Comment by 0points

1 day ago

That's what I'm thinking too. That would suggest some very large operational botnets ... :-/

Or they query the DNS very often. Most devices have DNS caching, so if things like tiktok.com end up there, there must be a loot of devices (also, a lot of subdomains, which aren't visible in these lists).