Voidly
Data

Incident record · Estonia

Sustained censorship in EE (2026-10)

Type
censorship
Status
confirmed
Severity
critical
Inspect evidence Cite this incident

Source summary

OONI detected 4 days of elevated network interference averaging 56.8% anomaly rate.

Open incident JSON
Reported anomaly rate
56.8%

Source-defined signal; not a universal test-failure percentage.

Source measurement count
4

The record’s count can represent aggregate inputs or alerts.

Incident confidence
69%

A source score, not certainty of intentional censorship.

Linked evidence has its own count and confidence fields. These quantities are not interchangeable.

Follow the evidence

3 linked records.

Inspect the observation, the upstream claim and why it was linked.

Qualifying linked evidence sources: OONI (3). Historical incident source labels may include quarantined observations and are not detection evidence by themselves.

Linked observation dates

3 dated · 0 without a verified timezone
OONI3 linked records
Oct 6, 2026 · 12:00 UTCOct 9, 2026 · 12:00 UTC

Each point is a linked record. Horizontal position shows observation time; stacking separates nearby points. The full records below provide the values. This is not a measured outage-duration chart.

Upstream claims are attributed to their source. Multiple records or source names do not by themselves establish independent corroboration.

OONI3 records · open evidence

middlebox-detection · warning

ooni:live:EE:http_invalid_request_line:2026-10-09:12

OONI http_invalid_request_line: 7 anomaly + 0 confirmed / 16 nonfailed measurements (43.8% blocked; 0 failed)

Upstream claim · OONI
Signal value
0.4375
Signal baseline
Unavailable
Evidence confidence
67.5%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Oct 11, 2026 · 04:45 UTC
Explore filtered source results
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "citationScope": "filtered_search",
  "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-09&until=2026-10-10",
  "confidence": 0.675,
  "continent": "Europe",
  "countryCode": "EE",
  "domain": null,
  "domainCategory": null,
  "exactMeasurementLink": false,
  "id": 538285033,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-10-09T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-10-11T04:45:46.746907Z",
  "riskTier": 5,
  "signalBaseline": null,
  "signalLevel": "warning",
  "signalType": "middlebox-detection",
  "signalValue": 0.4375,
  "source": "ooni",
  "sourceRef": "ooni:live:EE:http_invalid_request_line:2026-10-09:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-09&until=2026-10-10",
  "unSubregion": "Northern Europe",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 7 anomaly + 0 confirmed / 16 nonfailed measurements (43.8% blocked; 0 failed)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:EE:http_invalid_request_line:2026-10-06:12

OONI http_invalid_request_line: 7 anomaly + 0 confirmed / 11 nonfailed measurements (63.6% blocked; 0 failed)

Upstream claim · OONI
Signal value
0.636364
Signal baseline
Unavailable
Evidence confidence
75.5%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Oct 9, 2026 · 12:33 UTC
Explore filtered source results
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "citationScope": "filtered_search",
  "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-06&until=2026-10-07",
  "confidence": 0.7545454545454546,
  "continent": "Europe",
  "countryCode": "EE",
  "domain": null,
  "domainCategory": null,
  "exactMeasurementLink": false,
  "id": 538285028,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-10-06T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-10-09T12:33:35.394820Z",
  "riskTier": 5,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6363636363636364,
  "source": "ooni",
  "sourceRef": "ooni:live:EE:http_invalid_request_line:2026-10-06:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-06&until=2026-10-07",
  "unSubregion": "Northern Europe",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 7 anomaly + 0 confirmed / 11 nonfailed measurements (63.6% blocked; 0 failed)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:EE:http_header_field_manipulation:2026-10-06:12

OONI http_header_field_manipulation: 7 anomaly + 0 confirmed / 11 nonfailed measurements (63.6% blocked; 0 failed)

Upstream claim · OONI
Signal value
0.636364
Signal baseline
Unavailable
Evidence confidence
75.5%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Blocking method
ip-blocked
Retrieved
Oct 9, 2026 · 12:33 UTC
Explore filtered source results
Complete evidence record
{
  "asn": null,
  "blockingMethod": "ip-blocked",
  "citationScope": "filtered_search",
  "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_header_field_manipulation&since=2026-10-06&until=2026-10-07",
  "confidence": 0.7545454545454546,
  "continent": "Europe",
  "countryCode": "EE",
  "domain": null,
  "domainCategory": null,
  "exactMeasurementLink": false,
  "id": 538285471,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-10-06T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-10-09T12:33:37.944105Z",
  "riskTier": 5,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6363636363636364,
  "source": "ooni",
  "sourceRef": "ooni:live:EE:http_header_field_manipulation:2026-10-06:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_header_field_manipulation&since=2026-10-06&until=2026-10-07",
  "unSubregion": "Northern Europe",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 7 anomaly + 0 confirmed / 11 nonfailed measurements (63.6% blocked; 0 failed)",
  "upstreamSeverity": null
}
Source-reported corroboration

The source’s corroboration assessment is separate from incident confidence and evidence-link confidence. Inspect its source list, count and description.

