another wave of arrests targets online news platform

On March 6, police stormed the office of Toplum TV, an online news platform in Baku. While the office was searched, the police questioned some fifteen staff members. Among those detained were interns and the tech team. While nine were released after questioning, at least six other journalists were sent to pre-trial custody on bogus smuggling charges.

Shortly after detention, social media accounts belonging to Toplum TV were compromised. 

As a result, all 3600 videos on Toplum TV’s YouTube channel were deleted.  

Previously Toplum TV’s Facebook page was hacked via SMS interception. 

authorities arrest another blogger and block access to a public forum

Farid Suleymanov was arrested on January 8, 2024. He was sentenced to 30-day administrative detention. And although Suleymanov was scheduled for release on February 7 – the day of snap presidential elections – he was instead taken back to BandOtdel – the department for combating organized crime at the Ministry of the Interior. 

Suleymanov is an activist, lawyer, and blogger from Azerbaijan. Active on a number of social platforms, Suleymanov ran a TikTok channel called “I saw it, I showed you.” Through his videos, Suleymanov raised awareness of the illegal activities of the traffic police, exposing their unlawfulness. For this, he has been questioned several times but let go. He also informs his audience via his social media channels of other challenges and issues in the country. 

According to this video on Suleymanov’s YouTube channel, he was approached by a group of unknown men, who, without introducing themselves, shoved him into a white Mercedes and took him to BandOtdel.

Separately, Az-net Watch received an anonymous email from a reader informing the platform of the blocking of a Russian-language forum  www.baku365.com. According to the information shared in the email, all three main mobile operators and local ISPs have blocked access to the website. On what grounds remains unclear. Earlier, Suleymanov’s daughter shared a post about her father’s unlawful arrest and detention. 

editor of an online television channel disappears, then handed arrest [several other journalists detained]

Kanal11 editor Teymur Karimov first reportedly went missing on December 11. But the same day, the Ministry of Internal Affairs confirmed Karimov’s whereabouts in a statement saying Karimov was detained and charged with extortion. The founder and director of Kanal11, Karimov, was sent to four months of pre-trial detention. 

If convicted, Karimov will face five years behind bars or fifteen with aggravated circumstances. 

Karimov was among scores of journalists rounded up in November and December, ahead of the snap presidential election that is taking place on February 7, 2024.

According to Kanal11, the real cause of Karimov’s arrest was his previous reporting on corruption in one of the regions of Azerbaijan.

Also on December 11, police arrested two more journalists – Ibrahim Humbatov of Azerinfo.az and Arshad Ibrahimov of Dunyaninsesi.az – on alleged extortion charges. Both journalists were sent into pre-trial detention pending trial.  

Separately on December 13, authorities arrested investigative journalist Hafiz Babali and sent him into three-month pre-trial detention on smuggling charges. 

The journalist was arrested as part of an ongoing investigation against Abzas Media.  

Editor of an online news site arrested [Updated February 24, 2024]

[Update February 24] The pre-trial detention period of Abzas Media journalist Nargiz Abusalamova was extended by another three months. 

[Update February 21] Kanal 13 director Aziz Orujov’s pre-trial detention was extended by another month.

[Update January 13] Police arrested another Abzas Media journalist – Elnara Gasimova. She was sentenced to pretrial detention on January 15, 2024, for a period of two months and 17 days. She is facing the same charges as the rest of the journalists from Abzas Media, and if found guilty, she faces between six months and eight years in prison and a fine. 

[Update December 4] Following the arrests of Kekalov, Vagifgizi, and Hasanli, three more journalists were arrested. Among them are Nargiz Abusalamova (Abzas Media reporter), Aziz Orujov (founder of online television channel Kanal 13), and Rufat Muradli (the host of the show on Kanal 13). There were also reports of a hacking attempt on Kanal 13’s YouTube channel. At least two videos were removed from the channel before Orujov’s brother could secure access to the account.

Abusalamova was questioned earlier as a witness in the investigation launched against Abzas Media. Still, authorities arrested the journalist on December 1 and sentenced her to three months in pre-trial detention. Speaking to journalists, Absalamova’s lawyer said the accusations were baseless, “The court argued that Absalamova can aid others involved in the case and hence, to prevent that from happening, her arrest was necessary.” 

[Update November 23] Mahammad Kekalov was also sentenced to three months and 27 days on the same charges. Kekalov’s lawyer, Rovshana Rahimli, told Abzas Media she finally had a chance to meet Kekalov on November 23. During the meeting, Kekalov refused to proceed with Rahimli. He told her he had already been assigned a state lawyer and that he had committed no crime and would continue working with the state-assigned lawyer. The meeting took place in the presence of a state investigator. Friends and acquaintances fear Kekalov made this decision under duress. This request was not granted despite the lawyer’s attempts to meet Kekalov without any state representative. “I was surprised to hear Kekalov’s decision. He knows me. And despite me telling him that his family hired me, he pressed with his decision. He was very calm when we talked. And he did not explain the reason why he decided to refuse my services.” In addition, several other journalists were questioned as part of the investigation on November 23 – Nargiz Absalamova, Sahila Aslanova, Mina Alyarli, and Elnare Gasimova. Ulvi Hasanli’s wife, Rubaba Guliyeva, was also questioned. 

[Update] Both Ulvi Hasanli and Sevinc Vagifgizi were sentenced by the Khatai District Court. Hasanli was sentenced to four months in pretrial detention, while Vagifgizi to three months and 29 days. 

