For context, we wrote an initial blog post about the TikTok ban on Sunday, January 19, 2025. The ban was part of the "Protecting Americans from Foreign Adversary Controlled Applications Act," proposed in Congress, which ordered ByteDance to divest due to alleged security concerns. The bill was signed into law by Congress and President Biden in April 2024, and was upheld by the Supreme Court on January 17, 2025.

Aggregated data from our 1.1.1.1 DNS resolver shows — as we’ve posted on social media — that the TikTok shutdown in the US began to impact DNS traffic to TikTok-related domains on January 19, just after 03:30 UTC (22:30 ET on January 18). This includes DNS traffic not only for TikTok, but also for other ByteDance-owned platforms, such as the CapCut video editor. Here’s the timeline focused on DNS traffic for TikTok related domains (with the respective line chart), as we’ve observed it:

• January 19, just after 03:30 UTC (22:30 ET on January 18): DNS traffic to TikTok-related domains dropped by as much as 85% compared to the previous week, and showed signs of further decline in the following hours.

• January 19, 17:30 UTC (12:30 ET): After a 14-hour shutdown, TikTok announced it was starting service restoration following assurances from Donald Trump. DNS traffic began to recover slightly after 18:00 UTC but stayed near "shutdown" levels for several hours. Traffic from AS396986 (ByteDance) showed a similar trend.

• January 20, 06:00 UTC (01:00 ET): A short-lived spike in DNS traffic for TikTok-related domains occurred, with traffic still 25% below the previous week.

• January 20, 14:00–15:00 UTC (09:00–10:00 ET): DNS traffic picked up, moving from 27% to 18% below pre-shutdown levels.

• January 20, 17:00 UTC (12:00 ET): During Donald Trump’s inauguration ceremony, DNS traffic increased to 12% below pre-shutdown levels, with a trend of continued growth, reaching 10% below previous levels at 18:00 UTC (13:00 ET).

• January 21, 05:00 UTC (00:00 ET): DNS traffic was 7% below pre-shutdown levels.

On January 19, around 17:30 UTC (12:30 ET), TikTok released a statement: “In agreement with our service providers, TikTok is in the process of restoring service. We thank President Trump for providing the necessary clarity and assurance to our service providers that they will face no penalties.” A message indicating the TikTok ban was over appeared for US users (image on the left). However, a few hours later, some users reported difficulties accessing the app (image on the right).

Analyzing data from autonomous system-level data, traffic from TikTok owner ByteDance’s network (AS396986) in the US to Cloudflare experienced a sharp decline, dropping by as much as 95% after 03:30 UTC on January 19 (22:30 ET on January 18).

Our data shows that traffic within ByteDance’s network (AS396986) never fully recovered, remaining around 80% below pre-shutdown levels. This suggests that ByteDance may have used other solutions after the shutdown.

As mentioned previously, DNS traffic in the US for TikTok alternatives, driven by RedNote (Xiaohongshu or Little Red Book), has been steadily increasing since January 13. It surged on January 19 by up to 74% around 04:00 UTC (23:00 ET on January 18) compared to the previous week, with lower growth seen later that day in the US (around 52% at 17:00 UTC (12:00 ET)). Traffic subsequently declined, and was only 17% higher than the previous week after TikTok announced it was beginning to restore its services in the US around 22:00 UTC (17:00 ET), and it lost even more growth momentum after that.

Daily DNS traffic in the US for TikTok alternatives has been rising since January 13, reaching 116% higher than the previous week on January 15. On Sunday, January 19, the day of the TikTok ban, it peaked with a 291% increase compared to the previous week.

DNS traffic for TikTok alternatives, driven by RedNote, has also been increasing in other countries, with a noticeable rise in daily DNS traffic to these platforms. Below is the breakdown of the most impacted countries, with a few updates from our most recent blog post. We highlight the peak day of DNS traffic and the percentage growth compared to the previous week.

• Mexico (+1200% on January 19)

• Brazil (+185% on January 20)

• France (+165% on January 19)

• Germany (+142% on January 19)

• Canada (+119% on January 19)

• Spain (+106% on January 19)

• Portugal (+97% on January 19)

• The UK (+86% on January 19)

• Australia (+19% on January 15)

• Japan (+18% on January 18)

(Note: In many cases, DNS traffic had been growing for more than a week, so countries with recent growth may show higher percentages.)

Those trends are consistent with apps like RedNote rising on top of the Android and iOS App Stores, according to Data.ai.

The rapid increases in DNS traffic can be clearly seen in the graphs below:

If you’re interested in more trends and insights about the Internet, check out Cloudflare Radar. Follow us on social media at @CloudflareRadar (X), noc.social/@cloudflareradar (Mastodon), and radar.cloudflare.com (Bluesky).

Aggregated data from our 1.1.1.1 DNS resolver shows — as we’ve posted on X — that the TikTok shutdown in the US began to impact DNS traffic to TikTok-related domains on January 19, just after 03:30 UTC (22:30 ET on January 18). This includes DNS traffic not only for TikTok, but also for other ByteDance-owned platforms, such as the CapCut video editor. Traffic dropped by as much as 85% compared to the previous week and showed signs of further decline in the following hours.

Around that time, a message indicating the TikTok ban began appearing for US users.

Analyzing data from autonomous systems or networks, traffic from TikTok owner ByteDance’s network (AS396986) in the US to Cloudflare experienced a sharp decline, dropping by as much as 95% after 03:30 UTC (22:30 ET).

DNS traffic in the US for TikTok alternatives, driven by RedNote (Xiaohongshu or Little Red Book), has been steadily growing since January 13. It surged on January 19 by as much as 74% around 04:00 UTC (23:00 ET on January 18) compared to the previous week, with growth being less intensive during nighttime in the US (around 22%).

Daily DNS traffic in the US for TikTok alternatives has increased since January 13, reaching as much as 116% growth on January 15. Sunday, January 19, is on track to surpass that growth.

DNS traffic for TikTok alternatives, driven by RedNote, has been growing in the last few days, and not only in the US. 

The other countries where we observed a clear increase in daily DNS traffic to TikTok alternatives were Mexico (a 500% increase on January 18), Canada (68% on January 18), the UK (53% on January 18), Germany (110% on January 18), and France (75% on January 18). These increases are shown in the graphs below:

Those trends are consistent with apps like RedNote rising on top of the Android and iOS App Stores, according to Data.ai.

President-elect Donald Trump indicated on January 18 that he plans to grant TikTok a 90-day extension following his inauguration on Monday, January 20, 2025.

We will continue monitoring the TikTok ban and share updates through a new blog post or on @CloudflareRadar (X), noc.social/@cloudflareradar (Mastodon), and radar.cloudflare.com (Bluesky).

—— UPDATE, January 20, 2025, 17:00 UTC:

On Sunday, January 19, 2025, around 17:30 UTC (12:30 ET), after 14 hours of the shutdown, TikTok announced it was beginning service restoration following assurances from Donald Trump. DNS traffic began to recover slightly after 18:00 but remained near "shutdown" levels for several hours, with traffic from AS396986 (ByteDance) showing a similar trend.

As of Monday, January 20, 2025, TikTok-related domains in the U.S. remain below pre-shutdown levels. Despite some fluctuations overnight, DNS traffic to those domains has been recovering and at 17:00 UTC (11:00 AM ET) is already only 14% lower than the same time last week.