voidly
Data

Incident record · Thailand

Sustained censorship in TH (2026-06)

Type
censorship
Status
confirmed
Severity
critical

Source summary

OONI detected 51 days of elevated network interference averaging 64.0% anomaly rate.

Open incident JSON
Reported anomaly rate
64%

Source-defined signal; not a universal test-failure percentage.

Source measurement count
51

The record’s count can represent aggregate inputs or alerts.

Incident confidence
77%

A source score, not certainty of intentional censorship.

Linked evidence has its own count and confidence fields. These quantities are not interchangeable.

Follow the evidence

51 linked records.

Inspect the observation, the upstream claim and why it was linked.

Linked observation dates

51 dated · 0 without a verified timezone
OONI51 linked records
Jun 1, 2026 · 06:00 UTCJun 13, 2026 · 06:00 UTC

Each point is a linked record. Horizontal position shows observation time; stacking separates nearby points. The full records below provide the values. This is not a measured outage-duration chart.

Upstream claims are attributed to their source. Multiple records or source names do not by themselves establish independent corroboration.

OONI51 records · open evidence

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-13:06

OONI http_invalid_request_line: 4/7 measurements anomalous (57.1%)

Upstream claim · OONI
Signal value
0.571429
Signal baseline
Unavailable
Evidence confidence
72.9%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 14, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7285714285714285,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 148199520,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-13T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-14T03:01:30.886539Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.5714285714285714,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-13:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-13&until=2026-06-14&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 4/7 measurements anomalous (57.1%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-12:06

OONI http_invalid_request_line: 9/14 measurements anomalous (64.3%)

Upstream claim · OONI
Signal value
0.642857
Signal baseline
Unavailable
Evidence confidence
75.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 13, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7571428571428571,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 145824457,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-12T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-13T03:01:22.716658Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6428571428571429,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-12:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-12&until=2026-06-13&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 9/14 measurements anomalous (64.3%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-12:00

OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)

Upstream claim · OONI
Signal value
0.666667
Signal baseline
Unavailable
Evidence confidence
76.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 13, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7666666666666666,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 145824456,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-12T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-13T03:01:22.716658Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6666666666666666,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-12:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-12&until=2026-06-13&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-12:00

OONI http_header_field_manipulation: 6/12 measurements anomalous (50.0%)

Upstream claim · OONI
Signal value
0.5
Signal baseline
Unavailable
Evidence confidence
70%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 13, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 145824463,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-12T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-13T03:01:25.592082Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-12:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-12&until=2026-06-13&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 6/12 measurements anomalous (50.0%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-11:06

OONI http_invalid_request_line: 7/13 measurements anomalous (53.8%)

Upstream claim · OONI
Signal value
0.538462
Signal baseline
Unavailable
Evidence confidence
71.5%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 12, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7153846153846154,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 143584139,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-11T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-12T03:01:31.506356Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.5384615384615384,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-11:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-11&until=2026-06-12&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 7/13 measurements anomalous (53.8%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-11:00

OONI http_invalid_request_line: 9/11 measurements anomalous (81.8%)

Upstream claim · OONI
Signal value
0.818182
Signal baseline
Unavailable
Evidence confidence
82.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 12, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8272727272727274,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 143584138,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-11T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-12T03:01:31.506356Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.8181818181818182,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-11:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-11&until=2026-06-12&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 9/11 measurements anomalous (81.8%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-11:00

OONI http_header_field_manipulation: 7/11 measurements anomalous (63.6%)

Upstream claim · OONI
Signal value
0.636364
Signal baseline
Unavailable
Evidence confidence
75.5%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 12, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7545454545454546,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 143584145,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-11T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-12T03:01:32.237646Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6363636363636364,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-11:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-11&until=2026-06-12&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 7/11 measurements anomalous (63.6%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-10:06

OONI http_invalid_request_line: 12/14 measurements anomalous (85.7%)

Upstream claim · OONI
Signal value
0.857143
Signal baseline
Unavailable
Evidence confidence
84.3%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 11, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8428571428571429,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 142327851,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-10T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-11T15:01:03.384018Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.8571428571428571,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-10:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-10&until=2026-06-11&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 12/14 measurements anomalous (85.7%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-10:00

OONI http_invalid_request_line: 8/13 measurements anomalous (61.5%)

Upstream claim · OONI
Signal value
0.615385
Signal baseline
Unavailable
Evidence confidence
74.6%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 11, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7461538461538462,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 142327850,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-10T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-11T15:01:03.384018Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6153846153846154,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-10:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-10&until=2026-06-11&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 8/13 measurements anomalous (61.5%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-09:06

