Roku - apps stopped working

[Briare0s]

The issue I am facing:
Certain apps not working anymore. These are the logs generated when opening two apps as example.

Nov  9 21:43:29: query[A] scribe.logs.roku.com from 192.168.x.xxx
Nov  9 21:43:29: exactly blacklisted scribe.logs.roku.com is 0.0.0.0
Nov  9 21:43:29: query[A] scribe.logs.roku.com from 192.168.x.xxx
Nov  9 21:43:29: exactly blacklisted scribe.logs.roku.com is 0.0.0.0
Nov  9 21:43:33: query[A] api.roku.com from 192.168.1.xxx
Nov  9 21:43:33: forwarded api.roku.com to 127.0.0.1
Nov  9 21:43:33: reply api.roku.com is <CNAME>
Nov  9 21:43:33: reply api.cs.roku.com is 54.165.86.5
Nov  9 21:43:33: reply api.cs.roku.com is 54.225.93.91
Nov  9 21:43:33: reply api.cs.roku.com is 174.129.202.160
Nov  9 21:43:33: reply api.cs.roku.com is 44.193.41.42
Nov  9 21:43:33: reply api.cs.roku.com is 54.162.235.35
Nov  9 21:43:33: reply api.cs.roku.com is 3.225.85.208
Nov  9 21:43:33: reply api.cs.roku.com is 52.7.235.167
Nov  9 21:43:33: reply api.cs.roku.com is 54.84.238.179
Nov  9 21:43:34: query[A] api-ott.retrocrush.tv from 192.168.x.xxx
Nov  9 21:43:34: forwarded api-ott.retrocrush.tv to 127.0.0.1
Nov  9 21:43:34: reply api-ott.retrocrush.tv is <CNAME>
Nov  9 21:43:34: reply d2ebx2hwa0ikzp.cloudfront.net is 52.222.139.19
Nov  9 21:43:34: reply d2ebx2hwa0ikzp.cloudfront.net is 52.222.139.89
Nov  9 21:43:34: reply d2ebx2hwa0ikzp.cloudfront.net is 52.222.139.29
Nov  9 21:43:34: reply d2ebx2hwa0ikzp.cloudfront.net is 52.222.139.126
Nov  9 21:43:36: query[A] api.roku.com from 192.168.1.xxx
Nov  9 21:43:36: cached api.roku.com is <CNAME>
Nov  9 21:43:36: cached api.cs.roku.com is 54.84.238.179
Nov  9 21:43:36: cached api.cs.roku.com is 52.7.235.167
Nov  9 21:43:36: cached api.cs.roku.com is 3.225.85.208
Nov  9 21:43:36: cached api.cs.roku.com is 54.162.235.35
Nov  9 21:43:36: cached api.cs.roku.com is 44.193.41.42
Nov  9 21:43:36: cached api.cs.roku.com is 174.129.202.160
Nov  9 21:43:36: cached api.cs.roku.com is 54.225.93.91
Nov  9 21:43:36: cached api.cs.roku.com is 54.165.86.5
Nov  9 21:43:38: query[A] img2.static-ottera.com from 192.168.x.xxx
Nov  9 21:43:38: forwarded img2.static-ottera.com to 127.0.0.1
Nov  9 21:43:38: query[A] img1.static-ottera.com from 192.168.x.xxx
Nov  9 21:43:38: forwarded img1.static-ottera.com to 127.0.0.1
Nov  9 21:43:38: reply img2.static-ottera.com is 104.21.234.107
Nov  9 21:43:38: reply img2.static-ottera.com is 104.21.234.106
Nov  9 21:43:38: reply img1.static-ottera.com is 104.21.234.106
Nov  9 21:43:38: reply img1.static-ottera.com is 104.21.234.107
Nov  9 21:44:37: query[A] scribe.logs.roku.com from 192.168.x.xxx
Nov  9 21:44:37: exactly blacklisted scribe.logs.roku.com is 0.0.0.0
Nov  9 21:44:46: query[A] scribe.logs.roku.com from 192.168.x.xxx
Nov  9 21:44:46: exactly blacklisted scribe.logs.roku.com is 0.0.0.0
Nov  9 21:44:46: query[A] api.sr.roku.com from 192.168.x.xxx
Nov  9 21:44:46: forwarded api.sr.roku.com to 127.0.0.1
Nov  9 21:44:46: reply api.sr.roku.com is 54.166.220.76
Nov  9 21:44:46: reply api.sr.roku.com is 3.93.135.57
Nov  9 21:44:46: reply api.sr.roku.com is 54.161.175.120
Nov  9 21:44:47: query[A] display.ravm.tv from 192.168.x.xxx
Nov  9 21:44:47: exactly blacklisted display.ravm.tv is 0.0.0.0
Nov  9 21:44:47: query[A] display.ravm.tv from 192.168.x.xxx
Nov  9 21:44:47: exactly blacklisted display.ravm.tv is 0.0.0.0
Nov  9 21:44:53: query[A] display.ravm.tv from 192.168.x.xxx
Nov  9 21:44:53: exactly blacklisted display.ravm.tv is 0.0.0.0
Nov  9 21:44:53: query[A] display.ravm.tv from 192.168.x.xxx
Nov  9 21:44:53: exactly blacklisted display.ravm.tv is 0.0.0.0
Nov  9 21:45:05: query[A] scribe.logs.roku.com from 192.168.x.xxx
Nov  9 21:45:05: exactly blacklisted scribe.logs.roku.com is 0.0.0.0
Nov  9 21:45:08: query[A] api.roku.com from 192.168.x.xxx
Nov  9 21:45:08: cached api.roku.com is <CNAME>
Nov  9 21:45:08: forwarded api.roku.com to 127.0.0.1
Nov  9 21:45:08: reply api.roku.com is <CNAME>
Nov  9 21:45:08: reply api.cs.roku.com is 3.213.195.94
Nov  9 21:45:08: reply api.cs.roku.com is 54.87.172.15
Nov  9 21:45:08: reply api.cs.roku.com is 54.225.93.91
Nov  9 21:45:08: reply api.cs.roku.com is 54.162.235.35
Nov  9 21:45:08: reply api.cs.roku.com is 18.232.0.104
Nov  9 21:45:08: reply api.cs.roku.com is 3.225.85.208
Nov  9 21:45:08: reply api.cs.roku.com is 54.209.74.102
Nov  9 21:45:08: reply api.cs.roku.com is 54.85.213.254
Nov  9 21:45:09: query[A] api.midnightpulp.com from 192.168.x.xxx
Nov  9 21:45:09: forwarded api.midnightpulp.com to 127.0.0.1
Nov  9 21:45:09: reply api.midnightpulp.com is 52.222.139.14
Nov  9 21:45:09: reply api.midnightpulp.com is 52.222.139.84
Nov  9 21:45:09: reply api.midnightpulp.com is 52.222.139.124
Nov  9 21:45:09: reply api.midnightpulp.com is 52.222.139.4
Nov  9 21:45:11: query[A] api.roku.com from 192.168.x.xxx
Nov  9 21:45:11: cached api.roku.com is <CNAME>
Nov  9 21:45:11: cached api.cs.roku.com is 54.85.213.254
Nov  9 21:45:11: cached api.cs.roku.com is 54.209.74.102
Nov  9 21:45:11: cached api.cs.roku.com is 3.225.85.208
Nov  9 21:45:11: cached api.cs.roku.com is 18.232.0.104
Nov  9 21:45:11: cached api.cs.roku.com is 54.162.235.35
Nov  9 21:45:11: cached api.cs.roku.com is 54.225.93.91
Nov  9 21:45:11: cached api.cs.roku.com is 54.87.172.15
Nov  9 21:45:11: cached api.cs.roku.com is 3.213.195.94
Nov  9 21:45:11: query[A] ctv.truex.com from 192.168.x.xxx
Nov  9 21:45:11: exactly blacklisted ctv.truex.com is 0.0.0.0
Nov  9 21:45:11: query[A] ctv.truex.com from 192.168.x.xxx
Nov  9 21:45:11: exactly blacklisted ctv.truex.com is 0.0.0.0
Nov  9 21:45:13: query[A] img3.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: forwarded img3.static-ottera.com to 127.0.0.1
Nov  9 21:45:13: reply img3.static-ottera.com is 104.21.234.106
Nov  9 21:45:13: reply img3.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: query[A] img3.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: cached img3.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: cached img3.static-ottera.com is 104.21.234.106
Nov  9 21:45:13: query[A] img2.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.106
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: query[A] img3.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: cached img3.static-ottera.com is 104.21.234.106
Nov  9 21:45:13: cached img3.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: query[A] img2.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.106
Nov  9 21:45:13: query[A] img1.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: cached img1.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: cached img1.static-ottera.com is 104.21.234.106
Nov  9 21:45:13: query[A] img2.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.106
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: query[A] img2.static-ottera.com from 192.168.x.xxx
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.107
Nov  9 21:45:13: cached img2.static-ottera.com is 104.21.234.106
Nov  9 21:45:41: query[A] scribe.logs.roku.com from 192.168.x.xxx
Nov  9 21:45:41: exactly blacklisted scribe.logs.roku.com is 0.0.0.0