{
  "description": "Single source label: ooni",
  "evidenceCount": 3,
  "level": "low",
  "score": 0.6,
  "sourceCount": 1,
  "sources": [
    "ooni"
  ]
}

Declared incident sources (historical metadata): OONI.

Qualifying linked evidence sources: OONI (3).

Fewer than two qualifying linked source labels are present. Stored incident labels may include quarantined OONI observations and do not establish corroboration.

Stored observations

OONI observations withheld from evidence (1)

OONI's historical signal_level='normal' is a stored label quarantined pending regrade, not proof that every row was accessible or anomaly-free. Low-anomaly rows or omitted confirmed results may be present. These links are retained separately from qualifying evidence.

OONI row · historical normal signal-level label

ooni:live:EE:signal:2026-10-09:12
Explore filtered source results
Complete stored observation
{
  "asn": null,
  "blockingMethod": null,
  "citationScope": "filtered_search",
  "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=signal&since=2026-10-09&until=2026-10-10",
  "confidence": 0.5235294117647059,
  "continent": "Europe",
  "countryCode": "EE",
  "domain": null,
  "domainCategory": null,
  "exactMeasurementLink": false,
  "id": 538283145,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-10-09T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-10-11T04:45:17.184210Z",
  "riskTier": 5,
  "signalBaseline": null,
  "signalLevel": "normal",
  "signalType": "blocking",
  "signalValue": 0.058823529411764705,
  "source": "ooni",
  "sourceRef": "ooni:live:EE:signal:2026-10-09:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=signal&since=2026-10-09&until=2026-10-10",
  "unSubregion": "Northern Europe",
  "upstreamCause": null,
  "upstreamClaim": "OONI signal: 1 anomaly + 0 confirmed / 17 nonfailed measurements (5.9% blocked; 0 failed)",
  "upstreamSeverity": null
}

Scope and attribution

What the record names.

Methodology

Affected services

Signal

Incident mechanism

Middlebox / DPI

Individual evidence may carry more specific methods. Those do not automatically describe the entire incident.

Affected domains · 0

Domains named by the source record. Each link opens country-specific OONI measurements; a named domain is not a blanket national-block verdict.

No domains named.

Networks and evidence attribution

ASNs named by this source record: None listed.

This aggregate describes fields literally present in qualifying linked evidence. It does not identify who caused an event or prove intent.

{
  "asns_attributed": 0,
  "domains_attributed": 0,
  "methods": [
    {
      "evidence_count": 2,
      "method": "middlebox-detection"
    },
    {
      "evidence_count": 1,
      "method": "ip-blocked"
    }
  ],
  "note": "Aggregated from this incident's qualifying linked evidence rows — only domains, ASNs, and blocking methods the evidence literally records are shown, with the per-item evidence count. No per-domain/per-ASN attribution is present in the qualifying linked evidence for this incident (e.g. country/ASN-level outage signals).",
  "sources": [
    "ooni"
  ],
  "top_asns": [],
  "top_domains": []
}
What this record cannot establish

Measurements alone do not attribute an event to a government, ISP or another actor, and do not establish intent. An outage or anomalous result can have several explanations.

The country label is an aggregation scope. It is not a census of every network, city or service. Regional or ASN fields belong to their individual source evidence and should not be expanded into a national claim.

The source observation window and evidence timestamps do not prove an exact start and stop of blocking.

Signal definitions, baseline rates and model versions depend on the source. This record does not establish a common baseline or calibrated certainty. Use the source’s specific signal definition and evaluation before interpreting a score.

Inspect measurement coverage

Cite this incident

Take the record
with you.

Use the permanent published URL.
The original source title is preserved.

BibTeX ↓RIS ↓Markdown ↓JSON ↓Full citation page →

The record over time.