OONI http_invalid_request_line: 8/14 measurements anomalous (57.1%)

Upstream claim · OONI
Signal value
0.571429
Signal baseline
Unavailable
Evidence confidence
72.9%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 10, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7285714285714285,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 138844438,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-09T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-10T03:01:18.491116Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.5714285714285714,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-09:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-09&until=2026-06-10&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 8/14 measurements anomalous (57.1%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-09:06

OONI http_header_field_manipulation: 7/14 measurements anomalous (50.0%)

Upstream claim · OONI
Signal value
0.5
Signal baseline
Unavailable
Evidence confidence
70%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 10, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 138844446,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-09T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-10T03:01:19.232429Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-09:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-09&until=2026-06-10&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 7/14 measurements anomalous (50.0%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-09:00

OONI http_invalid_request_line: 10/16 measurements anomalous (62.5%)

Upstream claim · OONI
Signal value
0.625
Signal baseline
Unavailable
Evidence confidence
75%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 10, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.75,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 138844437,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-09T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-10T03:01:18.491116Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.625,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-09:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-09&until=2026-06-10&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 10/16 measurements anomalous (62.5%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-08:18

OONI http_invalid_request_line: 12/19 measurements anomalous (63.2%)

Upstream claim · OONI
Signal value
0.631579
Signal baseline
Unavailable
Evidence confidence
75.3%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 9, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7526315789473684,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 136618945,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-08T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-09T03:01:27.916743Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.631578947368421,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-08:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-08&until=2026-06-09&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 12/19 measurements anomalous (63.2%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-08:18

OONI http_header_field_manipulation: 11/19 measurements anomalous (57.9%)

Upstream claim · OONI
Signal value
0.578947
Signal baseline
Unavailable
Evidence confidence
73.2%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 9, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7315789473684211,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 136618953,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-08T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-09T03:01:28.815429Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5789473684210527,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-08:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-08&until=2026-06-09&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 11/19 measurements anomalous (57.9%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-08:12

OONI http_invalid_request_line: 9/18 measurements anomalous (50.0%)

Upstream claim · OONI
Signal value
0.5
Signal baseline
Unavailable
Evidence confidence
70%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 9, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 136618944,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-08T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-09T03:01:27.916743Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.5,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-08:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-08&until=2026-06-09&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 9/18 measurements anomalous (50.0%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-07:18

OONI http_invalid_request_line: 11/17 measurements anomalous (64.7%)

Upstream claim · OONI
Signal value
0.647059
Signal baseline
Unavailable
Evidence confidence
75.9%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7588235294117647,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404191,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.305544Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6470588235294118,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 11/17 measurements anomalous (64.7%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-07:18

OONI http_header_field_manipulation: 11/17 measurements anomalous (64.7%)

Upstream claim · OONI
Signal value
0.647059
Signal baseline
Unavailable
Evidence confidence
75.9%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7588235294117647,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404199,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.887807Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6470588235294118,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 11/17 measurements anomalous (64.7%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-07:12

OONI http_invalid_request_line: 6/11 measurements anomalous (54.5%)

Upstream claim · OONI
Signal value
0.545455
Signal baseline
Unavailable
Evidence confidence
71.8%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7181818181818181,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404190,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.305544Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.5454545454545454,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 6/11 measurements anomalous (54.5%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-07:12

OONI http_header_field_manipulation: 6/11 measurements anomalous (54.5%)

Upstream claim · OONI
Signal value
0.545455
Signal baseline
Unavailable
Evidence confidence
71.8%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7181818181818181,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404198,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.887807Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5454545454545454,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 6/11 measurements anomalous (54.5%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-07:06

OONI http_invalid_request_line: 6/8 measurements anomalous (75.0%)

Upstream claim · OONI
Signal value
0.75
Signal baseline
Unavailable
Evidence confidence
80%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404189,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.305544Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.75,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 6/8 measurements anomalous (75.0%)",
  "upstreamSeverity": null
}

header-manipulation · critical

ooni:live:TH:http_header_field_manipulation:2026-06-07:06

OONI http_header_field_manipulation: 6/8 measurements anomalous (75.0%)

Upstream claim · OONI
Signal value
0.75
Signal baseline
Unavailable
Evidence confidence
80%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404197,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.887807Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "header-manipulation",
  "signalValue": 0.75,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 6/8 measurements anomalous (75.0%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-07:00

OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)

Upstream claim · OONI
Signal value
0.777778
Signal baseline
Unavailable
Evidence confidence
81.1%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8111111111111111,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404188,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.305544Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.7777777777777778,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)",
  "upstreamSeverity": null
}

header-manipulation · critical

ooni:live:TH:http_header_field_manipulation:2026-06-07:00

OONI http_header_field_manipulation: 8/9 measurements anomalous (88.9%)

