Intermittent DNS blocking failure with local-zone and always_nxdomain

[TheteSigma]

Bug when blocking tiktok.com, sometimes www.tiktok.com resolves and other times it does not.

Updating the block list, first remove existing block list. unbound-control list_localzones | grep -E 'always(null|nx)' | awk '{print $1}' > unbound-local-zones.txt unbound-control local_zones_remove < unbound-local-zones.txt

Then load updated block list: unbound-control local_zones < blocklists-local-zone.txt

This command should produce this: host www.tiktok.com Host www.tiktok.com not found: 3(NXDOMAIN)

instead I get this: host www.tiktok.com www.tiktok.com is an alias for www.tiktok.com.edgesuite.net. www.tiktok.com.edgesuite.net is an alias for a2047.api10.akamai.net. a2047.api10.akamai.net has address 23.47.52.146 a2047.api10.akamai.net has address 23.47.52.148 a2047.api10.akamai.net has address 23.47.52.147 a2047.api10.akamai.net has address 23.47.52.145 a2047.api10.akamai.net has address 23.47.52.141 a2047.api10.akamai.net has address 23.47.52.142 a2047.api10.akamai.net has address 23.47.52.149 a2047.api10.akamai.net has address 23.47.52.140 a2047.api10.akamai.net has address 23.47.52.143

Work arounds, restarting unbound which loads local-zone blocks or adding www.tiktok.com to the blocklist.

System Unbound 1.19.1 Gentoo Linux

Version 1.19.1

Configure line: --prefix=/usr --build=x86_64-pc-linux-gnu --host=x86_64-pc-linux-gnu --mandir=/usr/share/man --infodir=/usr/share/info --datadir=/usr/share --sysconfdir=/etc --localstatedir=/var/lib --datarootdir=/usr/share --disable-static --docdir=/usr/share/doc/unbound-1.19.1 --htmldir=/usr/share/doc/unbound-1.19.1/html --with-sysroot=/ --libdir=/usr/lib64 --disable-debug --disable-gost --disable-dnscrypt --disable-dnstap --enable-ecdsa --disable-subnet --enable-cachedb --disable-static --disable-systemd --without-pythonmodule --without-pyunbound --with-pthreads --with-libnghttp2 --enable-tfo-client --enable-tfo-server --disable-flto --disable-rpath --enable-event-api --enable-ipsecmod --with-libevent=/usr --with-libhiredis=/usr --with-pidfile=/run/unbound.pid --with-rootkey-file=/etc/dnssec/root-anchors.txt --with-ssl=/usr --with-libexpat=/usr Linked libs: libevent 2.1.12-stable (it uses epoll), OpenSSL 3.0.13 30 Jan 2024 Linked modules: dns64 cachedb ipsecmod respip validator iterator TCP Fastopen feature available

BSD licensed, see LICENSE in source package for details. Report bugs to unbound-bugs@nlnetlabs.nl or https://github.com/NLnetLabs/unbound/issues

[gthess]

What is the type of the local-zone (tiktok.com in this example)? Also, as a sanity check, is it listed on blocklists-local-zone.txt and unbound-control list_local_zones?

[TheteSigma]

Type of local-zone is always_nxdomain.

Yes it is in the file blocklists-local-zone.txt tiktok.com always_nxdomain

And also in the 'unbound-control list_local_zones' tiktok.com. always_nxdomain

[gthess]

Is www.tiktok.com. maybe part of the above outputs? Also can you use dig instead of host to ask Unbound directly?

[TheteSigma]

www.tiktok.com is not part of the above outputs during the issue, only when I am using the work around.

dig output as requested, which is also the same name server.

dig www.tiktok.com

; <<>> DiG 9.16.48 <<>> www.tiktok.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23079 ;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ; EDE: 3 (Stale Answer) ;; QUESTION SECTION: ;www.tiktok.com. IN A

;; ANSWER SECTION: www.tiktok.com. 1723 IN CNAME www.tiktok.com.edgesuite.net. www.tiktok.com.edgesuite.net. 21523 IN CNAME a2047.api10.akamai.net. a2047.api10.akamai.net. 30 IN A 23.47.52.149 a2047.api10.akamai.net. 30 IN A 23.47.52.145 a2047.api10.akamai.net. 30 IN A 23.47.52.150 a2047.api10.akamai.net. 30 IN A 23.47.52.146 a2047.api10.akamai.net. 30 IN A 23.47.52.148 a2047.api10.akamai.net. 30 IN A 23.47.52.142 a2047.api10.akamai.net. 30 IN A 23.47.52.147 a2047.api10.akamai.net. 30 IN A 23.47.52.144 a2047.api10.akamai.net. 30 IN A 23.47.52.141

;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Fri May 03 09:42:27 CDT 2024 ;; MSG SIZE rcvd: 268

[gthess]

Is Unbound listening on 127.0.0.1@53 or are you hitting something in front of Unbound?

[TheteSigma]

Unbound is on 127.0.0.1@53, talking to it directly.

[gthess]

That is weird then.

Between you deleting and reinserting local zone data, there is a window where all domains are allowed through and that's how www.tiktok.com could sneak in the cache. But after you reload the blocklist zone data, local zones lookup is before the cache lookup and the NXDOMAIN response would come right there before reaching the cache.

Are there any other *.tiktok.com. subdomains maybe in the blocklist? Can you also give the output of:

unbound-control list_local_zones | grep tiktok

just to be sure?

[TheteSigma]

