Blacklisted DNS record on 1.1.1.1

Good day. We have a site (not on cloudflare) that hosts updates to our application. For a while we received a complaints that the update process failed, and recently our users discovered the culprit - they had 1.1.1.1 DNS service. It turns out that this service resolves our domain to a non-existent address. For now the “solution” that our users adopted is to switch to Google 8.8.8.8 DNS. But, still I am wondering whether it is possible to remove the block?

Surprisingly, I do not see any form or tool, nor even a mention that 1.1.1.1 has some sort of blacklist.

What is the proper way to get our domain working, short of telling our users to stop using 1.1.1.1 service?

Cloudflare does not have any such blacklist. It is more likely an issue with the authoritative nameserver (e.g. DNSSEC).

Whats the record in question?

2 Likes

Interesting… The record is hkdata.fairuse.org . Thanks!

It actually does resolve for me

nslookup hkdata.fairuse.org 1.1.1.1
Server:  one.one.one.one
Address:  1.1.1.1

Non-authoritative answer:
Name:    hkdata.fairuse.org
Address:  91.224.23.225

It doesnt for you?

Does for me, but not for (some) of our users. Maybe they got it wrong, maybe it was some intermittent issuye. But we have more than a few reports that switching from 1.1.1.1 to 8.8.8.8 did solve the problem. Strange… Thanks, anyway!

fairuse.org (respectively possibly its nameservers’ domain) does seem to have some configuration issues however

https://dnsviz.net/d/fairuse.org/dnssec/

If they were all from around the same time it could have been easily an intermittent issue. It would require more debugging here to be able to say more.