Upstream claim · OONI
Signal value
0.888889
Signal baseline
Unavailable
Evidence confidence
85.6%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 8, 2026 · 03:02 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8555555555555556,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 134404196,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-07T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-08T03:02:22.887807Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "header-manipulation",
  "signalValue": 0.8888888888888888,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 8/9 measurements anomalous (88.9%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-06:18

OONI http_invalid_request_line: 6/10 measurements anomalous (60.0%)

Upstream claim · OONI
Signal value
0.6
Signal baseline
Unavailable
Evidence confidence
74%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 7, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.74,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 132186750,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-06T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-07T03:01:01.800025Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-06:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-06&until=2026-06-07&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 6/10 measurements anomalous (60.0%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-06:18

OONI http_header_field_manipulation: 6/10 measurements anomalous (60.0%)

Upstream claim · OONI
Signal value
0.6
Signal baseline
Unavailable
Evidence confidence
74%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 7, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.74,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 132186758,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-06T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-07T03:01:02.388037Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-06:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-06&until=2026-06-07&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 6/10 measurements anomalous (60.0%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-06:12

OONI http_header_field_manipulation: 9/17 measurements anomalous (52.9%)

Upstream claim · OONI
Signal value
0.529412
Signal baseline
Unavailable
Evidence confidence
71.2%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 7, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.711764705882353,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 132186757,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-06T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-07T03:01:02.388037Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5294117647058824,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-06:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-06&until=2026-06-07&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 9/17 measurements anomalous (52.9%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-06:00

OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)

Upstream claim · OONI
Signal value
0.777778
Signal baseline
Unavailable
Evidence confidence
81.1%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 7, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8111111111111111,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 132186747,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-06T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-07T03:01:01.800025Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.7777777777777778,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-06:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-06&until=2026-06-07&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)",
  "upstreamSeverity": null
}

header-manipulation · critical

ooni:live:TH:http_header_field_manipulation:2026-06-06:00

OONI http_header_field_manipulation: 7/9 measurements anomalous (77.8%)

Upstream claim · OONI
Signal value
0.777778
Signal baseline
Unavailable
Evidence confidence
81.1%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 7, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8111111111111111,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 132186755,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-06T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-07T03:01:02.388037Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "header-manipulation",
  "signalValue": 0.7777777777777778,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-06:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-06&until=2026-06-07&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 7/9 measurements anomalous (77.8%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-05:18

OONI http_invalid_request_line: 6/10 measurements anomalous (60.0%)

Upstream claim · OONI
Signal value
0.6
Signal baseline
Unavailable
Evidence confidence
74%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 6, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.74,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 131082555,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-05T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-06T15:01:07.924224Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-05:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-05&until=2026-06-06&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 6/10 measurements anomalous (60.0%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-05:18

OONI http_header_field_manipulation: 6/10 measurements anomalous (60.0%)

Upstream claim · OONI
Signal value
0.6
Signal baseline
Unavailable
Evidence confidence
74%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 6, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.74,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 131082563,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-05T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-06T15:01:08.613026Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-05:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-05&until=2026-06-06&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 6/10 measurements anomalous (60.0%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-05:12

OONI http_invalid_request_line: 8/11 measurements anomalous (72.7%)

Upstream claim · OONI
Signal value
0.727273
Signal baseline
Unavailable
Evidence confidence
79.1%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 6, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.790909090909091,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 131082554,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-05T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-06T15:01:07.924224Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.7272727272727273,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-05:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-05&until=2026-06-06&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 8/11 measurements anomalous (72.7%)",
  "upstreamSeverity": null
}

header-manipulation · critical

ooni:live:TH:http_header_field_manipulation:2026-06-05:12

OONI http_header_field_manipulation: 9/11 measurements anomalous (81.8%)

Upstream claim · OONI
Signal value
0.818182
Signal baseline
Unavailable
Evidence confidence
82.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 6, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8272727272727274,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 131082562,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-05T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-06T15:01:08.613026Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "header-manipulation",
  "signalValue": 0.8181818181818182,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-05:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-05&until=2026-06-06&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 9/11 measurements anomalous (81.8%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-05:00

OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)

Upstream claim · OONI
Signal value
0.666667
Signal baseline
Unavailable
Evidence confidence
76.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 6, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7666666666666666,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 131082552,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-05T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-06T15:01:07.924224Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6666666666666666,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-05:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-05&until=2026-06-06&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-05:00

OONI http_header_field_manipulation: 8/12 measurements anomalous (66.7%)