unbound-control list_local_zones | grep tiktok tiktok.pro.br. always_nxdomain tiktok3.cc. always_nxdomain tiktok88.cc. always_nxdomain tiktokio.cc. always_nxdomain tiktok059.cc. always_nxdomain tiktoksgp.cc. always_nxdomain tiktok1668.cc. always_nxdomain tiktoknews.cc. always_nxdomain tiktokntop.cc. always_nxdomain tiktok96331.cc. always_nxdomain tiktok99002.cc. always_nxdomain tiktok-coins.cc. always_nxdomain tiktok-malls.cc. always_nxdomain 787mall-tiktok.cc. always_nxdomain tiktokpartnerprogram.cc. always_nxdomain tiktok.ci. always_nxdomain tiktokshopping.com.cn. always_nxdomain tiktokss.cn. always_nxdomain tiktoksim.cn. always_nxdomain tiktok-th.co. always_nxdomain tiktoknotes.co. always_nxdomain tiktokboosters.co. always_nxdomain tiktokmarketer.de. always_nxdomain tiktokceutasinviolencia.es. always_nxdomain tiktokclaim.eu. always_nxdomain tiktok10k.fr. always_nxdomain tiktoklive.fr. always_nxdomain tiktok-live.fr. always_nxdomain tiktokmademebuyit.fr. always_nxdomain tiktoksupportcenter.fr. always_nxdomain tiktokio.io. always_nxdomain tiktoklikes.io. always_nxdomain tiktokmusics.ir. always_nxdomain tiktokdown4.me. always_nxdomain tiktokshop.my. always_nxdomain tiktokfinds.nl. always_nxdomain tiktok.re. always_nxdomain tiktokshopapi.ru. always_nxdomain tiktok-profile.ru. always_nxdomain tiktok-settings.ru. always_nxdomain tiktok-evolution.ru. always_nxdomain tiktokab.se. always_nxdomain tiktok.tf. always_nxdomain tiktok-outlet.tw. always_nxdomain tiktokbuy.co.uk. always_nxdomain tiktokvpn.co.uk. always_nxdomain tiktok-shop.co.uk. always_nxdomain tiktoknotes.co.uk. always_nxdomain tiktokfashion.co.uk. always_nxdomain tiktokmademebuythis.co.uk. always_nxdomain tiktokio.us. always_nxdomain tiktokmax.us. always_nxdomain tiktok.supersbows.us. always_nxdomain tiktoknotes.us. always_nxdomain tiktokshopmall.us. always_nxdomain tiktokrizzparty.us. always_nxdomain tiktok-ads.hara.vn. always_nxdomain tiktoks.app. always_nxdomain tiktokio.app. always_nxdomain tiktoksss.app. always_nxdomain tiktokstore.app. always_nxdomain tiktoknudes.art. always_nxdomain tiktokreviews.bet. always_nxdomain tiktok.biz. always_nxdomain tiktok77.biz. always_nxdomain tiktokio.biz. always_nxdomain tiktok-ecommerce.biz. always_nxdomain tiktok-free-liker.biz. always_nxdomain tiktoksword.cfd. always_nxdomain tiktok.com. always_nxdomain ads.tiktok.com. always_nxdomain www.tiktok.com. always_nxdomain ads-sg.tiktok.com. always_nxdomain mcs-sg.tiktok.com. always_nxdomain ads-api.tiktok.com. always_nxdomain mssdk-sg.tiktok.com. always_nxdomain analytics.tiktok.com. always_nxdomain analytics-sg.tiktok.com. always_nxdomain business-api.tiktok.com. always_nxdomain tiktokb.com. always_nxdomain tiktokn.com. always_nxdomain mon.us.tiktokv.com. always_nxdomain mon.tiktokv.com. always_nxdomain xlog.tiktokv.com. always_nxdomain rtlog.tiktokv.com. always_nxdomain mcs-va.tiktokv.com. always_nxdomain xlog-va.tiktokv.com. always_nxdomain rtc-logger-va.tiktokv.com. always_nxdomain tiktok.florenda.com. always_nxdomain tiktok-2.com. always_nxdomain tiktok-k.com. always_nxdomain tiktok15.com. always_nxdomain tiktok17.com. always_nxdomain tiktok25.com. always_nxdomain tiktok50.com. always_nxdomain tiktok78.com. always_nxdomain tiktokab.com. always_nxdomain tiktokbo.com. always_nxdomain tiktokcy.com. always_nxdomain tiktokdd.com. always_nxdomain tiktokjl.com. always_nxdomain tiktokkc.com. always_nxdomain tiktokkf.com. always_nxdomain tiktokko.com. always_nxdomain tiktokkz.com. always_nxdomain tiktoknk.com. always_nxdomain tiktoknn.com. always_nxdomain tiktokol.com. always_nxdomain tiktoks5.com. always_nxdomain tiktokso.com. always_nxdomain tiktokst.com. always_nxdomain tiktoktc.com. always_nxdomain tiktoktd.com. always_nxdomain tiktoktm.com. always_nxdomain tiktoktn.com. always_nxdomain tiktokwe.com. always_nxdomain tiktokxy.com. always_nxdomain kotiktoks.com. always_nxdomain lm-tiktok.com. always_nxdomain sk-tiktok.com. always_nxdomain tiktok-01.com. always_nxdomain tiktok-02.com. always_nxdomain tiktok-03.com. always_nxdomain tiktok-04.com. always_nxdomain tiktok-05.com. always_nxdomain tiktok-06.com. always_nxdomain tiktok-07.com. always_nxdomain tiktok-08.com. always_nxdomain tiktok-09.com. always_nxdomain tiktok-10.com. always_nxdomain tiktok-af.com. always_nxdomain tiktok-cl.com. always_nxdomain tiktok-cn.com. always_nxdomain tiktok-sm.com. always_nxdomain tiktok-un.com. always_nxdomain tiktok036.com. always_nxdomain tiktok105.com. always_nxdomain tiktok109.com. always_nxdomain tiktok118.com. always_nxdomain tiktok189.com. always_nxdomain tiktok200.com. always_nxdomain tiktok211.com. always_nxdomain tiktok218.com. always_nxdomain tiktok229.com. always_nxdomain tiktok339.com. always_nxdomain tiktok557.com. always_nxdomain tiktok558.com. always_nxdomain tiktok559.com. always_nxdomain tiktok569.com. always_nxdomain tiktok577.com. always_nxdomain tiktok578.com. always_nxdomain tiktok631.com. always_nxdomain tiktok655.com. always_nxdomain tiktok663.com. always_nxdomain tiktok665.com. always_nxdomain tiktok686.com. always_nxdomain tiktok799.com. always_nxdomain tiktok821.com. always_nxdomain tiktok828.com. always_nxdomain tiktok858.com. always_nxdomain tiktok898.com. always_nxdomain tiktok966.com. always_nxdomain tiktok976.com. always_nxdomain tiktok989.com. always_nxdomain tiktokabb.com. always_nxdomain tiktokagi.com. always_nxdomain tiktokasi.com. always_nxdomain tiktokbbb.com. always_nxdomain tiktokbio.com. always_nxdomain tiktokcgg.com. always_nxdomain tiktokcpw.com. always_nxdomain tiktokcrp.com. always_nxdomain tiktokdid.com. always_nxdomain tiktokefe.com. always_nxdomain tiktokfam.com. always_nxdomain tiktokfaq.com. always_nxdomain tiktokgov.com. always_nxdomain tiktokgun.com. always_nxdomain tiktokguy.com. always_nxdomain tiktokkit.com. always_nxdomain tiktokkmk.com. always_nxdomain tiktokmch.com. always_nxdomain tiktokmsi.com. always_nxdomain tiktokoem.com. always_nxdomain tiktoktoo.com. always_nxdomain tiktokv18.com. always_nxdomain tiktokwsq.com. always_nxdomain tiktokwsw.com. always_nxdomain ww-tiktok.com. always_nxdomain xn-tiktok.com. always_nxdomain 888-tiktok.com. always_nxdomain