* checking system
CYGWIN detected
firewall type is windivert
* checking prerequisites
* checking DNS
system DNS is working
comparing system resolver to public DNS : 8.8.8.8
pornhub.com : OK
putinhuylo.com : OK
rutracker.org : OK
www.torproject.org : OK
bbc.com : OK
checking resolved IP uniqueness for : pornhub.com putinhuylo.com rutracker.org www.torproject.org bbc.com
censor's DNS can return equal result for multiple blocked domains.
all resolved IPs are unique
-- DNS looks good
-- NOTE this check is Russia targeted. In your country other domains may be blocked.
* checking virtualization
cannot detect

NOTE ! this test should be run with zapret or any other bypass software disabled, without VPN

specify domain(s) to test. multiple domains are space separated.
domain(s) (default: rutracker.org) : ip protocol version(s) - 4, 6 or 46 for both (default: 46) : 
check http (default : Y) (Y/N) ? 
check https tls 1.2 (default : Y) (Y/N) ? 
TLS 1.3 uses encrypted ServerHello. DPI cannot check domain name in server response.
This can allow more bypass strategies to work.
What works for TLS 1.2 will also work for TLS 1.3 but not vice versa.
Most sites nowadays support TLS 1.3 but not all. If you can't find a strategy for TLS 1.2 use this test.
TLS 1.3 only strategy is better than nothing.
check https tls 1.3 (default : N) (Y/N) ? 
make sure target domain(s) support QUIC or result will be negative in any case
check http3 QUIC (default : Y) (Y/N) ? 
on limited systems like openwrt CA certificates might not be installed to preserve space
in such a case curl cannot verify server certificate and you should either install ca-bundle or disable verification
however disabling verification will break https check if ISP does MitM attack and substitutes server certificate
do not verify server certificate (default : N) (Y/N) ? 
sometimes ISPs use multiple DPIs or load balancing. bypass strategies may work unstable.
how many times to repeat each test (default: 1) : 
quick - scan as fast as possible to reveal any working strategy
standard - do investigation what works on your DPI
force - scan maximum despite of result
1 : quick
2 : standard
3 : force
your choice (default : standard) : selected : standard


* curl_test_http ipv4 nordvpn.com
- checking without DPI bypass
!!!!! AVAILABLE !!!!!

* curl_test_https_tls12 ipv4 nordvpn.com
- checking without DPI bypass
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28