Upstream claim · OONI
Signal value
0.666667
Signal baseline
Unavailable
Evidence confidence
76.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 6, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7666666666666666,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 131082560,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-05T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-06T15:01:08.613026Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6666666666666666,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-05:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-05&until=2026-06-06&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 8/12 measurements anomalous (66.7%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-04:12

OONI http_header_field_manipulation: 9/17 measurements anomalous (52.9%)

Upstream claim · OONI
Signal value
0.529412
Signal baseline
Unavailable
Evidence confidence
71.2%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 5, 2026 · 21:00 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.711764705882353,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 129157912,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-04T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-05T21:00:56.443542Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5294117647058824,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-04:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-04&until=2026-06-05&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 9/17 measurements anomalous (52.9%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-04:06

OONI http_invalid_request_line: 12/18 measurements anomalous (66.7%)

Upstream claim · OONI
Signal value
0.666667
Signal baseline
Unavailable
Evidence confidence
76.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 5, 2026 · 21:00 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7666666666666666,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 129157904,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-04T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-05T21:00:55.815920Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6666666666666666,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-04:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-04&until=2026-06-05&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 12/18 measurements anomalous (66.7%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-03:00

OONI http_invalid_request_line: 11/18 measurements anomalous (61.1%)

Upstream claim · OONI
Signal value
0.611111
Signal baseline
Unavailable
Evidence confidence
74.4%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 4, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7444444444444445,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 125299765,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-03T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-04T03:01:23.822000Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6111111111111112,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-03:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-03&until=2026-06-04&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 11/18 measurements anomalous (61.1%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-03:00

OONI http_header_field_manipulation: 9/18 measurements anomalous (50.0%)

Upstream claim · OONI
Signal value
0.5
Signal baseline
Unavailable
Evidence confidence
70%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 4, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 125299771,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-03T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-04T03:01:24.787044Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-03:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-03&until=2026-06-04&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 9/18 measurements anomalous (50.0%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-02:18

OONI http_invalid_request_line: 6/12 measurements anomalous (50.0%)

Upstream claim · OONI
Signal value
0.5
Signal baseline
Unavailable
Evidence confidence
70%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 3, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 124197548,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-02T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-03T15:01:16.733216Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.5,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 6/12 measurements anomalous (50.0%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-02:18

OONI http_header_field_manipulation: 7/12 measurements anomalous (58.3%)

Upstream claim · OONI
Signal value
0.583333
Signal baseline
Unavailable
Evidence confidence
73.3%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 3, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7333333333333334,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 124197556,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-02T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-03T15:01:17.410972Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5833333333333334,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-02:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-02&until=2026-06-03&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 7/12 measurements anomalous (58.3%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-02:12

OONI http_invalid_request_line: 6/11 measurements anomalous (54.5%)

Upstream claim · OONI
Signal value
0.545455
Signal baseline
Unavailable
Evidence confidence
71.8%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 3, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7181818181818181,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 124197547,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-02T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-03T15:01:16.733216Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.5454545454545454,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 6/11 measurements anomalous (54.5%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-02:12

OONI http_header_field_manipulation: 6/11 measurements anomalous (54.5%)

Upstream claim · OONI
Signal value
0.545455
Signal baseline
Unavailable
Evidence confidence
71.8%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 3, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7181818181818181,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 124197555,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-02T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-03T15:01:17.410972Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5454545454545454,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-02:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-02&until=2026-06-03&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 6/11 measurements anomalous (54.5%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-02:06

OONI http_invalid_request_line: 11/16 measurements anomalous (68.8%)

Upstream claim · OONI
Signal value
0.6875
Signal baseline
Unavailable
Evidence confidence
77.5%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 3, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.775,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 124197546,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-02T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-03T15:01:16.733216Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6875,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 11/16 measurements anomalous (68.8%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-02:00

OONI http_invalid_request_line: 9/14 measurements anomalous (64.3%)

Upstream claim · OONI
Signal value
0.642857
Signal baseline
Unavailable
Evidence confidence
75.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 3, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7571428571428571,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 124197545,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-02T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-03T15:01:16.733216Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6428571428571429,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 9/14 measurements anomalous (64.3%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-02:00

OONI http_header_field_manipulation: 7/14 measurements anomalous (50.0%)

Upstream claim · OONI
Signal value
0.5
Signal baseline
Unavailable
Evidence confidence
70%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 3, 2026 · 15:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 124197553,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-02T00:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-03T15:01:17.410972Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.5,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-02:00",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-02&until=2026-06-03&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 7/14 measurements anomalous (50.0%)",
  "upstreamSeverity": null
}

middlebox-detection · elevated

ooni:live:TH:http_invalid_request_line:2026-06-01:18

OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)