[Update] Sevinc Vagifgizi, who was en route to Baku [on the flight from Istanbul] on November 20, was also detained at the airport, according to reporting by independent Meydan TV. Several Azerbaijani activists who were on the same flight with her told Meydan TV she was detained once the plane landed in Azerbaijan. In an interview with Meydan TV at the airport before boarding her flight to Baku, Vagifgizi said she is certain that Hasanli’s arrest is directly related to the investigative work by Abzas media on the corruption among companies owned by individuals related to the ruling family doing business in Karabakh.  Meanwhile, lawyer Zibeyde Sadighova told Meydan TV that Ulvi Hasanli is being charged with smuggling large amounts of goods or other subjects on preliminary arrangement by a group of persons [Article 206.3.2 of the Criminal Code of Azerbaijan]. On November 21, Vagifgizi was charged on similar grounds. According to Abzas media, Mahammad Kekalov, who writes about people with disabilities, was also detained on November 20. He was taken from his house against his will by plain-clothed police officers.

Abzas media also released an audio recording of Hasanli explaining what happened: “I was about to get into the taxi leaving my apartment, a car stopped in front of the taxi and a bunch of men showed up. They were all wearing masks. They called my name. I cannot recall at which point exactly I was hit. They took me there and brought me to the police station. We started arguing. Two officers hit me. Then the questioning began. They asked me why we [Abzas] did not write about Karabakh but instead wrote about corruption. “Aren’t there other problems to write about,” they asked me. The money [police claim to have found] was planted there, it is so obvious. Because of the place where they allegedly found it. It was in the hallway of the office, not even inside one of the rooms [clearly someone just dropped it there].” In a statement shared by Abaz media on their Facebook page, the platform said, “As Abzas media we inform you, that Hasanli’s detention, the search at his house and on the promises of the office, are unlawful. All that is happening is directly related to [Hasanli’s] journalism. We demand immediate release of Hasanli.”

The news of the missing journalist and editor of an online news platform Abzas Media, Ulvi Hasanli, started trickling on the morning of November 20. According to colleagues, Hasanli was en route to the airport when he went missing. The platform believes Hasanli’s arrest is over the platform’s series of investigations, exposing corruption within the government. 

In an interview with Turan News Agency, the platform’s editor-in-chief, Sevinc Vagifgizi said, “Ulvi left home at 4.30 AM and was headed to the airport. However, he never boarded the plane and has not been in touch since.” Vagifgizi added she suspected Hasanli was detained at the airport.

Az-Net Watch spoke to Hasanli’s lawyer, Zibeyde Sadishova, who confirmed that Hasanli was indeed detained, except detention took place at Hasanli’s home as he was getting ready to leave. The police searched both Hasanli’s home and the office of Abzas Media. In the latter’s case, police claimed they had discovered 40,000EUR in cash. Hasanli denied having any connection to the money. It is suspected police planted the cash during the search.

Meanwhile, the lawyer also confirmed that the home of Vagifgizi was also searched. The police did not find anything there. According to the lawyer, Hasanli was beaten by the police. 

Hasanli was most recently detained at the US Embassy in Baku when he filmed the flash mob organized by feminist activists in July 2023. A month prior, in June, Hasanli was questioned over a Facebook post that police asked he remove. In the post, Hasanli shared the pictures of two police officers who were in charge of detaining journalists covering an environmental protest outside of the capital. 

Since 2016, Absaz media has been targeted with DDoS attacks. In 2017, the website was blocked from access inside the country, forcing the website managers to switch the website’s extension. In April 2020, the website was hacked and, as a result, lost a month’s worth of published articles, and some of the headlines changed. The platform was targeted again in February 2021. 

hearing in the case of activist reveals, it was his social media posts that had him arrested after all

Afiaddin Mammadov, the coordinator of Azerbaijan’s Alternative Confederation of Trade Unions, was sentenced to two months in pretrial detention in September 2023. Charged with deliberate infliction of bodily harm and armed hooliganism (based on a bogus accusation by an unidentified man claiming Mammadov stabbed him with a knife) originally, based on the hearing on November 15, in which the court extended Mammadov’s detention by an additional two months, turns out it was his outspoken criticism on social media platform Facebook that landed him behind hars. 

Based on the reporting from the hearing by journalist Ulviyya Ali, the judge said, “I have seen your Facebook profile. What have you written there about the “one-day” war?” Mammadov said he wrote nothing about it. The judge then persisted, “Why did you write that President Ilham Aliyev has resolved the 30-year-old problem?” Mammadov after hearing this question told the judge, that he had criticized the president and his decisions a lot, and that he was certain the reason behind his arrest, was these previously written posts and comments on the social media platform and not him stabbing someone.  

Mammadov repeated over and over again that he committed no crime. And that no one, should be put on trial, for wanting peace.

This is not the first time an activist is accused of a crime he did not commit in Azerbaijan. The country has a long-running history of putting its critics behind bars, handing administrative fines, and using various tools of intimidation to silence its state’s critics. 

Mammadov is among several activists targeted since September. 

the saga with media registry continues in Azerbaijan [Update November 15, 2023]

[Update] Dia.az website was reportedly blocked inside the country following the court decision on November 15. The Media Development Agency filed the case with the court on November 10 [see the following update below]. The site’s manager considers the court’s decision unlawful. Zamanov told Meydan TV he will be appealing the decision. In an interview with Meydan TV, media expert Khalid Aghayev said, the court’s decision was baseless, adding, “It should not be possible to stop the work of a media outlet so easily. This is a clear violation of media freedom law.”

[Update] The media development agency takes the first media platform – Dia.az – to court. The reason, claims the agency, is that Dia.az failed to apply for registration with the agency. The site’s manager, Mahammad Zamanov, said Dia.az no longer operated as a media platform. The court case was filed on November 10, according to the reporting by an independent Meydan TV. 