all-tiktok.com. always_nxdomain one-tiktok.com. always_nxdomain sss-tiktok.com. always_nxdomain tiktok-168.com. always_nxdomain tiktok-hwp.com. always_nxdomain tiktok0746.com. always_nxdomain tiktok1022.com. always_nxdomain tiktok1055.com. always_nxdomain tiktok1101.com. always_nxdomain tiktok1798.com. always_nxdomain tiktok2000.com. always_nxdomain tiktok2018.com. always_nxdomain tiktok2022.com. always_nxdomain tiktok3648.com. always_nxdomain tiktok8886.com. always_nxdomain tiktok888a.com. always_nxdomain tiktokbkuz.com. always_nxdomain tiktokcash.com. always_nxdomain tiktokcrms.com. always_nxdomain tiktokisme.com. always_nxdomain tiktokjili.com. always_nxdomain tiktokjisu.com. always_nxdomain tiktoknoes.com. always_nxdomain tiktoknstr.com. always_nxdomain tiktokntop.com. always_nxdomain tiktokpayy.com. always_nxdomain tiktokrise.com. always_nxdomain tiktoksh0p.com. always_nxdomain tiktokshpu.com. always_nxdomain tiktokswag.com. always_nxdomain tiktokt618.com. always_nxdomain tiktokthez.com. always_nxdomain tiktokvip3.com. always_nxdomain tiktokvip5.com. always_nxdomain tiktokvip6.com. always_nxdomain tiktokvvip.com. always_nxdomain tiktokwdsc.com. always_nxdomain tiktokwsuk.com. always_nxdomain buyintiktok.com. always_nxdomain mail-tiktok.com. always_nxdomain shop-tiktok.com. always_nxdomain stiktokshop.com. always_nxdomain tiktok-2022.com. always_nxdomain tiktok-mena.com. always_nxdomain tiktok-mxbs.com. always_nxdomain tiktok-navi.com. always_nxdomain tiktok-plus.com. always_nxdomain tiktok-task.com. always_nxdomain tiktok-thai.com. always_nxdomain tiktok-tv16.com. always_nxdomain tiktok88nih.com. always_nxdomain tiktok88pro.com. always_nxdomain tiktok99002.com. always_nxdomain tiktokanker.com. always_nxdomain tiktokaukey.com. always_nxdomain tiktokaward.com. always_nxdomain tiktokbeans.com. always_nxdomain tiktokcabet.com. always_nxdomain tiktokfarts.com. always_nxdomain tiktokforum.com. always_nxdomain tiktokfoxie.com. always_nxdomain tiktokified.com. always_nxdomain tiktokimall.com. always_nxdomain tiktokkings.com. always_nxdomain tiktoklouyi.com. always_nxdomain tiktokmarts.com. always_nxdomain tiktokmeusa.com. always_nxdomain tiktoknepal.com. always_nxdomain tiktoknites.com. always_nxdomain tiktoknostr.com. always_nxdomain tiktoknoted.com. always_nxdomain tiktokntops.com. always_nxdomain tiktoknudez.com. always_nxdomain tiktokonmap.com. always_nxdomain tiktokoshoo.com. always_nxdomain tiktokpaket.com. always_nxdomain tiktokplace.com. always_nxdomain tiktokradar.com. always_nxdomain tiktokrater.com. always_nxdomain tiktokslaps.com. always_nxdomain tiktoksucks.com. always_nxdomain tiktoksuite.com. always_nxdomain tiktoktoday.com. always_nxdomain tiktokunion.com. always_nxdomain tiktokwsllc.com. always_nxdomain tiktokwspto.com. always_nxdomain apyar-tiktok.com. always_nxdomain enjoy-tiktok.com. always_nxdomain japan-tiktok.com. always_nxdomain notes-tiktok.com. always_nxdomain nv-tiktokvip.com. always_nxdomain sller-tiktok.com. always_nxdomain tiktok-elite.com. always_nxdomain tiktok-games.com. always_nxdomain tiktok-mall1.com. always_nxdomain tiktok-mall2.com. always_nxdomain tiktok-sells.com. always_nxdomain tiktok-shoup.com. always_nxdomain tiktok-tkapp.com. always_nxdomain tiktok-trade.com. always_nxdomain tiktok2insta.com. always_nxdomain tiktok666888.com. always_nxdomain tiktok888app.com. always_nxdomain tiktokbuynow.com. always_nxdomain tiktokgloble.com. always_nxdomain tiktokleader.com. always_nxdomain tiktokmall01.com. always_nxdomain tiktokmallls.com. always_nxdomain tiktokmyshop.com. always_nxdomain tiktoknotess.com. always_nxdomain tiktokonshop.com. always_nxdomain tiktokoshop1.com. always_nxdomain tiktokphotos.com. always_nxdomain tiktokprizes.com. always_nxdomain tiktokrescue.com. always_nxdomain tiktokriches.com. always_nxdomain tiktokscmall.com. always_nxdomain tiktokshop-0.com. always_nxdomain download.tiktokshop-1.com. always_nxdomain tiktokshop66.com. always_nxdomain tiktokshopce.com. always_nxdomain tiktokshopro.com. always_nxdomain tiktokshopse.com. always_nxdomain tiktokshopss.com. always_nxdomain tiktokshopsv.com. always_nxdomain tiktokshoptk.com. always_nxdomain tiktokshopvi.com. always_nxdomain tiktoksshare.com. always_nxdomain tiktokstuffs.com. always_nxdomain tiktoksurvey.com. always_nxdomain tiktoksystem.com. always_nxdomain tiktoktingzz.com. always_nxdomain tiktoktrendi.com. always_nxdomain tiktokturbos.com. always_nxdomain tiktokturkey.com. always_nxdomain tiktokvip999.com. always_nxdomain tiktokvipapp.com. always_nxdomain tiktokwebapp.com. always_nxdomain tiktokworlds.com. always_nxdomain tiktokwsbase.com. always_nxdomain tiktokwsmall.com. always_nxdomain tiktokxiazai.com. always_nxdomain tiktokycoins.com. always_nxdomain cn-tiktokshop.com. always_nxdomain dvtiktokgiare.com. always_nxdomain escroc-tiktok.com. always_nxdomain gsatiktokshop.com. always_nxdomain sellertiktoks.com. always_nxdomain tiktok-center.com. always_nxdomain tiktok-escort.com. always_nxdomain tiktok-europe.com. always_nxdomain tiktok-market.com. always_nxdomain tiktok-remote.com. always_nxdomain tiktok1000hub.com. always_nxdomain tiktok888slot.com. always_nxdomain tiktok88sawer.com. always_nxdomain tiktok999slot.com. always_nxdomain tiktokapp8888.com. always_nxdomain tiktokapphelp.com. always_nxdomain tiktokapphost.com. always_nxdomain tiktokapplist.com. always_nxdomain tiktokappshow.com. always_nxdomain tiktokarchive.com. always_nxdomain tiktokbubbles.com. always_nxdomain tiktokcc2shop.com. always_nxdomain tiktokclassic.com. always_nxdomain tiktokforever.com. always_nxdomain tiktokfreeapp.com. always_nxdomain tiktokgrandma.com. always_nxdomain tiktoklegalja.com. always_nxdomain tiktokmachine.com. always_nxdomain tiktokmall-my.com. always_nxdomain tiktokmall365.com. always_nxdomain tiktokmallapp.com. always_nxdomain tiktokmasters.com. always_nxdomain tiktokmatches.com. always_nxdomain tiktokmodapks.com. always_nxdomain tiktokprofile.com. always_nxdomain tiktokshop-in.com. always_nxdomain tiktokshop-my.com. always_nxdomain tiktokshop-uk.com. always_nxdomain tiktokshop678.com. always_nxdomain tiktokshop888.com. always_nxdomain tiktokshopafr.com. always_nxdomain