Details about my system:
Using Pi-Hole as a addblocker and recursive dns via this video.
Runing pihole on a RB-pi retro.

Router runs DD-WRT.
Assigned static IP to all devices on network.
Used PiHole IP as static DNS.
Roku is behind a VPN via policy based routing in the router.

Topology:

internet -> router -> media server
******** |-> policy based routing vpn -> roku

What I have changed since installing Pi-hole:
Added blacklist / whitelist / regex.
Setup as recursive DNS.
Used this tutorial for setup.

[jfb]

How do I determine what domain an ad is coming from?

Block ads or fix broken sites This FAQ is written in the context of finding out how to block an ad that isn't blocked automatically, but the same steps can be used to troubleshoot issues with sites that don't function properly. An example is that sometimes certain payment gateways try to collect metrics on the sale, but these domains are blocked by Pi-hole, so the payment cannot be processed. Also, some links send you through several referrers and if one of them is blocked, you may land on a …

[Briare0s]

Thanks Jfb. I've read that, but I'm not using a browser, so I can't use the suggested extension. Except that and the logs (which I posted with my question), I don't know what to go on in your link.

[PromoFaux]

blacklisted scribe.logs.roku.com is 0.0.0.0
exactly blacklisted display.ravm.tv is 0.0.0.0
exactly blacklisted ctv.truex.com is 0.0.0.0

Have you tried whitelisting any of the above blocked domains?

[Briare0s]

I figured out the problem: the VPN server I used was denylisted, so it was not a PiHole related issue. However, in app behaviour (roku in this case) was extremely similar to a pihole denylisted entry.

Thanks for thinking along crew!