The most recent online platform to join the list of rejected news platforms by the state media registry is Gündəm Xəbər. According to Meydan TV, the website’s admins were informed on September 25, that their application was rejected on the grounds the website failed to meet the requirement of publishing at least 20 articles per day as per Article 60.5 of the new law on Media adopted by the parliament in 2021, and approved by the president Ilham Aliyev in February 2022. 

At the time of its adoption, the new law was heavily criticized by local and international rights organizations who made repeated calls on the government to refrain from adopting the New Media Law given its restrictive nature. Critics of the draft law worried the new legal document would seriously threaten media freedom, including online media resources, as it contains provisions granting a discretionary power to the state, to regulate media excessively, especially online media, as well as introduce further restrictions on journalists’ work, media companies, and relevant entities. Critics were also vocal about the absence of a broad and meaningful public consultation of the law prior to its adoption.

According to the law on media, all online media outlets as well as journalists working for online media platforms or working as freelance journalists were ought to register with a new media registry system. This media registry system began to operate on October 14, 2022.

*For further reading read AIW’s legal overview and the implications of the new law here.

Court in Baku blocks access to an online TV channel

On September 13, the court in Baku ruled in favor of blocking access to the YouTube channel of an online news site “Hürriyyət” [Hurriyyet]. The decision was based on the request from the General Prosecutor’s Office. 

The court in its ruling said the news site violated the law on Information, informatization, and protection of information, by publishing prohibited information. Specifically, the court referred to a guest on the show, Elnur Mammadov, who is a reserve colonel and who allegedly shared untrue information about the leaders of the Azerbaijan Army and the Ministry of Defense, thus damaging their reputation. 

Earlier, on July 24, the General Prosecutor’s Office requested the arrest of the editor-in-chief of the news site Vugar Mammadov and Elnur Mammadov. Both were sentenced to 30 days in administrative detention for spreading prohibited information online. 

Mammadov in his interview discussed cases of corruption and nepotism within the Ministry of Defense as well as raised allegations against the Minister of Defense Zakir Hasanov. 

journalist removes social media posts under duress

A confession from journalist Elmaddin Shamilzadeh about the forced removal of social media posts under duress is a testament to persistent violence and intimidation used in Azerbaijan against civic groups. According to the reporting by Voice of America, Shamilzadeh was severely beaten by law enforcement during his detention last month. After the journalist agreed to remove all his social media posts on Facebook where he was critical of the police violence he was finally let go.

Shamilzadeh was filming protests in the village of Soyudlu. He was also able to take photographs of several police officers who used disproportionate force against village residents which were then published by Mikroskop Media.

Once the photographs were out, the journalist received a call from the state service for mobilization and conscription. The same day, he was taken from the courtyard of his home by two plain-clothed men. When the journalist tried using his phone, the two men grabbed his phone and taken to a local police station.

At the station police demanded Shamilzadeh to share the phone password which he refused to do. “When I said that I would not give them my password, one of the policemen punched me in the face,” the journalist recalled in an interview with Voice of America Azerbaijan Service. The beating continued despite the journalist’s requests to stop. “When I told them not to hit me in the face, they started cursing. From the blows, I fell to the floor.” The journalist was beaten by at least three officers. The violence was recorded by another officer in the room.

The physical violence forced the journalist to agree to remove all of the posts on Facebook about the police involved in the protest. Shamilzadeh used the opportunity when handed the phone back and posted “Torture” on his profile. Now, his friends and colleagues knew he was missing. According to the journalist, this also prevented the police from using further violence against him.

Instead of force, finally, the police started talking to the journalist. “They said that I can delete my posts myself. Then they will let me go. I thought it might be true, I picked up the phone and deleted the post with the word ‘torture’ and other posts about the police.”

But it did not stop there. After keeping the journalist for about an hour in some dark room, they brought him back to the officer of the operative who then threatened Shamilzadeh with rape.

The journalist caved and gave away his phone password. “When I handed over my phone the battery was almost fully charged, after two hours, when they finally returned my phone, the device was almost out of power. I don’t know what they did with my phone during those two hours,” said the journalist.

Shamilzadeh was also forced to sign a letter of confession where he apologized for his actions and vowed not to repeat the same mistakes. He was released afterward.

the trickery behind blocking news websites in Azerbaijan

Azerbaijan started blocking access to independent news websites in 2017 [more on how this blocking has taken place here]. At the time, the state argued the reasons for blocking these websites were, calls aimed at “forcible change of the constitutional order,” “organization of mass riots,” and other illegal activities. In reality, these websites were considered independent and/or platforms affiliated with opposition parties. As a result, the decision to block them was based on legal claims that lacked evidence. This was further reflected in the review process when the decision to block these platforms was implemented. According to EHRAC, “no effective and independent review took place in the first instance decision to block access to the websites in 2017, and in subsequent appeals. The courts simply accepted the authorities’ allegations at face value and made no attempt to adequately consider or explain why the content was unlawful.”

The intentions behind the blocking decision were further reflected in subsequent actions taken by the Government of Azerbaijan against the online platforms. Such that, at the time of the first decision to block these websites for access in 2017, the Azerbaijani Government claimed these websites continued disseminating their content through VPN services or social media platforms and therefore the action taken against them did not cause significant changes to the published content. However, in February 2020, the Ministry of Transportation, Communications and High Technologies “requested the domestic courts to impose a ban on the applicants’ ability to share their content through VPN services and social media platforms.”