tiktokshopeea.com. always_nxdomain tiktokshopeeb.com. always_nxdomain tiktokshopfaq.com. always_nxdomain tiktokshopgos.com. always_nxdomain tiktokshopins.com. always_nxdomain tiktokshoppen.com. always_nxdomain tiktokshopsec.com. always_nxdomain tiktokslot88d.com. always_nxdomain tiktokslot88e.com. always_nxdomain tiktokstoreus.com. always_nxdomain tiktoktabloid.com. always_nxdomain tiktoktinders.com. always_nxdomain tiktoktingzzz.com. always_nxdomain tiktokupgrade.com. always_nxdomain tiktokwsnance.com. always_nxdomain wa-tiktokshop.com. always_nxdomain whattiktokapp.com. always_nxdomain tiktok-germany.com. always_nxdomain tiktok-masters.com. always_nxdomain tiktok-tactics.com. always_nxdomain tiktokadreview.com. always_nxdomain tiktokaiagents.com. always_nxdomain tiktokatcannes.com. always_nxdomain tiktokayakkabi.com. always_nxdomain tiktokbestsell.com. always_nxdomain tiktokboomcoin.com. always_nxdomain tiktokcc1shops.com. always_nxdomain tiktokdowdload.com. always_nxdomain tiktokersexhub.com. always_nxdomain tiktokfeatured.com. always_nxdomain tiktokgenocide.com. always_nxdomain tiktokinsiderz.com. always_nxdomain tiktokispoison.com. always_nxdomain tiktokistheccp.com. always_nxdomain tiktokmemories.com. always_nxdomain tiktokmustbuys.com. always_nxdomain tiktoknotesapp.com. always_nxdomain tiktokreceipts.com. always_nxdomain tiktokshop1688.com. always_nxdomain tiktokshopafr1.com. always_nxdomain tiktokshopafr2.com. always_nxdomain tiktokshopbott.com. always_nxdomain tiktokshopmart.com. always_nxdomain tiktokshops-bv.com. always_nxdomain tiktokshops-vn.com. always_nxdomain tiktokshops123.com. always_nxdomain tiktokshopsvip.com. always_nxdomain tiktokshoptkgj.com. always_nxdomain tiktokspcrmall.com. always_nxdomain tiktoksshoping.com. always_nxdomain tiktokstrategi.com. always_nxdomain tiktoktabloids.com. always_nxdomain tiktoktraining.com. always_nxdomain tiktokwatchers.com. always_nxdomain tiktokyoniwash.com. always_nxdomain vvttiktok99vip.com. always_nxdomain asia-tiktokmall.com. always_nxdomain tiktok-alliance.com. always_nxdomain tiktok-customer.com. always_nxdomain tiktok-dropship.com. always_nxdomain tiktok-emporium.com. always_nxdomain tiktok-mall-usd.com. always_nxdomain tiktok-shopesio.com. always_nxdomain tiktokbackstage.com. always_nxdomain tiktokbuzzfinds.com. always_nxdomain tiktokbuzzgoods.com. always_nxdomain tiktokclockworx.com. always_nxdomain tiktokcoinvault.com. always_nxdomain tiktokhawaiihop.com. always_nxdomain tiktokkoppushop.com. always_nxdomain tiktokrizzparty.com. always_nxdomain tiktokshop-raya.com. always_nxdomain tiktokshoping01.com. always_nxdomain tiktokshopviral.com. always_nxdomain tiktokspinbrush.com. always_nxdomain tiktoksupershop.com. always_nxdomain tiktoktakipcial.com. always_nxdomain tiktokunblocker.com. always_nxdomain tiktokvideosave.com. always_nxdomain tiktokwarehouse.com. always_nxdomain amp-tiktokslot88.com. always_nxdomain shopducmomtiktok.com. always_nxdomain tiktok-rizzparty.com. always_nxdomain tiktok-shopsmall.com. always_nxdomain tiktokarbitrager.com. always_nxdomain tiktokbestseller.com. always_nxdomain tiktokcheapfinds.com. always_nxdomain tiktokdealfinder.com. always_nxdomain tiktokdokoicshop.com. always_nxdomain tiktokforauthors.com. always_nxdomain tiktokfulfilment.com. always_nxdomain tiktokguidelines.com. always_nxdomain tiktokguoji-shop.com. always_nxdomain tiktokonloneshop.com. always_nxdomain tiktokproductsco.com. always_nxdomain tiktokprospector.com. always_nxdomain tiktokshop-trade.com. always_nxdomain tiktokshopifyapp.com. always_nxdomain tiktokshoponline.com. always_nxdomain tiktokshoppingtk.com. always_nxdomain tiktokslinkshare.com. always_nxdomain tiktokusaccounts.com. always_nxdomain tiktokwholesaled.com. always_nxdomain tiktokwholesalex.com. always_nxdomain ustiktokaccounts.com. always_nxdomain wholesale-tiktok.com. always_nxdomain autotiktokacademy.com. always_nxdomain tiktok-onlineshop.com. always_nxdomain tiktokdealfinders.com. always_nxdomain tiktokdeliveryvip.com. always_nxdomain tiktokfindsforyou.com. always_nxdomain tiktokforcreators.com. always_nxdomain tiktokliveprinter.com. always_nxdomain tiktoklivevietnam.com. always_nxdomain tiktokmerchandise.com. always_nxdomain tiktokmusicsummit.com. always_nxdomain tiktokoutreachbot.com. always_nxdomain tiktokshop-center.com. always_nxdomain tiktokshop-gadget.com. always_nxdomain tiktokshop-market.com. always_nxdomain tiktokshopaccount.com. always_nxdomain tiktokshopsecrets.com. always_nxdomain tiktokskincare168.com. always_nxdomain tiktokwholesaleco.com. always_nxdomain tiktokwinnerszone.com. always_nxdomain tiktokadmanagement.com. always_nxdomain tiktokceilingtrend.com. always_nxdomain tiktokglobalmarket.com. always_nxdomain tiktokmademewantit.com. always_nxdomain tiktokmarkkinointi.com. always_nxdomain tiktokonlinemarket.com. always_nxdomain tiktoksellercourse.com. always_nxdomain tiktokshop-english.com. always_nxdomain tiktokshop-sellers.com. always_nxdomain tiktokshop-vn-shop.com. always_nxdomain tiktokvintagevibes.com. always_nxdomain business-tiktokshop.com. always_nxdomain magiamgiatiktokshop.com. always_nxdomain tiktok-entrepreneur.com. always_nxdomain tiktok-sellercenter.com. always_nxdomain tiktokfortherapists.com. always_nxdomain tiktokmarketlebanon.com. always_nxdomain tiktokprofileviewer.com. always_nxdomain tiktokrewardsfinder.com. always_nxdomain tiktokshop-business.com. always_nxdomain tiktokshop-megamall.com. always_nxdomain tiktokshop-vn-store.com. always_nxdomain tiktokshoppromotion.com. always_nxdomain tiktokshopspingmall.com. always_nxdomain tiktoktransnational.com. always_nxdomain tiktokverifications.com. always_nxdomain tiktok-globalshoping.com. always_nxdomain tiktok-wholesaleshop.com. always_nxdomain tiktok-worldshopping.com. always_nxdomain tiktokcountdownclock.com. always_nxdomain tiktokgadgets-online.com. always_nxdomain tiktokseofastandfree.com. always_nxdomain tiktokshopmasterylab.com. always_nxdomain tiktokshopnewsletter.com. always_nxdomain tiktokshopshangcheng.com. always_nxdomain tiktokslidemarketing.com. always_nxdomain tiktokafiliadoexitoso.com. always_nxdomain tiktokshopmarketplace.com. always_nxdomain