{"affectedAsns":["AS147011"],"affectedDomains":["signal.org","telegram.org","whatsapp.com"],"affectedServices":["Signal","Telegram","Tor","WhatsApp"],"anomalyRate":1,"attribution":{"asns_attributed":3,"domains_attributed":3,"methods":[{"evidence_count":3,"method":"tcp-reset"},{"evidence_count":1,"method":"tor-blocking"}],"note":"Aggregated from this incident's qualifying linked evidence rows — only domains, ASNs, and blocking methods the evidence literally records are shown, with the per-item evidence count.","sources":["censoredplanet","ooni"],"top_asns":[{"asn":"AS147011","evidence_count":3}],"top_domains":[{"domain":"signal.org","evidence_count":1},{"domain":"telegram.org","evidence_count":1},{"domain":"whatsapp.com","evidence_count":1}]},"confidence":0.9,"corroboration":{"description":"2 source labels present (ooni, censoredplanet); target/time agreement not verified","evidenceCount":4,"level":"medium","score":0.85,"sourceCount":2,"sources":["ooni","censoredplanet"]},"country":"KH","countryName":"Cambodia","createdAt":"2026-09-21T03:06:34.524163","description":null,"duration":1439,"durationHours":23.9997,"endTime":"2026-09-20T23:59:59Z","evidence":[{"asn":null,"blockingMethod":null,"citationScope":"filtered_search","citationUrl":"https://explorer.ooni.org/search?probe_cc=KH&test_name=tor&since=2026-09-20&until=2026-09-21&only=anomalies","confidence":0.9,"continent":"Asia","countryCode":"KH","domain":null,"domainCategory":null,"exactMeasurementLink":false,"id":458483821,"kind":"measurement","linkConfidence":0.9,"linkReason":"OONI live measurements","observedAt":"2026-09-20T12:00:00Z","probeNodeId":null,"regionCode":null,"retrievedAt":"2026-09-21T03:04:25.456840Z","riskTier":3,"signalBaseline":null,"signalLevel":"critical","signalType":"tor-blocking","signalValue":1,"source":"ooni","sourceRef":"ooni:live:KH:tor:2026-09-20:12","sourceUrl":"https://explorer.ooni.org/search?probe_cc=KH&test_name=tor&since=2026-09-20&until=2026-09-21&only=anomalies","unSubregion":"South-Eastern Asia","upstreamCause":null,"upstreamClaim":"OONI tor: 1/1 measurements anomalous (100.0%)","upstreamSeverity":null},{"asn":147011,"blockingMethod":"tcp-reset","citationScope":"publisher_portal","citationUrl":"https://data.censoredplanet.org","confidence":0.8136363636363636,"continent":"Asia","countryCode":"KH","domain":"signal.org","domainCategory":"COMT","exactMeasurementLink":false,"id":459551902,"kind":"http-probe","linkConfidence":0.8,"linkReason":"CenAlert event for same country and date range","observedAt":"2026-09-20T00:00:00Z","probeNodeId":null,"regionCode":null,"retrievedAt":"2026-09-21T10:27:00.546601Z","riskTier":3,"signalBaseline":null,"signalLevel":"elevated","signalType":"http-blocking-tcp-reset","signalValue":0.5454545454545454,"source":"censoredplanet","sourceRef":"censoredplanet:hyperquack:HTTPS:KH:signal.org:2026-09-20","sourceUrl":"https://data.censoredplanet.org","unSubregion":"South-Eastern Asia","upstreamCause":null,"upstreamClaim":"HTTPS blocking (tcp-reset): 12/22 probes blocked (54.5%) for signal.org","upstreamSeverity":null},{"asn":147011,"blockingMethod":"tcp-reset","citationScope":"publisher_portal","citationUrl":"https://data.censoredplanet.org","confidence":0.8136363636363636,"continent":"Asia","countryCode":"KH","domain":"telegram.org","domainCategory":"COMT","exactMeasurementLink":false,"id":459551914,"kind":"http-probe","linkConfidence":0.8,"linkReason":"CenAlert event for same country and date range","observedAt":"2026-09-20T00:00:00Z","probeNodeId":null,"regionCode":null,"retrievedAt":"2026-09-21T10:27:00.546601Z","riskTier":3,"signalBaseline":null,"signalLevel":"elevated","signalType":"http-blocking-tcp-reset","signalValue":0.5454545454545454,"source":"censoredplanet","sourceRef":"censoredplanet:hyperquack:HTTPS:KH:telegram.org:2026-09-20","sourceUrl":"https://data.censoredplanet.org","unSubregion":"South-Eastern Asia","upstreamCause":null,"upstreamClaim":"HTTPS blocking (tcp-reset): 12/22 probes blocked (54.5%) for telegram.org","upstreamSeverity":null},{"asn":147011,"blockingMethod":"tcp-reset","citationScope":"publisher_portal","citationUrl":"https://data.censoredplanet.org","confidence":0.8136363636363636,"continent":"Asia","countryCode":"KH","domain":"whatsapp.com","domainCategory":"COMT","exactMeasurementLink":false,"id":459551945,"kind":"http-probe","linkConfidence":0.8,"linkReason":"CenAlert event for same country and date range","observedAt":"2026-09-20T00:00:00Z","probeNodeId":null,"regionCode":null,"retrievedAt":"2026-09-21T10:27:00.546601Z","riskTier":3,"signalBaseline":null,"signalLevel":"elevated","signalType":"http-blocking-tcp-reset","signalValue":0.5454545454545454,"source":"censoredplanet","sourceRef":"censoredplanet:hyperquack:HTTPS:KH:whatsapp.com:2026-09-20","sourceUrl":"https://data.censoredplanet.org","unSubregion":"South-Eastern Asia","upstreamCause":null,"upstreamClaim":"HTTPS blocking (tcp-reset): 12/22 probes blocked (54.5%) for whatsapp.com","upstreamSeverity":null}],"evidenceCount":4,"evidenceSourceBreakdown":{"censoredplanet":3,"ooni":1},"evidenceSpan":{"earliest":"2026-09-20T00:00:00Z","latest":"2026-09-20T12:00:00Z"},"flag":"🇰🇭","generated_at_utc":"2026-11-08T19:20:12.873066Z","hashId":"5bd11a8db328","id":"KH-2026-0197","incidentType":"censorship","measurementCount":1,"mechanism":"TCP/RST injection","normalOoniObservationCount":0,"normalOoniObservationNote":"These linked OONI rows carry the historical signal_level='normal' stored label and are quarantined from qualifying evidence pending regrade. The label is not proof that every row was accessible or anomaly-free: low-anomaly rows and rows with an omitted confirmed result may be present.","normalOoniObservations":[],"readableId":"KH-2026-0197","reportUrl":"https://api.voidly.ai/data/incidents/5bd11a8db328/report?format=markdown","revision":2,"severity":"critical","severityGrade":"C","sources":["ooni","censoredplanet"],"startTime":"2026-09-20T00:00:00Z","status":"suspected","title":"Censorship detected in KH","updatedAt":"2026-09-22T06:00:13.219891"}