In a report published in February 2023, in partnership with OONI, we identified the blocking not only continued but expanded to blocking news websites from other countries as well as social media platforms [OONI measurements collected from Azerbaijan between January 2022 to February 2023]: 

  • Blocking of news media websites. Azerbaijan continues to block access to several independent news media websites. OONI data also suggests that some ISPs in Azerbaijan may have started blocking access to the Guardian on 25th December 2022.
  • Azerbaijan and Russia block each other’s news media. In early June 2022, Azerbaijan started blocking access to Russia’s state-run RIA Novosti media website. Since (at least) 7th June 2022, Russian ISPs have been blocking access to Azerbaijani news media websites (`haqqin.az`, `minval.az`, `oxu.az`, `ru.oxu.az`, `ru.baku.ws`). These blocks remain ongoing.
  • Temporary blocking of TikTok amid border clashes with Armenia. During the September 2022 border clashes, both Azerbaijan and Armenia blocked access to TikTok. While the TikTok block was lifted in Armenia by 21st September 2022 (only lasting about a week), the TikTok block remained in place in Azerbaijan until November 2022 (lasting about 2 months). 
  • Blocking of circumvention tool sites. Azerbaijan continues to block access to numerous circumvention tool websites, potentially limiting the ability to circumvent internet censorship in Azerbaijan. However, most OONI measurements suggest that tested circumvention tools (Tor and Psiphon) appear to be reachable.
  • Variance of censorship across networks. While most ISPs in Azerbaijan appear to adopt similar censorship techniques (as we continued to observe connection timeouts in most anomalous measurements across ASNs), different ISPs block access to different websites over time.

The intentional blocking and total control in the hands of the state in implementing these blocks were once again highlighted in June 2023 when co-rapporteurs from the Parliamentary Assembly of the Council of Europe (PACE), Jan Liddel-Granger and Liz Kristoffersen visited Azerbaijan. According to reporting by Meydan TV, throughout the visit of the co-rapporteurs access to blocked websites was restored. 

In the past, a similar temporary lifting of restrictions was observed in Azerbaijan during visits of international organizations. 

OONI measurements show ongoing internet censorship in Azerbaijan

Azerbaijan is known to block access to independent news media websites – we previously reported on this in July 2021. At the time, we analyzed OONI measurements collected from Azerbaijan between January 2020 to May 2021 and found that ISPs in Azerbaijan were blocking access to several independent news media and circumvention tool sites. We also found that amid the 2020 Nagorno-Karabakh war, ISPs in Azerbaijan temporarily blocked access to social media services, and attempted to block access to Tor and Psiphon.

But how has Azerbaijan’s internet censorship landscape changed (if at all) over the last year?

We attempt to address this question as part of this report. Specifically, we analyzed OONI data collected from Azerbaijan between January 2022 to February 2023 with the goal of evaluating which tested services presented signs of blocking, and whether new blocks had emerged over the past year (in comparison to our previous report). 

Key Findings

As part of our analysis of OONI measurements collected from Azerbaijan between January 2022 to February 2023, we found:

  • Blocking of news media websites. Azerbaijan continues to block access to several independent news media websites. OONI data also suggests that some ISPs in Azerbaijan may have started blocking access to the Guardian on 25th December 2022.
  • Azerbaijan and Russia block each other’s news media. In early June 2022, Azerbaijan started blocking access to Russia’s state-run RIA Novosti media website. Since (at least) 7th June 2022, Russian ISPs have been blocking access to Azerbaijani news media websites (`haqqin.az`, `minval.az`, `oxu.az`, `ru.oxu.az`, `ru.baku.ws`). These blocks remain ongoing.
  • Temporary blocking of TikTok amid border clashes with Armenia. During the September 2022 border clashes, both Azerbaijan and Armenia blocked access to TikTok. While the TikTok block was lifted in Armenia by 21st September 2022 (only lasting about a week), the TikTok block remained in place in Azerbaijan until November 2022 (lasting about 2 months). 
  • Blocking of circumvention tool sites. Azerbaijan continues to block access to numerous circumvention tool websites, potentially limiting the ability to circumvent internet censorship in Azerbaijan. However, most OONI measurements suggest that tested circumvention tools (Tor and Psiphon) appear to be reachable.
  • Variance of censorship across networks. While most ISPs in Azerbaijan appear to adopt similar censorship techniques (as we continued to observe connection timeouts in most anomalous measurements across ASNs), different ISPs block access to different websites over time.

Methods

Since 2012, OONI has developed free and open source software, called OONI Probe, designed to measure various forms of internet censorship. OONI Probe is run by volunteers in around 160 countries every month, and their test results are automatically published by OONI as open data in real-time. More than a billion network measurements have been collected and published from 25 thousand networks in 241 countries and territories over the last decade.

To examine internet censorship in Azerbaijan, we analyzed OONI measurements collected from Azerbaijan between January 2022 to February 2023. The goal of our analysis was to identify which websites and apps presented signs of blocking (“anomalies”) in Azerbaijan during the analysis period, particularly in comparison to blocks previously identified as part of our past research.   

Specifically, we analyzed measurements collected from OONI’s Web Connectivity test, which is designed to measure the blocking of websites (these websites are publicly hosted on the Citizen Lab test list Github repository). This test measures the accessibility of websites by attempting to perform a DNS lookup, TCP/IP connection, and HTTP GET request from two vantage points: (1) the local vantage point of the user and (2) a control network (non-censored network). The results from both networks are automatically compared and if they match, the tested URL is annotated as “accessible” (if the testing succeeds from the control vantage point). If the results differ, the tested URL is annotated as “anomalous”, which may provide a signal of potential blocking.

Depending on why the anomaly emerges, the anomalous measurement is automatically annotated as a DNS, TCP/IP, HTTP diff, or HTTP failure anomaly. For example, if the DNS lookup resolves to an IP address which differs from that resolved from the control vantage point, the measurement is annotated as a “DNS anomaly”, which may be a sign of DNS tampering.