tiktoktizlenmesatinal.com. always_nxdomain tiktokventurepartners.com. always_nxdomain tiktokacquisitiongroup.com. always_nxdomain tiktokcaptiongenerator.com. always_nxdomain tiktokinternationality.com. always_nxdomain tiktokmademepurchaseit.com. always_nxdomain tiktokshopvnsummit2024.com. always_nxdomain tiktok-marketing-product.com. always_nxdomain tiktokbusinessmanagement.com. always_nxdomain tiktokfarmingmarketplace.com. always_nxdomain tiktoklivecreatornetwork.com. always_nxdomain seller-us-accounts-tiktok.com. always_nxdomain tuyendungdienvientiktoker.com. always_nxdomain chattiktok.pages.dev. always_nxdomain tiktok-dir.pages.dev. always_nxdomain tiktok-world.midasbuyshop45.workers.dev. always_nxdomain noisy-base-tiktok.midasbuyshop45.workers.dev. always_nxdomain tiktok-crimson.newseventpubgmobile.workers.dev. always_nxdomain tiktokk.fit. always_nxdomain javiertiktok.fun. always_nxdomain tiktokshopvip.fun. always_nxdomain tiktokslot88d.fun. always_nxdomain tiktok-marketing-426978.fyi. always_nxdomain tiktok-marketing-services-478855.fyi. always_nxdomain saudi-arabia-tiktok-influencer-594219.fyi. always_nxdomain influencer-tiktok-marketing-eastern-538005.fyi. always_nxdomain tiktokio.ink. always_nxdomain tiktokshop.lat. always_nxdomain tiktoken.lol. always_nxdomain tiktokshop.lol. always_nxdomain tiktoka.net. always_nxdomain tiktoki.net. always_nxdomain tiktokt.net. always_nxdomain tiktokz.net. always_nxdomain tiktok-check-profile-badge.osloshop.net. always_nxdomain tiktok69.net. always_nxdomain jp-tiktok.net. always_nxdomain tiktok303.net. always_nxdomain tiktokone.net. always_nxdomain vn-tiktok.net. always_nxdomain tiktok-ins.net. always_nxdomain tiktok1688.net. always_nxdomain tiktokcard.net. always_nxdomain tiktoktoys.net. always_nxdomain www-tiktok.net. always_nxdomain mall-tiktok.net. always_nxdomain napxutiktok.net. always_nxdomain tiktok-plus.net. always_nxdomain tiktoknotes.net. always_nxdomain tiktokplace.net. always_nxdomain tiktok-coins.net. always_nxdomain tiktok-malls.net. always_nxdomain tiktok4dslot.net. always_nxdomain tiktokmodapk.net. always_nxdomain tiktokshop24.net. always_nxdomain tiktokshopvn.net. always_nxdomain tiktokvip888.net. always_nxdomain tiktok-server.net. always_nxdomain tiktok888slot.net. always_nxdomain tiktokshopapp.net. always_nxdomain tiktokshopnow.net. always_nxdomain binhchontiktok.net. always_nxdomain tiktok-service.net. always_nxdomain tiktokofficial.net. always_nxdomain freetiktoklikes.net. always_nxdomain tiktok-official.net. always_nxdomain tiktokmall-shop.net. always_nxdomain tiktokresellers.net. always_nxdomain tiktokglobalstore.net. always_nxdomain business-tiktokshop.net. always_nxdomain tiktok-for-business.net. always_nxdomain tiktok-sellercenter.net. always_nxdomain tiktok-onlinebusiness.net. always_nxdomain tiktokshopaffiliateacademy.net. always_nxdomain tiktoka.org. always_nxdomain tiktokio.org. always_nxdomain tiktokjp.org. always_nxdomain tiktok118.org. always_nxdomain tiktok123.org. always_nxdomain tiktok365.org. always_nxdomain tiktok4d1.org. always_nxdomain tiktok777.org. always_nxdomain tiktok999.org. always_nxdomain app-tiktok.org. always_nxdomain tiktok-app.org. always_nxdomain tiktok168a.org. always_nxdomain tiktokcash.org. always_nxdomain tiktokgame.org. always_nxdomain tiktoktoto.org. always_nxdomain viewtiktok.org. always_nxdomain tiktokclaim.org. always_nxdomain tiktokparty.org. always_nxdomain tiktoktogel.org. always_nxdomain tiktoktoto1.org. always_nxdomain tiktokvoter.org. always_nxdomain tiktok-notes.org. always_nxdomain tiktok69slot.org. always_nxdomain tiktok89slot.org. always_nxdomain tiktokmademe.org. always_nxdomain tiktokphotos.org. always_nxdomain tiktokseller.org. always_nxdomain tiktok123slot.org. always_nxdomain tiktok168slot.org. always_nxdomain tiktok288slot.org. always_nxdomain tiktok303slot.org. always_nxdomain tiktokslot88d.org. always_nxdomain tiktok-service.org. always_nxdomain tiktokofficial.org. always_nxdomain tiktokshop1688.org. always_nxdomain tiktok-business.org. always_nxdomain tiktok-official.org. always_nxdomain bezpiecznytiktok.org. always_nxdomain tiktokbiblestudy.org. always_nxdomain tiktokonlineviewer.org. always_nxdomain tiktok.inbt.pro. always_nxdomain tiktoki.pro. always_nxdomain tiktoku.pro. always_nxdomain tiktok365.pro. always_nxdomain tiktokers.pro. always_nxdomain tiktok-usa.pro. always_nxdomain tiktok1688.pro. always_nxdomain tiktokdeals.pro. always_nxdomain tiktokonline.pro. always_nxdomain tiktokmastery.pro. always_nxdomain tiktokslot88d.pro. always_nxdomain tiktoksp.sbs. always_nxdomain tiktokmurah.sbs. always_nxdomain tiktok7.top. always_nxdomain tiktokk.top. always_nxdomain tiktokr.top. always_nxdomain tiktokw.top. always_nxdomain hwtiktok.top. always_nxdomain tiktok.megastok.top. always_nxdomain tiktok79.top. always_nxdomain tiktok86.top. always_nxdomain tiktokk1.top. always_nxdomain tiktokk2.top. always_nxdomain tiktoknb.top. always_nxdomain tiktokpe.top. always_nxdomain tiktokpo.top. always_nxdomain yqtiktok.top. always_nxdomain mstiktoko.top. always_nxdomain tiktok-un.top. always_nxdomain tiktok138.top. always_nxdomain tiktok881.top. always_nxdomain tiktokhky.top. always_nxdomain tiktoklvd.top. always_nxdomain tiktoknow.top. always_nxdomain tiktoktoy.top. always_nxdomain tiktok.tomorrows.top. always_nxdomain tiktok.superbowsm.top. always_nxdomain tiktok-app.top. always_nxdomain tiktok1238.top. always_nxdomain tiktok1618.top. always_nxdomain tiktok1app.top. always_nxdomain tiktok3319.top. always_nxdomain tiktok3699.top. always_nxdomain tiktok5121.top. always_nxdomain tiktok5568.top. always_nxdomain tiktok6618.top. always_nxdomain tiktok7757.top. always_nxdomain tiktok7785.top. always_nxdomain tiktok8787.top. always_nxdomain tiktok8808.top. always_nxdomain tiktok8856.top. always_nxdomain tiktok9953.top. always_nxdomain tiktokcard.top. always_nxdomain tiktokskyh.top. always_nxdomain tiktokthez.top. always_nxdomain tiktokthyj.top. always_nxdomain tiktoktop1.top. always_nxdomain top-tiktok.top. always_nxdomain vip-tiktok.top. always_nxdomain tiktok-thai.top. always_nxdomain tiktok88app.top. always_nxdomain