Odd random.localdomain lookups in pi query logs

[cyanide77]

Hi am wondering what these randomstring.localdmian lookups are ?

i dont have anything of that name in my network id not noticed these before, it maybe related to changing to using "unbound"?

config raspberry pi fully up to date looksup 127.0.0.1#5335 unbound (on the same pi)

Debug Token: below:

https://tricorder.pi-hole.net/WaMdEu7O/

thanks!

[yubiuser]

Looks like:

Just some weird domains being logged

Time Type Domain Client Status Action Time Type Domain Client Status Action 2016-12-22T19:34:41 A yfjmdpisrvyrnq localhost(127.0.0.1) OK 2016-12-22T19:34:41 A attxnwheeeuiad localhost(127.0.0.1) OK 2016-12-22T19:34:37 A nskywzjbpj localhost(127.0.0.1) OK 2016-12-22T19:34:35 A jlkjfxgwhpn localhost(127.0.0.1) OK 2016-12-22T19:34:35 A qumdgakndpowoga localhost(127.0.0.1) OK 2016-12-22T19:34:35 A wbjdzyaplucvpcl localhost(127.0.0.1) OK Anyone familiar with what this gibberish is?? I'm …

[cyanide77]

Hi thanks!
yeh seems the same issue, i dont use google chrome, although i do use Brave & edge (chromium based)

Thanks

[Moto]

Take a look at https://unix.stackexchange.com/questions/363512/chrome-dns-requests-with-random-dns-names-malware

They explain how chrome makes dns requests for random domain names to test whether your ISP is capturing your requests. I guess other browsers built on the same code base such as Edge and Brave would do the same.

[cyanide77]

interesting thanks!
ive used chromium browsers for years and pihole for 2 or so and never spotted them before!

the only change i made in the past couple of days - rebuilt pi with fresh image/fresh install pihole, import settings vi teleporter, and then yesterday i started using unbound, so thought it was related as now i am no longer using any upstream/hosted dns server providers