However, false positives can occur, which is why we look at anomalous measurements in aggregate in order to determine if a tested URL consistently presents a large volume of anomalous measurements (in comparison to successful measurements) on a tested network. If a tested URL presents a large volume of anomalies, it may provide a stronger signal of potential blocking. If the types of anomalies are consistent (for example, always presenting DNS anomalies on a tested network), they offer an even stronger signal of potential censorship (since they suggest the use of a specific censorship technique, such as DNS hijacking). But beyond aggregating anomalous measurements, we also analyze the raw data pertaining to anomalous measurements in order to identify the specific errors that occurred as part of the testing, offering insight into how a tested URL is potentially blocked.

Based on our current heuristics, we automatically confirm the blocking of websites when a block page is served and we have added the fingerprint of that blockpage to our database. We also automatically confirm the blocking of websites based on DNS answers containing IP addresses that are known to be associated with implementing internet censorship. For other forms of censorship, we analyze OONI data in order to aggregate anomalous measurements and identify why and how those anomalies occur, offering insight into additional cases of potential blocking.

Acknowledgement of limitations

The findings of this study present several limitations, including:

  • Date range of analysis. The findings are limited to OONI measurements collected from Azerbaijan between January 2022 to February 2023. As a result, findings from measurements collected in different date ranges are excluded from this study.
  • Type of measurements. As part of this study, we primarily focus on OONI Web Connectivity measurements which pertain to the testing of websites for censorship. This focus was selected due to known website censorship in the country, while aggregate views of OONI measurements from other OONI Probe experiments did not present an important volume of anomalies that would have warranted more dedicated analysis.
  • Tested websites. OONI Probe website testing in Azerbaijan is primarily limited to URLs included in 2 Citizen Lab test lists: the global list (including internationally-relevant URLs) and the Azerbaijan list (only including URLs relevant to Azerbaijan). As these lists are tested by OONI Probe users and there are bandwidth constraints, they are generally limited to around 1,000 URLs. As a result, the lists may exclude other websites which are blocked in Azerbaijan, and the findings are limited to the testing of the URLs included in these lists. Given that the lists are community-curated, we acknowledge the bias in terms of which URLs are added to the lists. 
  • Testing coverage of websites. Not all URLs included in test lists are measured equally across Azerbaijan over time. Whether OONI data is available for a particular website depends on whether, on which networks, and when an OONI Probe user in Azerbaijan tested it. As a result, tested websites received different testing coverage throughout the analysis period, which impacts the findings.  
  • Tested ASNs. The availability of OONI measurements depends on which networks OONI Probe users were connected to when performing tests. As a result, the measurement coverage varies across ASNs throughout the analysis period, impacting the findings. 
  • Measurement volume. OONI measurement coverage from Azerbaijan has been rather limited over the years (in comparison to other countries), limiting our findings and confidence in confirming censorship events. The availability of OONI data depends entirely on volunteers running OONI Probe locally in Azerbaijan, which can be challenging in light of the political environment, potential risks involved with running OONI Probe, and the relatively limited digital rights community engagement opportunities in Azerbaijan. That said, we observe an important spike in the overall measurement volume from 14th September 2022 onwards (which has subsequently remained relatively stable), increasing our ability to detect censorship events thereafter. This is visible through the following chart. 

Chart: OONI Probe Web Connectivity testing in Azerbaijan between 1st January 2022 to 23rd February 2023 (source: OONI data). 

Background

In its latest Freedom on the Net report by Freedom House, Azerbaijan was ranked “not free” among 70 countries assessed for the report. Internet freedoms have been on an overall decline in the country for a number of years, however, the situation escalated during the 2020 war between Armenia and Azerbaijan. Since then, while blocking of social media platforms, and internet throttling have reduced, the state continues to implement various forms of digital surveillance combined with offline measures targeting civil society representatives on a regular basis. 

News websites critical of the authorities remain blocked, while the Law on Media enacted in February 2022 is yet another measure imposed by the state to restrict not only media freedom, and freedom of speech but also access to independent and opposition news. 

Journalists across the country remain concerned about the new law. Most recently they have joined in calls to abolish a new media registry introduced in the Media Law. 

Meanwhile, civic activists continue to face online targeting. Az-Net Watch in its December 2022 report, shared some of the findings of such attacks, identifying persistent trends of phishing attacks, questioning by the law-enforcement bodies over criticism voiced online, interference with personal data and devices, hacking attempts and installed spyware programs.

Findings

As part of our analysis of OONI measurements collected from Azerbaijan (between January 2022 to February 2023), we found a number of independent news media websites and circumvention tool websites blocked throughout the analysis period. Many of these blocks have been in place since at least 2020. Amid border clashes in September 2022, access to TikTok was blocked in both Azerbaijan and Armenia. We share further details in the sections below.

Blocking of news media websites

Several news media websites (which have been blocked over the last few years) continue to be blocked in Azerbaijan, according to recent OONI data analysis. 

The domains that presented the largest volume of anomalies (and overall testing coverage), thereby presenting the strongest signals of blocking in our analysis period, include:

  1. `azerbaycansaati.tv`
  2. `www.24saat.org`
  3. `www.abzas.net` 
  4. `www.azadliq.info` 
  5. `www.azadliq.org`
  6. `www.meydan.tv`
  7. `www.rferl.org`
  8. `www.gununsesi.org`
  9. `ria.ru`
  10. `www.theguardian.com`

While most of the above domains have been blocked in Azerbaijan over the last few years, the testing of `www.theguardian.com` only started to present anomalies (on several networks) in late December 2022 onwards (we discuss this case in more detail in the next section of this report). Meanwhile, Azerbaijan reportedly started blocking access to RIA Novosti (Russian state-owned news media) in early June 2022 over the publication of slanderous materials against Azerbaijan. At the time, RIA Novosti’s website (`ria.ru`) was only included in other countries’ test lists; we therefore added it to the Global test list to ensure that it gets tested by OONI Probe users in Azerbaijan and around the world. This is why OONI measurement coverage of `ria.ru` in Azerbaijan only begins in June 2022.  