Created
2026-10-09 16:08:24.644312 · timezone unspecified
Last updated
2026-10-09 16:08:24.644312 · timezone unspecified
Revision
1
Revision history and original fields

Revision-history array unavailable.

Canonical ID: EE-2026-0009. Source ID: EE-2026-0009. Hash ID: 0857921ad73a.

Additional source duration field: 72 hours. It is retained separately from the minutes field and does not establish a verified event duration.

Complete source JSON
{
  "affectedAsns": [],
  "affectedDomains": [],
  "affectedServices": [
    "Signal"
  ],
  "anomalyRate": 0.5681818181818181,
  "attribution": {
    "asns_attributed": 0,
    "domains_attributed": 0,
    "methods": [
      {
        "evidence_count": 2,
        "method": "middlebox-detection"
      },
      {
        "evidence_count": 1,
        "method": "ip-blocked"
      }
    ],
    "note": "Aggregated from this incident's qualifying linked evidence rows — only domains, ASNs, and blocking methods the evidence literally records are shown, with the per-item evidence count. No per-domain/per-ASN attribution is present in the qualifying linked evidence for this incident (e.g. country/ASN-level outage signals).",
    "sources": [
      "ooni"
    ],
    "top_asns": [],
    "top_domains": []
  },
  "confidence": 0.69,
  "corroboration": {
    "description": "Single source label: ooni",
    "evidenceCount": 3,
    "level": "low",
    "score": 0.6,
    "sourceCount": 1,
    "sources": [
      "ooni"
    ]
  },
  "country": "EE",
  "countryName": "Estonia",
  "createdAt": "2026-10-09T16:08:24.644312",
  "description": "OONI detected 4 days of elevated network interference averaging 56.8% anomaly rate.",
  "duration": 4320,
  "durationHours": 72,
  "endTime": "2026-10-09T12:00:00Z",
  "evidence": [
    {
      "asn": null,
      "blockingMethod": null,
      "citationScope": "filtered_search",
      "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-09&until=2026-10-10",
      "confidence": 0.675,
      "continent": "Europe",
      "countryCode": "EE",
      "domain": null,
      "domainCategory": null,
      "exactMeasurementLink": false,
      "id": 538285033,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-10-09T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-10-11T04:45:46.746907Z",
      "riskTier": 5,
      "signalBaseline": null,
      "signalLevel": "warning",
      "signalType": "middlebox-detection",
      "signalValue": 0.4375,
      "source": "ooni",
      "sourceRef": "ooni:live:EE:http_invalid_request_line:2026-10-09:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-09&until=2026-10-10",
      "unSubregion": "Northern Europe",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 7 anomaly + 0 confirmed / 16 nonfailed measurements (43.8% blocked; 0 failed)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "citationScope": "filtered_search",
      "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-06&until=2026-10-07",
      "confidence": 0.7545454545454546,
      "continent": "Europe",
      "countryCode": "EE",
      "domain": null,
      "domainCategory": null,
      "exactMeasurementLink": false,
      "id": 538285028,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-10-06T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-10-09T12:33:35.394820Z",
      "riskTier": 5,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6363636363636364,
      "source": "ooni",
      "sourceRef": "ooni:live:EE:http_invalid_request_line:2026-10-06:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_invalid_request_line&since=2026-10-06&until=2026-10-07",
      "unSubregion": "Northern Europe",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 7 anomaly + 0 confirmed / 11 nonfailed measurements (63.6% blocked; 0 failed)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": "ip-blocked",
      "citationScope": "filtered_search",
      "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_header_field_manipulation&since=2026-10-06&until=2026-10-07",
      "confidence": 0.7545454545454546,
      "continent": "Europe",
      "countryCode": "EE",
      "domain": null,
      "domainCategory": null,
      "exactMeasurementLink": false,
      "id": 538285471,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-10-06T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-10-09T12:33:37.944105Z",
      "riskTier": 5,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6363636363636364,
      "source": "ooni",
      "sourceRef": "ooni:live:EE:http_header_field_manipulation:2026-10-06:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=http_header_field_manipulation&since=2026-10-06&until=2026-10-07",
      "unSubregion": "Northern Europe",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 7 anomaly + 0 confirmed / 11 nonfailed measurements (63.6% blocked; 0 failed)",
      "upstreamSeverity": null
    }
  ],
  "evidenceCount": 3,
  "evidenceSourceBreakdown": {
    "ooni": 3
  },
  "evidenceSpan": {
    "earliest": "2026-10-06T12:00:00Z",
    "latest": "2026-10-09T12:00:00Z"
  },
  "flag": "🇪🇪",
  "generated_at_utc": "2026-10-18T08:04:27.464469Z",
  "hashId": "0857921ad73a",
  "id": "EE-2026-0009",
  "incidentType": "censorship",
  "measurementCount": 4,
  "mechanism": "Middlebox / DPI",
  "normalOoniObservationCount": 1,
  "normalOoniObservationNote": "These linked OONI rows carry the historical signal_level='normal' stored label and are quarantined from qualifying evidence pending regrade. The label is not proof that every row was accessible or anomaly-free: low-anomaly rows and rows with an omitted confirmed result may be present.",
  "normalOoniObservations": [
    {
      "asn": null,
      "blockingMethod": null,
      "citationScope": "filtered_search",
      "citationUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=signal&since=2026-10-09&until=2026-10-10",
      "confidence": 0.5235294117647059,
      "continent": "Europe",
      "countryCode": "EE",
      "domain": null,
      "domainCategory": null,
      "exactMeasurementLink": false,
      "id": 538283145,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-10-09T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-10-11T04:45:17.184210Z",
      "riskTier": 5,
      "signalBaseline": null,
      "signalLevel": "normal",
      "signalType": "blocking",
      "signalValue": 0.058823529411764705,
      "source": "ooni",
      "sourceRef": "ooni:live:EE:signal:2026-10-09:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=EE&test_name=signal&since=2026-10-09&until=2026-10-10",
      "unSubregion": "Northern Europe",
      "upstreamCause": null,
      "upstreamClaim": "OONI signal: 1 anomaly + 0 confirmed / 17 nonfailed measurements (5.9% blocked; 0 failed)",
      "upstreamSeverity": null
    }
  ],
  "readableId": "EE-2026-0009",
  "reportUrl": "https://api.voidly.ai/data/incidents/0857921ad73a/report?format=markdown",
  "revision": 1,
  "severity": "critical",
  "severityGrade": "A",
  "sources": [
    "ooni"
  ],
  "startTime": "2026-10-06T12:00:00Z",
  "status": "confirmed",
  "title": "Sustained censorship in EE (2026-10)",
  "updatedAt": "2026-10-09T16:08:24.644312"
}
All Estonia incidents
Oct 18, 2026 · disruptionInternet connectivity disruption in EstoniaJun 20, 2026 · disruptionInternet connectivity disruption in EstoniaMay 3, 2026 · disruptionInternet connectivity disruption in EstoniaApr 22, 2026 · disruptionInternet connectivity disruption in EstoniaApr 10, 2026 · disruptionInternet connectivity disruption in EstoniaApr 9, 2026 · disruptionInternet connectivity disruption in Estonia