Upstream claim · OONI
Signal value
0.666667
Signal baseline
Unavailable
Evidence confidence
76.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 2, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7666666666666666,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 120765756,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-01T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-02T03:01:32.789200Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "middlebox-detection",
  "signalValue": 0.6666666666666666,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-01:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-01&until=2026-06-02&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-01:18

OONI http_header_field_manipulation: 8/12 measurements anomalous (66.7%)

Upstream claim · OONI
Signal value
0.666667
Signal baseline
Unavailable
Evidence confidence
76.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 2, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7666666666666666,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 120765764,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-01T18:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-02T03:01:33.372870Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6666666666666666,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-01:18",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-01&until=2026-06-02&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 8/12 measurements anomalous (66.7%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-01:12

OONI http_invalid_request_line: 8/11 measurements anomalous (72.7%)

Upstream claim · OONI
Signal value
0.727273
Signal baseline
Unavailable
Evidence confidence
79.1%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 2, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.790909090909091,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 120765755,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-01T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-02T03:01:32.789200Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.7272727272727273,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-01:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-01&until=2026-06-02&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 8/11 measurements anomalous (72.7%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-01:12

OONI http_header_field_manipulation: 7/11 measurements anomalous (63.6%)

Upstream claim · OONI
Signal value
0.636364
Signal baseline
Unavailable
Evidence confidence
75.5%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 2, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7545454545454546,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 120765763,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-01T12:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-02T03:01:33.372870Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6363636363636364,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-01:12",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-01&until=2026-06-02&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 7/11 measurements anomalous (63.6%)",
  "upstreamSeverity": null
}

middlebox-detection · critical

ooni:live:TH:http_invalid_request_line:2026-06-01:06

OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)

Upstream claim · OONI
Signal value
0.777778
Signal baseline
Unavailable
Evidence confidence
81.1%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 2, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.8111111111111111,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 120765754,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-01T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-02T03:01:32.789200Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "critical",
  "signalType": "middlebox-detection",
  "signalValue": 0.7777777777777778,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-01:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-01&until=2026-06-02&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)",
  "upstreamSeverity": null
}

header-manipulation · elevated

ooni:live:TH:http_header_field_manipulation:2026-06-01:06

OONI http_header_field_manipulation: 6/9 measurements anomalous (66.7%)

Upstream claim · OONI
Signal value
0.666667
Signal baseline
Unavailable
Evidence confidence
76.7%
Link confidence
80%

Why it is linked: OONI elevated signal in same country/month

Retrieved
Jun 2, 2026 · 03:01 UTC
Open upstream source
Complete evidence record
{
  "asn": null,
  "blockingMethod": null,
  "confidence": 0.7666666666666666,
  "continent": "Asia",
  "countryCode": "TH",
  "domain": null,
  "domainCategory": null,
  "id": 120765762,
  "kind": "measurement",
  "linkConfidence": 0.8,
  "linkReason": "OONI elevated signal in same country/month",
  "observedAt": "2026-06-01T06:00:00Z",
  "probeNodeId": null,
  "regionCode": null,
  "retrievedAt": "2026-06-02T03:01:33.372870Z",
  "riskTier": 2,
  "signalBaseline": null,
  "signalLevel": "elevated",
  "signalType": "header-manipulation",
  "signalValue": 0.6666666666666666,
  "source": "ooni",
  "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-01:06",
  "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-01&until=2026-06-02&only=anomalies",
  "unSubregion": "South-Eastern Asia",
  "upstreamCause": null,
  "upstreamClaim": "OONI http_header_field_manipulation: 6/9 measurements anomalous (66.7%)",
  "upstreamSeverity": null
}
Source-reported corroboration

The source’s corroboration assessment is separate from incident confidence and evidence-link confidence. Inspect its source list, count and description.

{
  "description": "Single source: ooni",
  "evidenceCount": 51,
  "level": "low",
  "score": 0.65,
  "sourceCount": 1,
  "sources": [
    "ooni"
  ]
}

Declared incident sources: OONI.

This record does not list two distinct sources. Treat it as a single-source or uncorroborated record.

Scope and attribution

What the record names.

Methodology

Affected services

No services named.

Incident mechanism

Middlebox / DPI

Individual evidence may carry more specific methods. Those do not automatically describe the entire incident.

Affected domains · 0

Domains named by the source record. Each link opens country-specific OONI measurements; a named domain is not a blanket national-block verdict.

No domains named.

Networks and evidence attribution

ASNs named by this source record: None listed.

This aggregate describes fields literally present in linked evidence. It does not identify who caused an event or prove intent.