Independent Azerbaijani media websites (such as `azadliq.info` and `meydan.tv`) have reportedly been blocked since early 2017 for “posing a threat” to Azerbaijan’s national security. The state prosecutor reportedly accused these websites of sharing content that promotes violence, hatred, extremism, violates privacy and constitutes slander. However, the blocking of these media outlets may have been politically motivated. Azadliq, for example, reported on the business dealings of Vice President Mehriban Aliyeva’s private foundation, while the website of Gunun Sesi (which has reportedly been blocked since August 2018) is operated by Parviz Hashimli, a former political prisoner. The blocking of the RFE/RFL website (`www.rferl.org`) also reportedly began in 2017 following an Azerbaijani court order.

The following chart aggregates OONI measurement coverage (from 26 ASNs) for the news media domains that presented the strongest signals of blocking in Azerbaijan between January 2022 to February 2023.

Chart: Blocked news media websites in Azerbaijan between January 2022 to February 2023 (source: OONI data).

Most OONI measurements from the testing of these media websites (excluding `www.theguardian.com`, which is discussed in the next section) presented anomalies throughout the testing period, providing a signal of blocking. In contrast, most of the other URLs tested from the Citizen Lab test lists during this period were found accessible (on the same networks in Azerbaijan).

What is evident from the above chart is that the vast majority of anomalous measurements presented connection timeouts (for sites hosted on both HTTP and HTTPS). A consistent failure type can offer a strong signal of blocking, since it suggests the use of specific censorship techniques. In this case, the connection timeouts may indicate the use of Deep Packet Inspection (DPI) technology for the implementation of blocks, given that the timeout only happens after the TLS ClientHello message. The fact that we observe the prevalence of connection timeouts across anomalous measurements aggregated across tested ASNs further suggests that most ISPs in Azerbaijan adopt similar censorship techniques.

This is further evident when viewing a per-ASN breakdown of the specific failures in the measurement of each of the blocked news media sites. The following chart, for example, presents the specific failures that occurred when `www.24saat.org` was tested on multiple ASNs in Azerbaijan during our analysis period. 

Chart: Measurement results (`OK` and specific failures) from the testing of `www.24saat.org` on multiple ASNs in Azerbaijan (source: OONI data). 

From the above chart we can see that most failures (across most tested ASNs) involve timeout errors (annotated in red). But we also observe some successful measurements (annotated as `OK` in green) on some of those networks too. To understand why those measurements were successful, we provide a further breakdown by testing targets. The following chart only presents measurement results (including specific failures observed in anomalous measurements) for the testing of the HTTPS version of the site (`https://www.24saat.org/`) across networks.  

Chart: Measurement results (`OK` and specific failures) from the testing of `https://www.24saat.org/` on multiple ASNs in Azerbaijan (source: OONI data). 

As we can see, the testing of the HTTPS version of the site was entirely successful on some networks, and presented consistent signs of blocking (consistently presenting connection timeouts) on others. In contrast, the testing of the HTTP version of the site (shared in the next chart below) shows that it presented signs of blocking on all of these tested networks.

Chart: Measurement results (`OK` and specific failures) from the testing of `http://www.24saat.org/` on multiple ASNs in Azerbaijan (source: OONI data). 

The fact that we observe more prevalent blocking of the HTTP version of the site (even though it supports HTTPS) suggests that the block is not implemented properly on certain networks.

Similarly, we observe the prevalence of connection timeouts in the testing of many other news media websites across ASNs. The following chart provides a per-ASN breakdown of the measurement results from the testing of `azerbaycansaati.tv`, showing that none of the measurements were successful, and that most presented connection timeouts.

Chart: Measurement results (including specific failures for anomalous measurements) from the testing of `azerbaycansaati.tv` on multiple ASNs in Azerbaijan (source: OONI data). 

The fact that the testing of `azerbaycansaati.tv` was not successful on any of the networks which received the largest volume of testing coverage, and that it consistently presented connection timeouts on most networks, provides a strong signal of blocking. 

Similarly, we observe that the testing of `www.azadliq.org`, `www.meydan.tv`, and `www.rferl.org` mostly presented connection timeouts on tested networks, as illustrated through the following charts.   


Chart: Measurement results (including specific failures for anomalous measurements) from the testing of `www.azadliq.org` on multiple ASNs in Azerbaijan (source: OONI data). 

Chart: Measurement results (including specific failures for anomalous measurements) from the testing of `www.meydan.tv` on multiple ASNs in Azerbaijan (source: OONI data). 


Chart: Measurement results (including specific failures for anomalous measurements) from the testing of `www.rferl.org` on multiple ASNs in Azerbaijan (source: OONI data).

OONI data also suggests that the site (www.occrp.org) of the Organized Crime and Corruption Reporting Project (OCCRP) is blocked in Azerbaijan as well. The blocking of the OCCRP site reportedly began in September 2017, following the publication of a major investigation (“Azerbaijani Laundromat”) into corruption, bribery, and money laundering in which powerful figures were allegedly involved. The following chart provides a per-ASN breakdown of the measurement results from the testing of `www.occrp.org`, showing that (similarly to the aforementioned blocked media sites) it presented connection timeouts on most networks.

Chart: Measurement results (including specific failures for anomalous measurements) from the testing of `www.occrp.org` on multiple ASNs in Azerbaijan (source: OONI data).