Related records come from up to 100 recent records in the same country. They do not establish a causal connection.

Country profile Explore OONI measurements Live feed

Check this live

Read incident JSON

Read the published record and its observation dates. A fresh response does not mean a new measurement or confirm a current restriction.

MCP and curl examples

Claim assessment is on hold. While the public incident projection is under review, the unified MCP service may answer verify_claim with an insufficient-evidence response. The example below is a request, not a verified conclusion.

Unified MCP endpoint: https://api.voidly.ai/mcp. Use the request in an initialized MCP client. Nothing runs on this page.

The curl command reads the published incident record; it does not call verify_claim or test a network connection.

MCP endpoints and availability

Agent summary

Facts: Sustained censorship in EE (2026-10). Country: Estonia. Source type: censorship. Source status: confirmed. Reported observation window: 2026-10-06T12:00:00Z to 2026-10-09T12:00:00Z.

As of linked evidence: . Record generated: 2026-10-18T08:04:27.464469Z; page checked: 2026-10-18T08:04:27.491Z. These are different times.

Stored incident source labels: 1 distinct declared names (ooni). These are historical metadata; qualifying linked sources are shown above. Source names are not independent corroboration.

Cite: Voidly Research. (n.d.). Sustained censorship in EE (2026-10) [EE-2026-0009]. Voidly Global Censorship Index. https://voidly.ai/incident/EE-2026-0009

Publication date: Not supplied.

Use this in your agent

Connect the read-only Atlas MCP service, then select and copy this request into your agent.

Atlas MCP setup · Agent summary JSON · Endpoint: https://atlas-mcp.voidly.ai/mcp

Source generated:
Page source check:

Permanent incident URL

Voidly-original annotations: CC BY 4.0. Upstream data retain their source licenses.