{
  "asns_attributed": 0,
  "domains_attributed": 0,
  "methods": [
    {
      "evidence_count": 29,
      "method": "middlebox-detection"
    },
    {
      "evidence_count": 22,
      "method": "header-manipulation"
    }
  ],
  "note": "Aggregated from this incident's linked evidence rows — only domains, ASNs, and blocking methods the evidence literally records are shown, with the per-item evidence count. No per-domain/per-ASN attribution is present in the linked evidence for this incident (e.g. country/ASN-level outage signals).",
  "sources": [
    "ooni"
  ],
  "top_asns": [],
  "top_domains": []
}
What this record cannot establish

Measurements alone do not attribute an event to a government, ISP or another actor, and do not establish intent. An outage or anomalous result can have several explanations.

The country label is an aggregation scope. It is not a census of every network, city or service. Regional or ASN fields belong to their individual source evidence and should not be expanded into a national claim.

The source observation window and evidence timestamps do not prove an exact start and stop of blocking.

Signal definitions, baseline rates and model versions depend on the source. This record does not establish a common baseline or calibrated certainty. Use the source’s specific signal definition and evaluation before interpreting a score.

Inspect measurement coverage

Cite this incident

Take the record
with you.

Use the permanent published URL.
The original source title is preserved.

The record over time.

Created
2026-06-15 10:22:12.854399 · timezone unspecified
Last updated
2026-06-15 10:22:12.854399 · timezone unspecified
Revision
1
Revision history and original fields

Revision-history array unavailable.

Canonical ID: TH-2026-0154. Source ID: TH-2026-0154. Hash ID: 7cf705ad7472.

Additional source duration field: 288 hours. It is retained separately from the minutes field and does not establish a verified event duration.

