images/logos/ooni-horizontal.svg height=32px alt="OONI Logo"></div><div class=pb-4>Global community measuring internet censorship around the world.</div><div><div>© 2025 Open Observatory of Network Interference (OONI)</div><div><a href=https://github.com/ooni/license>Content available under a Creative Commons
license.</a></div></div></div><div class="col-12 col-md-8"><div class=row><div class="mt-3 col-sm"><div class=footer-section-title>About</div><div class=pt-1><a href=/about/>OONI</a></div><div class=pt-1><a href=/about/data-policy/>Data Policy</a></div><div class=pt-1><a href=/about/privacy-policy/>Privacy Policy</a></div><div class=pt-1><a href=https://github.com/ooni/license/tree/master/data>Data
License</a></div><div class=pt-1><a href=/about/#contact>Contact</a></div></div><div class="mt-3 col-sm"><div class=footer-section-title>OONI Probe</div><div class=pt-1><a href=https://ooni.org/install/>Install</a></div><div class=pt-1><a href=https://ooni.org/nettest/>Tests</a></div><div class=pt-1><a href=https://github.com/ooni>Source code</a></div><div class=pt-1><a href=https://api.ooni.io/>API</a></div></div><div class="mt-3 col-sm"><div class=footer-section-title>Updates</div><div class=pt-1><a href=/post/>Blog</a></div><div class=pt-1><a href=https://lists.torproject.org/cgi-bin/mailman/listinfo/ooni-talk>Mailing list</a></div><div class=pt-1><a href=https://slack.ooni.org/>Slack</a></div><ul class="pt-1 footer-links-social"><li><a class=twitter href=https://twitter.com/OpenObservatory>Twitter (@OpenObservatory)</a></li><li><a class=youtube href=https://www.youtube.com/c/OONIorg>Youtube (OONIorg)</a></li><li><a class=facebook href=https://facebook.com/ooni.org>Facebook (ooni.org)</a></li><li><a class=instagram href=https://www.instagram.com/openobservatory/>Instagram (@OpenObservatory)</a></li><li><a class=mastodon rel=me href=https://mastodon.social/@ooni>Mastodon (@ooni@mastodon.social)</a></li></ul></div></div></div></div></div></footer></body></html>Resolver
Resolver ASN
AS15169
Resolver IP
172.253.7.29
Resolver Network Name
Google LLC
Report ID
20250404T134851Z_webconnectivity_DO_28118_n1_wL7qZywXt0edGhiS
Platform
android
Software Name
ooniprobe-android (5.0.5)
Measurement Engine
ooniprobe-engine (3.24.0)