i’ve just contrived a test, using a simple script to send all 3rd party requests (potential SPOF candidates) to a server i set up that simply returns a 204.
Check your access logs but if I had to guess I would say that your server wasn’t expecting requests for content for the various domains (you probably need to set up a default vhost that has a rewrite rule that rewrites everything to a script that returns the 204).