Complete source JSON
{
  "affectedAsns": [],
  "affectedDomains": [],
  "affectedServices": [],
  "anomalyRate": 0.6396488938899247,
  "attribution": {
    "asns_attributed": 0,
    "domains_attributed": 0,
    "methods": [
      {
        "evidence_count": 29,
        "method": "middlebox-detection"
      },
      {
        "evidence_count": 22,
        "method": "header-manipulation"
      }
    ],
    "note": "Aggregated from this incident's linked evidence rows — only domains, ASNs, and blocking methods the evidence literally records are shown, with the per-item evidence count. No per-domain/per-ASN attribution is present in the linked evidence for this incident (e.g. country/ASN-level outage signals).",
    "sources": [
      "ooni"
    ],
    "top_asns": [],
    "top_domains": []
  },
  "confidence": 0.77,
  "corroboration": {
    "description": "Single source: ooni",
    "evidenceCount": 51,
    "level": "low",
    "score": 0.65,
    "sourceCount": 1,
    "sources": [
      "ooni"
    ]
  },
  "country": "TH",
  "countryName": "Thailand",
  "createdAt": "2026-06-15T10:22:12.854399",
  "description": "OONI detected 51 days of elevated network interference averaging 64.0% anomaly rate.",
  "duration": 17280,
  "durationHours": 288,
  "endTime": "2026-06-13T06:00:00Z",
  "evidence": [
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7285714285714285,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 148199520,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-13T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-14T03:01:30.886539Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.5714285714285714,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-13:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-13&until=2026-06-14&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 4/7 measurements anomalous (57.1%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7571428571428571,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 145824457,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-12T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-13T03:01:22.716658Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6428571428571429,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-12:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-12&until=2026-06-13&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 9/14 measurements anomalous (64.3%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7666666666666666,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 145824456,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-12T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-13T03:01:22.716658Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6666666666666666,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-12:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-12&until=2026-06-13&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 145824463,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-12T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-13T03:01:25.592082Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-12:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-12&until=2026-06-13&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 6/12 measurements anomalous (50.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7153846153846154,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 143584139,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-11T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-12T03:01:31.506356Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.5384615384615384,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-11:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-11&until=2026-06-12&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 7/13 measurements anomalous (53.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8272727272727274,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 143584138,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-11T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-12T03:01:31.506356Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.8181818181818182,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-11:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-11&until=2026-06-12&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 9/11 measurements anomalous (81.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7545454545454546,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 143584145,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-11T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-12T03:01:32.237646Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6363636363636364,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-11:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-11&until=2026-06-12&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 7/11 measurements anomalous (63.6%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8428571428571429,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 142327851,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-10T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-11T15:01:03.384018Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.8571428571428571,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-10:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-10&until=2026-06-11&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 12/14 measurements anomalous (85.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7461538461538462,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 142327850,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-10T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-11T15:01:03.384018Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6153846153846154,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-10:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-10&until=2026-06-11&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 8/13 measurements anomalous (61.5%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7285714285714285,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 138844438,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-09T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-10T03:01:18.491116Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.5714285714285714,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-09:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-09&until=2026-06-10&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 8/14 measurements anomalous (57.1%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 138844446,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-09T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-10T03:01:19.232429Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-09:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-09&until=2026-06-10&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 7/14 measurements anomalous (50.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.75,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 138844437,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-09T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-10T03:01:18.491116Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.625,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-09:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-09&until=2026-06-10&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 10/16 measurements anomalous (62.5%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7526315789473684,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 136618945,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-08T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-09T03:01:27.916743Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.631578947368421,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-08:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-08&until=2026-06-09&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 12/19 measurements anomalous (63.2%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7315789473684211,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 136618953,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-08T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-09T03:01:28.815429Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5789473684210527,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-08:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-08&until=2026-06-09&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 11/19 measurements anomalous (57.9%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 136618944,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-08T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-09T03:01:27.916743Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.5,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-08:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-08&until=2026-06-09&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 9/18 measurements anomalous (50.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7588235294117647,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404191,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.305544Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6470588235294118,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 11/17 measurements anomalous (64.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7588235294117647,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404199,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.887807Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6470588235294118,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 11/17 measurements anomalous (64.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7181818181818181,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404190,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.305544Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.5454545454545454,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 6/11 measurements anomalous (54.5%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7181818181818181,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404198,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.887807Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5454545454545454,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 6/11 measurements anomalous (54.5%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404189,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.305544Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.75,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 6/8 measurements anomalous (75.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404197,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.887807Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "header-manipulation",
      "signalValue": 0.75,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 6/8 measurements anomalous (75.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8111111111111111,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404188,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.305544Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.7777777777777778,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-07:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8555555555555556,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 134404196,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-07T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-08T03:02:22.887807Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "header-manipulation",
      "signalValue": 0.8888888888888888,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-07:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-07&until=2026-06-08&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 8/9 measurements anomalous (88.9%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.74,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 132186750,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-06T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-07T03:01:01.800025Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-06:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-06&until=2026-06-07&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 6/10 measurements anomalous (60.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.74,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 132186758,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-06T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-07T03:01:02.388037Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-06:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-06&until=2026-06-07&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 6/10 measurements anomalous (60.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.711764705882353,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 132186757,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-06T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-07T03:01:02.388037Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5294117647058824,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-06:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-06&until=2026-06-07&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 9/17 measurements anomalous (52.9%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8111111111111111,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 132186747,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-06T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-07T03:01:01.800025Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.7777777777777778,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-06:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-06&until=2026-06-07&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8111111111111111,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 132186755,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-06T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-07T03:01:02.388037Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "header-manipulation",
