Frontend Loads but No Data Displayed in ICP Apps - Possible Regional Issue?

[ICPsimp]

I’m experiencing an issue with ICP apps where the frontend loads, but no data is displayed. For instance, I can log into the NNS, but my tokens and neurons don’t fully load. This also happens with ICPSwap and other ICP apps. Interestingly, regular websites outside of ICP work fine.

I’ve noticed that using a VPN to connect to the US resolves the issue, and another user in Australia reported a similar problem. It seems like this might be a regional issue?

Does anyone know why this might be happening or have any insights on how to resolve it without a VPN?

Thanks!

[peterparker]

I’m not sure at all, but your first screenshot appears to come from the NNS dapp, which queries the SNS aggregator on the client side through a call to icp0.io. So I’m wondering if you might not be running into this issue

[In Progress] raw.icp0.o and icp0.io listed in Spamhaus DBL

Dear ICP Developers, We want to inform you about an ongoing issue affecting our primary domains for hosting user canisters, icp0.io and raw.icp0.io, which has been listed in the Spamhaus Domain Blocklist (DBL). While we are actively working to resolve this, there may be temporary side effects: Social media posts featuring links to icp0.io / raw.icp0.io may be flagged as spam or restricted. Some corporate or personal internet filters may block connections to icp0.io or display warnings. We ha…

Maybe you can test something: can you open the following URL? (It’s the JSON response containing the SNS data used in the NNS dapp.) Does it work for you, or do you get the same error?

https://3r4gx-wqaaa-aaaaq-aaaia-cai.icp0.io/v1/sns/list/page/1/slow.json

[ICPsimp]

So when connected to a VPN in the US, it opens and loads everything, but without a VPN it does not load at all.

[peterparker]

If you try to access e.g. https://juno.build or https://internetcomputer.org do you encounter the same issue, or does it work regardless of whether you’re using a VPN?

[peterparker]

Looks like the Spamhaus incident has just been resolved. Do you still encounter the issue?

[ICPsimp]

So the issue seems to be back. But this time only for certain ICP sites. Right not ICPswap, kongswap, openchat all seem to not be loading everything.

[peterparker]

@ICPsimp

So the issue seems to be back.

What do you mean by “is back”? Was the issue resolved when the Spamhaus problem was fixed, or is it something unrelated?

Anyway, unfortunately, I’m afraid I can’t help. These kinds of issues are a bit outside my area of expertise.

[ICPsimp]

So, yeah. The issue seemed to have gone away after trying to load some ICP sites after you sent the link to the resolved issue. But now the same issue is occurring. I can only load an ICP site fully without any issue when connected to a VPN. Even a VPN within the same country.

Some ICP sites don’t load at all, like this one (https://moi6e-qaaaa-aaaag-atsna-cai.icp0.io) but most load incompletely or with errors.

Do you know who I could reach out to about this? Or the best way to report this issue?

[peterparker]

Since no one else has reported the issue and the Spamhaus problem has been resolved, it seems the problem might be related to your machine or network. You could try creating a support ticket. Other than that, I’m not sure who else could help.

https://support.dfinity.org/hc/en-us/articles/6519576340116-How-to-Submit-a-Support-Ticket

[peterparker]

In addition, I’ve also now forwarded the thread to the team for visibility.

[rbirkner]

Hey @ICPsimp

Even though the issue with Spamhaus is resolved, it could still affect you as ISPs and routers are quick in picking up new domains that are considered problematic, but slow in removing them.

Two things would help investigate the issue further:

1. When you load a site (e.g., Kongswap), open the network pane in the developer tools and select some of the failing requests: what is the URL of the requested resource and what is the x-request-id header.
2. Often, DNS lookups are blocked. Can you please run the following commands in your terminal and report back what you get as output?

   $ dig internetcomputer.org
   $ dig oa7fk-maaaa-aaaam-abgka-cai.ic0.app
   $ dig oa7fk-maaaa-aaaam-abgka-cai.icp0.io
   $ dig @8.8.8.8 oa7fk-maaaa-aaaam-abgka-cai.icp0.io
   

I hope we can get to the bottom of this together!

[ICPsimp]

Hello, so this is no longer an issue, but I was using Quad9 DNS that I forgot about. I turned it off on my phone as was able to connect to ICP sites without issue and I am now able to load ICP sites on my computer again while using Quad9 DNS. Thanks for the reply though. I will be sure to reach out again, if this issues comes back and switching DNS’s does work.

[Infinity-and-beyond]

I was having all the same issues:
I just stopped using Quad9 DNS and all the issues resolved
Quad9 DNS was working perfectly for over a year
IDK what changed
IDK if there is a way to tell Quad9 to not block icp

Thanks ICPsimp !!!

[ZackDS]

@rbirkner

oa7fk-maaaa-aaaam-abgka-cai.icp0.io

Actually one can manually check for blocked domains (not sure if there is a list somewhere)

[Infinity-and-beyond]

ahh ok
thank you.
Can you/DIFINITY also request to unblock it?

Cuz i’ve been using quad9 for years for privacy. it would be nice to get it working again.

[ZackDS]

Was about to suggest since Quad9 being from Zürich, Switzerland someone from the foundation could officially reach out, if they find the time.

[Infinity-and-beyond]

oh wow, didn’t know that
even better

[rbirkner]

Thanks a lot for the report.

I was not aware of the possibility to check the status of different domains for quad9. Thanks @ZackDS!

I have passed the information on to the relevant team internally and will keep you updated.

[slawomir.babicz]

Hi,
thanks for raising awareness on this!

The icp0.io is currently listed on the Bambenek MDML Phishing Feed, a threat intelligence list maintained by Bambenek Consulting. This feed is integrated into services like Quad9 DNS and may also be used by other security tools and firewalls, potentially resulting in access issues.

We’ve taken the following steps:

• Requested removal of icp0.io from the Bambenek list
• Contacted Quad9 to review their filtering (though the source remains Bambenek, so any removal might be ineffective)

While the MDML feed’s exact update frequency isn’t publicly stated, I believe it is refreshed roughly every 30 minutes (like other feeds).

We’ll provide an update once the domain has been delisted.

In the meantime, affected users are advised to temporarily avoid using Quad9 DNS.

Best regards,
Infrastructure Security Team
DFINITY

[ICPsimp]

Looks like it’s in the process.

“DFINITY filed a false positive with the source threat list directly earlier today. Once it’s removed from the source threat list, it’ll automatically be removed from the Quad9 blocklist. Probably later today or tomorrow.” -Quad9