tiktokxiayu.top. always_nxdomain tiktok-malls.top. always_nxdomain tiktokgloble.top. always_nxdomain tiktokmarket.top. always_nxdomain tiktokshop99.top. always_nxdomain tiktoktkshop.top. always_nxdomain tiktok-globle.top. always_nxdomain tiktokmerchant.top. always_nxdomain business-tiktok.top. always_nxdomain tiktok-shop-app.top. always_nxdomain tiktokshoppings.top. always_nxdomain tiktokvideolive.top. always_nxdomain tiktokonlinetoko.top. always_nxdomain tiktokshoppingclub.top. always_nxdomain tiktokt.vip. always_nxdomain tiktokw.vip. always_nxdomain sk-tiktok.vip. always_nxdomain tiktok-01.vip. always_nxdomain tiktok-02.vip. always_nxdomain tiktok-03.vip. always_nxdomain tiktok-04.vip. always_nxdomain tiktok-05.vip. always_nxdomain tiktok-06.vip. always_nxdomain tiktok-07.vip. always_nxdomain tiktok-08.vip. always_nxdomain tiktok-09.vip. always_nxdomain tiktok-10.vip. always_nxdomain tiktok-un.vip. always_nxdomain tiktok758.vip. always_nxdomain tiktok768.vip. always_nxdomain tiktok776.vip. always_nxdomain tiktok778.vip. always_nxdomain tiktok779.vip. always_nxdomain tiktok788.vip. always_nxdomain tiktok798.vip. always_nxdomain tiktok888.vip. always_nxdomain tiktokbuy.vip. always_nxdomain tiktokone.vip. always_nxdomain tiktokpro.vip. always_nxdomain tiktokcard.vip. always_nxdomain tiktokthez.vip. always_nxdomain top-tiktok.vip. always_nxdomain mall-tiktok.vip. always_nxdomain tiktok-thai.vip. always_nxdomain tiktok-games.vip. always_nxdomain tiktokgloble.vip. always_nxdomain tiktokinshop.vip. always_nxdomain tiktokseller.vip. always_nxdomain tiktokshoper.vip. always_nxdomain tiktokglobalmall.vip. always_nxdomain tiktokonlinetoko.vip. always_nxdomain tiktokshoponline.vip. always_nxdomain bisnestiktok.win. always_nxdomain tiktokrizzbattle.wtf. always_nxdomain tiktok1.xyz. always_nxdomain tiktoke.xyz. always_nxdomain tiktok-c.xyz. always_nxdomain tiktok-d.xyz. always_nxdomain tiktok-z.xyz. always_nxdomain tiktokio.xyz. always_nxdomain tiktokers.xyz. always_nxdomain tiktokeuz.xyz. always_nxdomain nicetiktok.xyz. always_nxdomain en.tiktok-app.xyz. always_nxdomain tiktokleap.xyz. always_nxdomain tiktokplus.xyz. always_nxdomain tiktokvapp.xyz. always_nxdomain vip-tiktok.xyz. always_nxdomain tiktokboost.xyz. always_nxdomain tiktokscale.xyz. always_nxdomain tiktokexpand.xyz. always_nxdomain tiktokgrowth.xyz. always_nxdomain tiktokphotos.xyz. always_nxdomain tiktokshop23.xyz. always_nxdomain tiktoksolana.xyz. always_nxdomain tiktokadvance.xyz. always_nxdomain tiktokdowland.xyz. always_nxdomain tiktokshopvip.xyz. always_nxdomain tiktokslot88e.xyz. always_nxdomain tiktokhilecisi.xyz. always_nxdomain tiktokshop2024.xyz. always_nxdomain tiktokrizzparty.xyz. always_nxdomain tiktokshopvip01.xyz. always_nxdomain tiktokmademebuyit.xyz. always_nxdomain tiktoker-online-marketing-bildungsschein-kassel.xyz. always_nxdomain tiktok-business.asia. always_nxdomain tiktok-onlinebusiness.asia. always_nxdomain hotiktok.baby. always_nxdomain tiktokshop.baby. always_nxdomain tiktokaffiliate.blog. always_nxdomain tiktokstore.bond. always_nxdomain tiktokkjbs.buzz. always_nxdomain tiktokmall.buzz. always_nxdomain tiktokshops.buzz. always_nxdomain tiktokstore.buzz. always_nxdomain tiktokshopkj11.buzz. always_nxdomain tiktokcoins.cash. always_nxdomain tiktokbuy.club. always_nxdomain tiktoktok.club. always_nxdomain tiktok-app.club. always_nxdomain tiktokcoin.club. always_nxdomain tiktokilke.club. always_nxdomain tiktokshops.club. always_nxdomain tiktokstore.club. always_nxdomain tiktokshoper.club. always_nxdomain tiktokshopss.club. always_nxdomain business-tiktok.club. always_nxdomain tiktokshop.cool. always_nxdomain tiktoki.cyou. always_nxdomain tiktokrs.cyou. always_nxdomain tiktokscs.cyou. always_nxdomain tiktokvip1.cyou. always_nxdomain mall-tiktok.cyou. always_nxdomain tiktok-mall.cyou. always_nxdomain tiktok-shop.cyou. always_nxdomain tiktoker.guru. always_nxdomain tiktokvideodownload.info. always_nxdomain tiktok-marketing-influencers-riyadh-786395.info. always_nxdomain tiktoke.life. always_nxdomain mytiktok.life. always_nxdomain lz4.tiktok123.life. always_nxdomain shoptiktok.life. always_nxdomain tiktokstore.life. always_nxdomain tindertiktok.life. always_nxdomain tiktokshopping.life. always_nxdomain tiktokrizzparty.life. always_nxdomain tiktokbusiness66.life. always_nxdomain tiktok-d.live. always_nxdomain tiktoker.live. always_nxdomain tiktokjp.live. always_nxdomain naptiktok.live. always_nxdomain tubetiktok.live. always_nxdomain vim-tiktok.live. always_nxdomain tiktokshoping.live. always_nxdomain tiktok-guide-640805.live. always_nxdomain tiktok-guide-739462.live. always_nxdomain tiktok-influencers-medina-979468.live. always_nxdomain tiktok-unternehmen-marketing-596544.live. always_nxdomain xhui-tiktok-bad-credit-loan-us-2403002.live. always_nxdomain tiktokcat.meme. always_nxdomain tiktokmall.sale. always_nxdomain tiktokc.shop. always_nxdomain tiktoko.shop. always_nxdomain lmtiktok.shop. always_nxdomain m-tiktok.shop. always_nxdomain tiktok-b.shop. always_nxdomain tiktok-c.shop. always_nxdomain tiktok-d.shop. always_nxdomain tiktok-p.shop. always_nxdomain tiktok22.shop. always_nxdomain tiktok55.shop. always_nxdomain tiktok79.shop. always_nxdomain tiktok89.shop. always_nxdomain tiktok91.shop. always_nxdomain tiktokdr.shop. always_nxdomain tiktokht.shop. always_nxdomain tiktokjk.shop. always_nxdomain tiktokrd.shop. always_nxdomain tiktoksk.shop. always_nxdomain tiktoksp.shop. always_nxdomain tiktoktw.shop. always_nxdomain kotiktoks.shop. always_nxdomain mstiktoko.shop. always_nxdomain riptiktok.shop. always_nxdomain sk-tiktok.shop. always_nxdomain tiktok-02.shop. always_nxdomain tiktok-06.shop. always_nxdomain tiktok-09.shop. always_nxdomain tiktok-kr.shop. always_nxdomain tiktok-me.shop. always_nxdomain tiktok100.shop. always_nxdomain tiktok226.shop. always_nxdomain tiktok668.shop. always_nxdomain tiktok899.shop. always_nxdomain tiktok998.shop. always_nxdomain tiktokbot.shop. always_nxdomain tiktokkor.shop. always_nxdomain tiktokmal.shop. always_nxdomain tiktokmch.shop. always_nxdomain tiktokn-3.shop. always_nxdomain tiktoknet.shop. always_nxdomain tiktokrww.shop. always_nxdomain