      "signalValue": 0.7777777777777778,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-06:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-06&until=2026-06-07&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 7/9 measurements anomalous (77.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.74,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 131082555,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-05T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-06T15:01:07.924224Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-05:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-05&until=2026-06-06&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 6/10 measurements anomalous (60.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.74,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 131082563,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-05T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-06T15:01:08.613026Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-05:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-05&until=2026-06-06&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 6/10 measurements anomalous (60.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.790909090909091,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 131082554,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-05T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-06T15:01:07.924224Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.7272727272727273,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-05:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-05&until=2026-06-06&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 8/11 measurements anomalous (72.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8272727272727274,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 131082562,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-05T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-06T15:01:08.613026Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "header-manipulation",
      "signalValue": 0.8181818181818182,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-05:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-05&until=2026-06-06&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 9/11 measurements anomalous (81.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7666666666666666,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 131082552,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-05T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-06T15:01:07.924224Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6666666666666666,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-05:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-05&until=2026-06-06&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7666666666666666,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 131082560,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-05T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-06T15:01:08.613026Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6666666666666666,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-05:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-05&until=2026-06-06&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 8/12 measurements anomalous (66.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.711764705882353,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 129157912,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-04T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-05T21:00:56.443542Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5294117647058824,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-04:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-04&until=2026-06-05&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 9/17 measurements anomalous (52.9%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7666666666666666,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 129157904,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-04T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-05T21:00:55.815920Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6666666666666666,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-04:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-04&until=2026-06-05&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 12/18 measurements anomalous (66.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7444444444444445,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 125299765,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-03T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-04T03:01:23.822000Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6111111111111112,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-03:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-03&until=2026-06-04&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 11/18 measurements anomalous (61.1%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 125299771,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-03T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-04T03:01:24.787044Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-03:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-03&until=2026-06-04&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 9/18 measurements anomalous (50.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 124197548,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-02T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-03T15:01:16.733216Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.5,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 6/12 measurements anomalous (50.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7333333333333334,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 124197556,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-02T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-03T15:01:17.410972Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5833333333333334,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-02:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-02&until=2026-06-03&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 7/12 measurements anomalous (58.3%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7181818181818181,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 124197547,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-02T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-03T15:01:16.733216Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.5454545454545454,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 6/11 measurements anomalous (54.5%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7181818181818181,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 124197555,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-02T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-03T15:01:17.410972Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5454545454545454,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-02:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-02&until=2026-06-03&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 6/11 measurements anomalous (54.5%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.775,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 124197546,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-02T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-03T15:01:16.733216Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6875,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 11/16 measurements anomalous (68.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7571428571428571,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 124197545,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-02T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-03T15:01:16.733216Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6428571428571429,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-02:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-02&until=2026-06-03&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 9/14 measurements anomalous (64.3%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 124197553,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-02T00:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-03T15:01:17.410972Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.5,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-02:00",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-02&until=2026-06-03&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 7/14 measurements anomalous (50.0%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7666666666666666,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 120765756,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-01T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-02T03:01:32.789200Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "middlebox-detection",
      "signalValue": 0.6666666666666666,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-01:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-01&until=2026-06-02&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 8/12 measurements anomalous (66.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7666666666666666,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 120765764,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-01T18:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-02T03:01:33.372870Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6666666666666666,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-01:18",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-01&until=2026-06-02&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 8/12 measurements anomalous (66.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.790909090909091,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 120765755,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-01T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-02T03:01:32.789200Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.7272727272727273,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-01:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-01&until=2026-06-02&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 8/11 measurements anomalous (72.7%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7545454545454546,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 120765763,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-01T12:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-02T03:01:33.372870Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6363636363636364,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-01:12",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-01&until=2026-06-02&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 7/11 measurements anomalous (63.6%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.8111111111111111,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 120765754,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-01T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-02T03:01:32.789200Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "critical",
      "signalType": "middlebox-detection",
      "signalValue": 0.7777777777777778,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_invalid_request_line:2026-06-01:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_invalid_request_line&since=2026-06-01&until=2026-06-02&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_invalid_request_line: 7/9 measurements anomalous (77.8%)",
      "upstreamSeverity": null
    },
    {
      "asn": null,
      "blockingMethod": null,
      "confidence": 0.7666666666666666,
      "continent": "Asia",
      "countryCode": "TH",
      "domain": null,
      "domainCategory": null,
      "id": 120765762,
      "kind": "measurement",
      "linkConfidence": 0.8,
      "linkReason": "OONI elevated signal in same country/month",
      "observedAt": "2026-06-01T06:00:00Z",
      "probeNodeId": null,
      "regionCode": null,
      "retrievedAt": "2026-06-02T03:01:33.372870Z",
      "riskTier": 2,
      "signalBaseline": null,
      "signalLevel": "elevated",
      "signalType": "header-manipulation",
      "signalValue": 0.6666666666666666,
      "source": "ooni",
      "sourceRef": "ooni:live:TH:http_header_field_manipulation:2026-06-01:06",
      "sourceUrl": "https://explorer.ooni.org/search?probe_cc=TH&test_name=http_header_field_manipulation&since=2026-06-01&until=2026-06-02&only=anomalies",
      "unSubregion": "South-Eastern Asia",
      "upstreamCause": null,
      "upstreamClaim": "OONI http_header_field_manipulation: 6/9 measurements anomalous (66.7%)",
      "upstreamSeverity": null
    }
  ],
  "evidenceCount": 51,
  "evidenceSourceBreakdown": {
    "ooni": 51
  },
  "evidenceSpan": {
    "earliest": "2026-06-01T06:00:00Z",
    "latest": "2026-06-13T06:00:00Z"
  },
  "flag": "🇹🇭",
  "generated_at_utc": "2026-09-20T18:31:05.335872Z",
  "hashId": "7cf705ad7472",
  "id": "TH-2026-0154",
  "incidentType": "censorship",
  "measurementCount": 51,
  "mechanism": "Middlebox / DPI",
  "readableId": "TH-2026-0154",
  "reportUrl": "https://api.voidly.ai/data/incidents/7cf705ad7472/report?format=markdown",
  "revision": 1,
  "severity": "critical",
  "severityGrade": "B",
  "sources": [
    "ooni"
  ],
  "startTime": "2026-06-01T06:00:00Z",
  "status": "confirmed",
  "title": "Sustained censorship in TH (2026-06)",
  "updatedAt": "2026-06-15T10:22:12.854399"
}
All Thailand incidents
More with the same mechanism · Middlebox / DPI

Related records come from up to 100 recent records in the same country. They do not establish a causal connection.