Overall, the prevalence of connection timeouts (observed for different websites measured on many different networks in Azerbaijan) provides a strong signal of blocking. These blocks appear to have been implemented several years ago, and remain ongoing. 

Blocking of the Guardian?

On 25th December 2022, the testing of `www.theguardian.com` started to present anomalies in Azerbaijan. The following chart aggregates OONI measurement coverage from the testing of `www.theguardian.com` on 10 ASNs in Azerbaijan between 1st October 2022 to 24th February 2023.

Chart: OONI Probe testing of the Guardian (`www.theguardian.com`) on 10 ASNs in Azerbaijan between 1st October 2022 to 24th February 2023 (source: OONI data). 

However, these anomalies were not observed on all tested networks in Azerbaijan. To better understand the anomalies, we provide a breakdown of the specific failures observed in anomalous measurements on networks that received the largest testing coverage (through the following chart).

Chart: Measurement results (including specific failures for anomalous measurements) from ASNs in Azerbaijan where the testing of `www.theguardian.com` presented anomalies between November 2022 to February 2023 (source: OONI data).

As is evident from the above chart, all anomalous measurements presented connection timeout errors (for both the HTTP and HTTPS versions of the site). The prevalence of connection timeouts, coupled with the fact that it is the same failure that we also observe in the blocking of other news media websites (discussed previously), provides a signal of blocking. 

While the data suggests that access to `www.theguardian.com` may be blocked on a few networks in Azerbaijan (particularly on AS29049 where we observe the largest volume of anomalies, which is consistent from 25th December 2022 onwards), it’s worth noting that it’s accessible on other networks (such as AS28787, where almost all measurements are successful). As we didn’t come across any news articles reporting the recent blocking of the Guardian in Azerbaijan (which could have helped corroborate the anomalous data), and the overall measurement volume is quite low, our confidence in confirming this potential block is rather limited.  

Azerbaijani news media websites blocked in Russia

Following the blocking of Russia’s state-run RIA Novosti media website in Azerbaijan in early June 2022, we were informed that certain Azerbaijani news media websites (`haqqin.az`, `minval.az`, `oxu.az`, `ru.oxu.az`, `ru.baku.ws`) were reportedly blocked in Russia. On 7th June 2022, we added these URLs to the Russian test list so that these websites could get tested by OONI Probe users in Russia. 

OONI data confirms that these Azerbaijani websites have been blocked in Russia since at least 7th June 2022, and that these blocks remain ongoing (as illustrated below).

Chart: OONI data on the blocking of Azerbaijani news media websites in Russia between 7th June 2022 to 24th February 2023 (source: OONI data).

The above chart aggregates OONI measurement coverage from numerous networks in Russia, showing that at least 5 Azerbaijani news media domains were blocked in Russia between June 2022 to February 2023. Throughout this period, we observe that almost all measurements are anomalous, suggesting that access to these Azerbaijani media sites is blocked on most tested networks in Russia. Russian ISPs adopt a variety of censorship techniques and, on some networks, we are able to automatically confirm the blocking of these Azerbaijani news websites based on fingerprints (as IPs known to be associated with censorship are returned as part of DNS resolution).

Temporary blocking of TikTok in Azerbaijan and Armenia amid border clashes

On 12th September 2022, fighting erupted between Azerbaijani and Armenian troops along their border. The next day (13th September 2022), both Azerbaijan and Armenia started blocking access to TikTok amid the border clashes. 

On 14th September 2022, Azerbaijan’s state security services announced the temporary suspension of TikTok. According to the statement, the content circulating on the social media platform was revealing military secrets and forming wrong opinions in society. As a result, the State Security Service decided to temporarily block access to the platform. Similarly, OONI data shows that the testing of TikTok also started to present signs of blocking in Armenia from 13th September 2022 onwards.

At the time, we published a report documenting the block in both countries based on OONI data. Specifically, we found that Azerbaijan blocked access to the main TikTok website (`www.tiktok.com`) and several endpoints essential to its functionality on at least 3 networks (AS29049, AS41997, AS31721). On all networks where we identified blocking, it seemed to be implemented by means of TLS level interference by dropping packets after noticing a disallowed server_name. We also observed some level of inconsistency, as ISPs in Azerbaijan blocked TikTok based on different lists of TikTok endpoint domains.

In Armenia, TikTok was blocked on at least two networks (AS44395, AS43733). Not all tested networks in Armenia implemented the TikTok block and censorship techniques varied from network to network. TikTok interference was observed at the DNS level by returning an NXDOMAIN error, an IP address associated with www.google.com, or a set of unrelated IP addresses which offer an invalid TLS certificate (it’s an expired certificate for `it.domain.name`). Several endpoints used by the TikTok app and website were also blocked on at least one network in Armenia.

By comparing aggregate OONI measurements from the testing of TikTok’s website (`www.tiktok.com`) in Azerbaijan and Armenia between 1st September 2022 to 24th February 2023, we can see that both countries started blocking access to TikTok amid the September 2022 border clashes, but that the block remained in place in Azerbaijan for much longer than in Armenia. 

Chart: OONI Probe testing of TikTok (`www.tiktok.com`) in Armenia and Azerbaijan between 1st September 2022 to 24th February 2023 (source: OONI data).

Specifically, we observe (through the above chart) that the TikTok block was lifted in Armenia by 21st September 2022 (only lasting about a week), while the TikTok block remained in place in Azerbaijan until November 2022 (lasting about 2 months).

Similarly to the testing of `www.tiktok.com`, OONI data suggests that Azerbaijan blocked numerous TikTok endpoints as well during the same period (between mid-September 2022 to mid-November 2022), as illustrated through the following two charts.  