tiktokssz.shop. always_nxdomain tiktokyjl.shop. always_nxdomain tiktokzhy.shop. always_nxdomain tiktokzky.shop. always_nxdomain tiktokzyx.shop. always_nxdomain tw-tiktok.shop. always_nxdomain uk-tiktok.shop. always_nxdomain app-tiktok.shop. always_nxdomain cdn-tiktok.shop. always_nxdomain tiktok-vip.shop. always_nxdomain tiktok1913.shop. always_nxdomain tiktok9999.shop. always_nxdomain tiktokdown.shop. always_nxdomain tiktokforu.shop. always_nxdomain tiktokgcmn.shop. always_nxdomain tiktokhost.shop. always_nxdomain tiktokmmbi.shop. always_nxdomain tiktoknews.shop. always_nxdomain tiktoksell.shop. always_nxdomain tiktokthky.shop. always_nxdomain tiktokview.shop. always_nxdomain tiktokvips.shop. always_nxdomain top-tiktok.shop. always_nxdomain tiktok-sell.shop. always_nxdomain tiktokboost.shop. always_nxdomain tiktokchain.shop. always_nxdomain tiktokdzzms.shop. always_nxdomain tiktokhacks.shop. always_nxdomain tiktokhxybr.shop. always_nxdomain tiktokmallh.shop. always_nxdomain tiktokmalll.shop. always_nxdomain tiktokmalls.shop. always_nxdomain tiktokmallz.shop. always_nxdomain tiktokpeppk.shop. always_nxdomain tiktokqmbld.shop. always_nxdomain tiktokqrkxr.shop. always_nxdomain tiktokqtbhz.shop. always_nxdomain tiktoksblrh.shop. always_nxdomain tiktokshare.shop. always_nxdomain tiktokshop1.shop. always_nxdomain tiktoksmall.shop. always_nxdomain tiktoksxozx.shop. always_nxdomain tiktokt0day.shop. always_nxdomain tiktoktoday.shop. always_nxdomain tiktoktrade.shop. always_nxdomain tiktoktwrta.shop. always_nxdomain tiktokugkrs.shop. always_nxdomain tiktokxgwfd.shop. always_nxdomain tiktok-malls.shop. always_nxdomain tiktokonlone.shop. always_nxdomain tiktokshop85.shop. always_nxdomain tiktokshoper.shop. always_nxdomain tiktokshopkd.shop. always_nxdomain tiktokshoplk.shop. always_nxdomain tiktokshopwm.shop. always_nxdomain tiktoktodays.shop. always_nxdomain tiktoktyshop.shop. always_nxdomain tiktokwwh668.shop. always_nxdomain angfengtiktok.shop. always_nxdomain global-tiktok.shop. always_nxdomain onetiktokshop.shop. always_nxdomain online-tiktok.shop. always_nxdomain tiktok-taiwan.shop. always_nxdomain tiktokcompras.shop. always_nxdomain tiktoksafesex.shop. always_nxdomain tiktokshop168.shop. always_nxdomain tiktokshop188.shop. always_nxdomain tiktokshopvip.shop. always_nxdomain tiktokshopzst.shop. always_nxdomain sellertiktok12.shop. always_nxdomain sellertiktok13.shop. always_nxdomain tiktokshop1018.shop. always_nxdomain tiktokshopsale.shop. always_nxdomain tiktokshopshop.shop. always_nxdomain tiktoktreasure.shop. always_nxdomain business-tiktok.shop. always_nxdomain shopping-tiktok.shop. always_nxdomain tiktokcandy8899.shop. always_nxdomain tiktokrizzparty.shop. always_nxdomain tiktokwholesale.shop. always_nxdomain tiktokgoodthings.shop. always_nxdomain tiktokshopping33.shop. always_nxdomain tiktokonlonestore.shop. always_nxdomain ccs-optical-tiktok.shop. always_nxdomain globalseller-tiktok.shop. always_nxdomain liuliuxiaodiantiktok.shop. always_nxdomain tiktokmademebuyit-6848.shop. always_nxdomain tiktokshopdropshipping.shop. always_nxdomain tiktokio.site. always_nxdomain snaptiktok.site. always_nxdomain tiktoklive.site. always_nxdomain tiktokcoins.site. always_nxdomain tiktokvideo.site. always_nxdomain dichvutiktok.site. always_nxdomain tiktok-adult.site. always_nxdomain lovedroptiktok.site. always_nxdomain tiktoktrendy.tech. always_nxdomain tiktokgames.work. always_nxdomain tiktok-store.work. always_nxdomain tiktokshop.zone. always_nxdomain tiktok1.click. always_nxdomain tiktok2.click. always_nxdomain tiktoksp.click. always_nxdomain tiktokpro.click. always_nxdomain tiktokgirls18.click. always_nxdomain tiktok.w77h6.cloud. always_nxdomain tiktokshop99.cloud. always_nxdomain tiktokofficial.guide. always_nxdomain tiktok88.homes. always_nxdomain tiktokrizz.party. always_nxdomain tiktoker.space. always_nxdomain tiktokstore.space. always_nxdomain tiktok-jp.store. always_nxdomain tiktoksop.store. always_nxdomain tiktokbeta.store. always_nxdomain tiktokfans.store. always_nxdomain tiktokring.store. always_nxdomain tiktokchina.store. always_nxdomain tiktokcoins.store. always_nxdomain tiktokmalls.store. always_nxdomain tiktokscore.store. always_nxdomain tiktokshop1.store. always_nxdomain tiktoksmall.store. always_nxdomain tiktokstore.store. always_nxdomain smartuptiktok.store. always_nxdomain tiktokgadgets.store. always_nxdomain tiktokpremium.store. always_nxdomain tiktokshopapi.store. always_nxdomain tiktokshopfinds.store. always_nxdomain tiktokmemetshirt.store. always_nxdomain tiktokshop-finds.store. always_nxdomain tiktok-shop-finds.store. always_nxdomain tiktokmall.today. always_nxdomain tiktokshopvip.today. always_nxdomain tiktokmarketingtraining.today. always_nxdomain tiktokio.tools. always_nxdomain tiktokmall.world. always_nxdomain tiktokofficial.world. always_nxdomain tiktok-official.world. always_nxdomain tiktok-influencer-campaigns-asir-609199.world. always_nxdomain herkules99-tiktok138.beauty. always_nxdomain tiktokshop.center. always_nxdomain tiktokservice.center. always_nxdomain tiktokonline.market. always_nxdomain tiktok-kr.online. always_nxdomain tiktoktech.online. always_nxdomain tiktoktube.online. always_nxdomain tiktokeando.online. always_nxdomain tiktokfinds.online. always_nxdomain tiktoknotes.online. always_nxdomain tiktokplace.online. always_nxdomain tiktoksocio.online. always_nxdomain seenontiktok.online. always_nxdomain tiktokbrasil.online. always_nxdomain tiktokwebapp.online. always_nxdomain milliontiktok.online. always_nxdomain tiktokcoins-l.online. always_nxdomain tiktoklottery.online. always_nxdomain tiktokslot88d.online. always_nxdomain securitytiktok.online. always_nxdomain sneakers-tiktok.online. always_nxdomain best-tiktok-shop.online. always_nxdomain tiktok-community.online. always_nxdomain tiktokglobalshop.online. always_nxdomain tiktokwholesales.online. always_nxdomain tiktokmadeusbuyit.online. always_nxdomain tiktokvideodownload.online. always_nxdomain tiktokshop.company. always_nxdomain tiktokmasters.digital. always_nxdomain tiktokshop.business. always_nxdomain tiktoknotes.download. always_nxdomain tiktokshop.software. always_nxdomain

