False positive report

[i-am-at0m]

Prerequisites

• I use the current version of the lists.
• Disabling these lists resolves the issue.
• I do not utilize a dedicated block page (e.g. NextDNS or ControlD block page) or a block mode that returns a custom IP for blocked domains. In my environment, blocked domains return a zero/null IP, or result in status NXDOMAIN, REFUSED, NODATA for DNS resolutions.

What is the operating system of the device?

Other

Which blocklist(s) caused the issue?

Threat Intelligence Feeds

Where does the issue occur - on which website or in which app?

none of my internal LAN services work due to this

Which domain(s) need to be unblocked?

at0m.us

Why should the domain(s) be unblocked?

this is my internal LAN domain, everything i have on my local network uses subdomains of this, so i would like it unblocked so my stuff will work again

Confirmation

• I have verified that the domain(s) are blocked by these blocklists and that the issue is not caused by any other additional blocklists in use. The behavior is also not caused by a browser content blocker or similar browser add-ons, nor by browser settings such as an enhanced/strict tracking protection.
• I have verified that the unblocking of the domain(s) has not been declined in any existing issue.
• I have provided sufficient details to verify the need for unblocking the domain(s), including the steps to reproduce the issue.
• I did not answer truthfully to any of the above checkboxes.

Terms

• I confirm that the request does not contain any sexually explicit material or private/sensitive information.

[CVFA]

This is also blocked by the OISD list. If you’d like, you can ask them to remove your domain using this form:
https://oisd.nl/report

[CVFA]

• I did not answer truthfully to any of the above checkboxes.

A checkbox has never been so precise. 💀

[i-am-at0m]

Derp on the checkbox.

It's on OISD because it's on this one, I think? I already submitted a false positive report over there too.

Turning off the list and/or whitelisting the domain in my pihole instance both meant I could actually access stuff on my LAN again, this was a PITA. Was happy to find the Pihole didn't block its own hostname despite it being on a blocklist, but getting there was a bit rough

I checked the "sufficient detail" box because there's no section on reproduction and thought I'd covered what I needed in the original post

[CVFA]

• [] I did not answer truthfully to any of the above checkboxes.

Oops, you forgot to put a space between the square brackets, and the checkbox was having a bad day.

[hagezi]

@DNSBunker CTI

[hagezi]

Detected as a rebind attack; resolves to 0.0.0.0 via an unfiltered DNS; strange domain name; TLD with a poor reputation.

[i-am-at0m]

changed the base domain to a cloudflare proxy instead, then, should be propagating shortly. Would that resolve the issue?

[DNSBunker]

Checking CTI Apis...

Whitelisting it. Since OISD is using my CTI, it should be resolved shortly too.

Flagged multiple times as "Atomic Stealer" lol

[github-actions]

Thank you for your support. The issue is scheduled to be fixed in the next release.
Please do not make any further changes to this issue. Any changes made after this point will not be taken into consideration. If additional updates are required, please open a new issue.
You will be notified when the issue is finally fixed.
Please keep the issue open; it will be automatically closed in the next release.