Many redirect shopping sites blocked, especially from Google Shopping tab

My wife has been doing a lot of shopping via her iPhone and many sites that have redirect tracking cookies are blocked and it's a game of whack-a-mole trying to whitelist them. There are times when these same cookies should be blocked. This happens especially on sites like eBay that have redirection via D.agkn.com. Lowes.com gets blocked.

Here is a typical block:

  1. Search Google.com for "heater covers".
  2. Click on the Google Shopping option at the top of the SERP page.
  3. Click Visit Site.

    The Pi hole log has:
Aug  3 17:38:34 dnsmasq[562]: query[A] encrypted-tbn2.gstatic.com from 192.168.0.163
Aug  3 17:38:34 dnsmasq[562]: forwarded encrypted-tbn2.gstatic.com to 1.0.0.1
Aug  3 17:38:34 dnsmasq[562]: reply encrypted-tbn2.gstatic.com is 172.217.6.238
Aug  3 17:38:35 dnsmasq[562]: query[A] d.agkn.com from 192.168.0.163
Aug  3 17:38:35 dnsmasq[562]: /etc/pihole/gravity.list d.agkn.com is 0.0.0.0
Aug  3 17:38:34 dnsmasq[562]: query[A] encrypted-tbn2.gstatic.com from 192.168.0.163
Aug  3 17:38:34 dnsmasq[562]: forwarded encrypted-tbn2.gstatic.com to 1.0.0.1
Aug  3 17:38:34 dnsmasq[562]: reply encrypted-tbn2.gstatic.com is 172.217.6.238
Aug  3 17:38:35 dnsmasq[562]: query[A] d.agkn.com from 192.168.0.163
Aug  3 17:38:35 dnsmasq[562]: /etc/pihole/gravity.list d.agkn.com is 0.0.0.0
Aug  3 17:38:36 dnsmasq[562]: query[A] clientservices.googleapis.com from 192.168.0.163
Aug  3 17:38:36 dnsmasq[562]: forwarded clientservices.googleapis.com to 1.0.0.1
Aug  3 17:38:36 dnsmasq[562]: reply clientservices.googleapis.com is 172.217.10.99

So it appears d.agkn.com is on many of those "Visit Site" options.

I guess whitelisting that is my only option?

I also had to whitelist many [0-29].client-channel.google.com and clients[1-9].google.com to get downloads from the Google Play store to work, and a few *.apple.com sites to get iTunes to download apps. I'm surprised I'm not seeing others having these issues.

Pi-hole Version v4.3.1 Web Interface Version v4.3 FTL Version v4.3.1

Please generate a debug log, upload it and post the token. That will let us check your blocklists.

Your debug token is: https://tricorder.pi-hole.net/l4kesa6c38

debuglog.txt (26.8 KB)

Note that I just whitelisted d.agkn.com

This is expected behaviour. The domain name being requested and the site visited is not lowes but some intermediary that is collecting metrics, adding cookies, and selling off your data. If you are comfortable with them having this information then you will have to whitelist the actual domain from the link being clicked.

I figured, but in case others run into this issue, they'll know why.

Or it could be an over-agressive blacklist I'm using?

It may be a list, but in most cases you'll find the clickjackers are pretty evil in what they do and there is a reason for them to be blocked.

You have a couple of options though. The first is to temporarily disable Pi-hole via the command line or via the web interface. This disables all blocking for the time period you specify. Another option, and the one I use, is to change your behaviour. When you see something like the result you posted, instead of clicking on the link go directly to the site and get what you want without giving all the information to the intermediate. See that Lowes has heater covers then go to lowes site and search for the heater cover that you were seeing. Last option is to just set the iPhone to use a non-Pi-hole DNS server. Save that one though for the "Take this thing off my phone or your sleeping on the couch" situations though.

1 Like

Another option is to turn off wifi and use mobile data when shopping via google.

1 Like

I almost spit out my drink after reading this and cracking up.

But your othet suggestion of just going straight to Lowes.com works too, just a couple extra clicks. Also wanted to point out that the link is in Google Shopping, but I guess Lowes must work with a 3rd party to track clicks and click attribution.

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.