Chart: OONI Probe testing of TikTok endpoints in Azerbaijan between 1st September 2022 to 30th November 2022 (source: OONI data).Chart: OONI Probe testing of TikTok endpoints in Azerbaijan between 1st September 2022 to 30th November 2022 (source: OONI data).

The fact that TikTok’s website (`www.tiktok.com`) and numerous TikTok endpoints presented anomalies on multiple tested networks in Azerbaijan during the same period provides a strong signal of blocking. 

Between September to November 2022, the anomalous measurements from the testing of TikTok in Azerbaijan show that many of them time out when attempting to establish a TLS handshake to the target endpoint. While many such measurements are annotated (on OONI Explorer) as presenting DNS inconsistency, we were able to exclude that by validating that the returned IPs are able to complete a TLS handshake with a valid certificate for the target domain name. Moreover, when issuing an HTTP request with the appropriate headers, the response payload is consistent with the response from an endpoint served to a user in Europe. By inspecting the response header and server certificate, it seems to be an Akamai cache.  

Blocking of circumvention tool websites

Circumventing internet censorship in Azerbaijan can potentially be challenging, as numerous circumvention tool websites have been blocked in Azerbaijan over the past years. Our latest analysis shows that these blocks remain ongoing.

The following chart aggregates OONI measurement coverage for popular circumvention tool websites that presented a large volume of anomalies throughout the testing period in Azerbaijan.

Chart: Blocked circumvention tool websites in Azerbaijan between January 2022 to February 2023 (source: OONI data). 

Multiple circumvention tool websites (including `www.torproject.org`, `psiphon.ca`, and `www.tunnelbear.com`) continue to show signs of blocking on some networks in Azerbaijan, as illustrated through the above chart. Specifically, OONI data shows that when these sites were tested, we frequently observed the timing out of the session after the ClientHello during the TLS handshake. It’s worth noting though that these sites are not blocked on all networks in Azerbaijan, as some measurements were successful. 

While many popular circumvention tool sites appear to be blocked in Azerbaijan, it’s worth highlighting that certain circumvention tools may work in the country. OONI Probe also includes tests designed to measure the reachability of the Psiphon, Tor, and Tor Snowflake circumvention tools. 

Between January 2022 to February 2023, OONI Probe testing of Psiphon shows that it was reachable on tested networks in Azerbaijan, as illustrated below.

Chart: OONI Probe testing of Psiphon on 29 ASNs in Azerbaijan between 1st January 2022 to 25th February 2023 (source: OONI data).

Most measurements (collected from 29 ASNs during the testing period) show that it was possible to bootstrap Psiphon and use it to fetch a webpage, suggesting that the circumvention tool worked on tested networks in Azerbaijan.

While the testing of Tor presented anomalies throughout the testing period, most measurements from September 2022 onwards (when we also observe a spike in the overall measurement volume) suggest that Tor was reachable on most tested networks in Azerbaijan. 

Chart: OONI Probe testing of Tor on 28 ASNs in Azerbaijan between 1st January 2022 to 25th February 2023 (source: OONI data).

In Tor anomalous measurements, we see that attempted connections to Tor directory authorities failed on some networks. However, we also see that most connections to both Tor directory authorities and Tor bridges were successful (on many networks), indicating that it may have been possible to use Tor in Azerbaijan. 

Quite similarly, OONI data shows that it was possible to bootstrap Tor Snowflake on most networks in Azerbaijan throughout the testing period.

Chart: OONI Probe testing of Tor Snowflake on 20 ASNs in Azerbaijan between 1st January 2022 to 25th February 2023 (source: OONI data).

This suggests that while the Psiphon and Tor Project websites appear to be blocked on some networks in Azerbaijan (as discussed previously), their tools appear to work in the country (at least on tested networks). 

Conclusion

Azerbaijan continues to limit press freedom by blocking access to several independent news media websites – the blocking of which appears to be politically motivated. OONI data also suggests that some ISPs in Azerbaijan may have started blocking access to the Guardian on 25th December 2022, but the relatively limited measurement coverage and the seeming absence of news articles reporting the block limit our confidence in confirming this. 

In early June 2022, both Azerbaijan and Russia started blocking access to each other’s news media websites. In early June 2022, Azerbaijan started blocking access to Russia’s state-run RIA Novosti media website over the publication of slanderous materials against Azerbaijan. Since (at least) 7th June 2022, Russian ISPs have been blocking access to Azerbaijani news media websites (`haqqin.az`, `minval.az`, `oxu.az`, `ru.oxu.az`, `ru.baku.ws`). 

Amid the September 2022 border clashes, both Azerbaijan and Armenia started blocking access to TikTok. However, while the TikTok block was lifted in Armenia by 21st September 2022 (only lasting about a week), the TikTok block remained in place in Azerbaijan until November 2022 (lasting about 2 months). But this was not the first time that Azerbaijan blocked access to a social media platform during the conflict. Azerbaijan previously blocked access to social media platforms during the 2020 Nagorno-Karabakh war.

Both social media blocks during times of conflict and long-term news media blocks (as those seen in Azerbaijan) generally indicate government attempts to control political narratives. While numerous circumvention tool websites appear to be blocked in Azerbaijan (potentially limiting the ability to circumvent blocks), it’s worth noting that several circumvention tools (such as Tor and Psiphon) may work in the country. 

This study was carried out through the use of open methodologies, free and open source software, and open data, enabling independent third-party verification of our research findings. We encourage researchers to expand upon this study by running OONI Probe and analyzing OONI measurements from Azerbaijan.   

Acknowledgments

We thank OONI Probe users in Azerbaijan for contributing measurements, and supporting this study.