preparing winws redirection
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=split2
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=disorder2
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-fake-tls=0x00000000
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=2
curl: (28) Connection timed out after 2014 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=2 --dpi-desync-fake-tls=0x00000000
curl: (28) Connection timed out after 2002 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=3
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=badsum
curl: (35) quictls/3.1.4: error:0A000410:SSL routines::sslv3 alert handshake failure
UNAVAILABLE code=35
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=badsum --dpi-desync-fake-tls=0x00000000
curl: (35) quictls/3.1.4: error:0A00010B:SSL routines::wrong version number
UNAVAILABLE code=35
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=badseq
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=datanoack
!!!!! AVAILABLE !!!!!
WARNING ! although datanoack fooling worked it may break NAT and may only work with external IP. Additionally it may require nftables to work correctly.
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=md5sig
!!!!! AVAILABLE !!!!!
WARNING ! although md5sig fooling worked it will not work on all sites. it typically works only on linux servers.
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=1
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=2
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=3
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=4
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=5
!!!!! AVAILABLE !!!!!
WARNING ! although autottl worked it requires testing on multiple domains to find out reliable delta
WARNING ! if a reliable delta cannot be found it's a good idea not to use autottl
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin
curl: (28) Connection timed out after 2016 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin
curl: (28) Connection timed out after 2009 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2016 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2014 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin
curl: (28) Connection timed out after 2001 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2011 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --wssize 1:6
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=split2 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=disorder2 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --wssize 1:6
curl: (28) Connection timed out after 2005 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --wssize 1:6 --dpi-desync-fake-tls=0x00000000
curl: (28) Connection timed out after 2001 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=2 --wssize 1:6
curl: (28) Connection timed out after 2013 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=2 --wssize 1:6 --dpi-desync-fake-tls=0x00000000
curl: (28) Connection timed out after 2002 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=3 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=badsum --wssize 1:6
curl: (35) quictls/3.1.4: error:0A000410:SSL routines::sslv3 alert handshake failure
UNAVAILABLE code=35
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=badsum --wssize 1:6 --dpi-desync-fake-tls=0x00000000
curl: (35) quictls/3.1.4: error:0A00010B:SSL routines::wrong version number
UNAVAILABLE code=35
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=badseq --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=datanoack --wssize 1:6
!!!!! AVAILABLE !!!!!
WARNING ! although datanoack fooling worked it may break NAT and may only work with external IP. Additionally it may require nftables to work correctly.
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-fooling=md5sig --wssize 1:6
!!!!! AVAILABLE !!!!!
WARNING ! although md5sig fooling worked it will not work on all sites. it typically works only on linux servers.
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=1 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=2 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=3 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=4 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=fake --dpi-desync-ttl=1 --dpi-desync-autottl=5 --wssize 1:6
!!!!! AVAILABLE !!!!!
WARNING ! although autottl worked it requires testing on multiple domains to find out reliable delta
WARNING ! if a reliable delta cannot be found it's a good idea not to use autottl
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6
curl: (28) Connection timed out after 2013 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6 --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6
curl: (28) Connection timed out after 2016 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6 --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2014 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6
curl: (28) Connection timed out after 2014 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,split2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6 --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2015 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --wssize 1:6
!!!!! AVAILABLE !!!!!
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6
curl: (28) Connection timed out after 2011 milliseconds
UNAVAILABLE code=28
- checking winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=syndata,disorder2 --dpi-desync-fake-syndata=/cygdrive/c/Users/Glitc/Desktop/zapret-master/zapret-win-bundle-master/blockcheck/zapret/files/fake/tls_clienthello_iana_org.bin --wssize 1:6 --dpi-desync-split-pos=1
curl: (28) Connection timed out after 2002 milliseconds
UNAVAILABLE code=28

!!!!! curl_test_https_tls12: working strategy found for ipv4 nordvpn.com : winws --dpi-desync=split2 !!!!!

clearing winws redirection

* curl_test_http3 ipv4 nordvpn.com
- checking without DPI bypass
!!!!! AVAILABLE !!!!!

* curl_test_http ipv6 nordvpn.com
- checking without DPI bypass
could not resolve ipv6 nordvpn.com
UNAVAILABLE code=6

* curl_test_https_tls12 ipv6 nordvpn.com
- checking without DPI bypass
could not resolve ipv6 nordvpn.com
UNAVAILABLE code=6

* curl_test_http3 ipv6 nordvpn.com
- checking without DPI bypass
could not resolve ipv6 nordvpn.com
UNAVAILABLE code=6

* SUMMARY
ipv4 nordvpn.com curl_test_http : working without bypass
ipv4 nordvpn.com curl_test_https_tls12 : winws --wf-l3=ipv4 --wf-tcp=443 --dpi-desync=split2
ipv4 nordvpn.com curl_test_http3 : working without bypass
ipv6 nordvpn.com curl_test_http : test aborted, no reason to continue. curl code 6: could not resolve host
ipv6 nordvpn.com curl_test_https_tls12 : test aborted, no reason to continue. curl code 6: could not resolve host
ipv6 nordvpn.com curl_test_http3 : test aborted, no reason to continue. curl code 6: could not resolve host

Please note this SUMMARY does not guarantee a magic pill for you to copy/paste and be happy.
Understanding how strategies work is very desirable.
This knowledge allows to understand better which strategies to prefer and which to avoid if possible, how to combine strategies.
Blockcheck does it's best to prioritize good strategies but it's not bullet-proof.
It was designed not as magic pill maker but as a DPI bypass test tool.

press enter to continue