[gthess]

I guess www.tiktok.com. always_nxdomain is then manually entered by you to make it work again? If I disregard that record, is it the same state that was not working before your manual addition?

[TheteSigma]

Sorry about that, yes, I added www.tiktok.com to block it again, I will leave it out while troubleshooting with you.

[gthess]

I believe I can reproduce. I suppose you have num-threads: higher than 1?

[TheteSigma]

Correct.

server: num-threads: 4

[gthess]

OK, that seems to be the problem but I need to see why. With num-threads: 1 I can't reproduce.

[gthess]

Hi @TheteSigma, I have identified the problem and already working on a solution. But the weird part is that I can only reproduce when --without-pthreads is used during compilation; that means Unbound is running in a multi process environment. Something that I don't see in your initial output above. Can you verify that this is correct? Because with multithreading (i.e., --with-pthreads) I can't reproduce it anymore.

One last step if you could try to see that we are reproducing the same issue: when the issue happens, do you get different answers if you keep quering Unbound? Alternating between the expected NXDOMAIN and the resolved result?

[TheteSigma]

Hi @gthess ,

Yes, I double checked it is compiled with pthreads, running on Quad i5 Intel(R) Core(TM) i5-3470 CPU @ 3.20GHz

Also I can run multiple dig or host queries and consistently get the resolved result. If I reload unbound with tiktok.com always_nxdomain at load time it then works fine.

[gthess]

Then it seems I identified and I am solving a different issue :) I can't reproduce your case though. If you take all the other domains out of the equation, could you still reproduce it with just tiktok.com? If that is the case, could you share precise commands that could work for me?

[TheteSigma]

I removed all the local-zone that were always_nxdomain and loaded just tiktok.com from file using. unbound-control local_zones < blocklists-local-zone.txt

dig www.tiktok.com

; <<>> DiG 9.16.48 <<>> www.tiktok.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 51269 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.tiktok.com. IN A

;; Query time: 0 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed May 08 09:13:40 CDT 2024 ;; MSG SIZE rcvd: 43

So it works for single entry, maybe it has to do with the size of the list being loaded.

[gthess]

Can you reproduce with your normal long list and num-threads: 1?

[TheteSigma]

I changed num-threads to 1, restarted unbound, then cleared and reloaded block list.

dig www.tiktok.com

; <<>> DiG 9.16.48 <<>> www.tiktok.com ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 55196 ;; flags: qr rd ra; QUERY: 1, ANSWER: 11, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4096 ;; QUESTION SECTION: ;www.tiktok.com. IN A

;; ANSWER SECTION: www.tiktok.com. 1800 IN CNAME www.tiktok.com.edgesuite.net. www.tiktok.com.edgesuite.net. 21600 IN CNAME a2047.api10.akamai.net. a2047.api10.akamai.net. 20 IN A 23.47.52.140 a2047.api10.akamai.net. 20 IN A 23.47.52.134 a2047.api10.akamai.net. 20 IN A 23.47.52.150 a2047.api10.akamai.net. 20 IN A 23.47.52.142 a2047.api10.akamai.net. 20 IN A 23.47.52.137 a2047.api10.akamai.net. 20 IN A 23.47.52.145 a2047.api10.akamai.net. 20 IN A 23.47.52.143 a2047.api10.akamai.net. 20 IN A 23.47.52.146 a2047.api10.akamai.net. 20 IN A 23.47.52.139

;; Query time: 169 msec ;; SERVER: 127.0.0.1#53(127.0.0.1) ;; WHEN: Wed May 08 09:37:43 CDT 2024 ;; MSG SIZE rcvd: 262

[gthess]

Could you share your unbound configuration and the block list? You can also email them to me if you want yorgos `nlnetlabs.nl`.

[gthess]

Thanks for the files, I can reproduce the issue. There seems to be a difference when creating the local-zones between configuration and the unbound-control command. I am looking further into it.

Can I suggest as a workaround for now to update the included blocklists.conf and reload Unbound? Instead of using the unbound-control local_zones command? You could also use reload_keep_cache if you want to keep the cache contents.

Btw thanks for unintentionally pointing to another issue (not helping in your case) that is now fixed; #1069 :)

[gthess]

Found this problem in the end; the above PR solves that. When unbound-control was used to enter local zones dynamically a different approach to calculate the parent was used and it wasn't completely correct. Thanks for bringing up the issue and sharing data!

[TheteSigma]

Thanks for digging in and finding the issue.