DNS Medic Chrome extension security report

**Your DNS blocker is silently breaking websites. DNS Medic shows you exactly what — and why it matters.** If you use NextDNS, Pi-hole, or Control D, you already know the tradeoff: great privacy, but occasionally something stops working. A login breaks. A payment form won't load. Search autocomplete disappears. You reload three times and give up. DNS Medic watches every network request in real time, catches the DNS blocks, and tells you the functional impact of each one — so you can make a smart call: ignore it, or allowlist it in one click. --- ### What it does - Monitors every tab in real time for DNS-level blocks - Detects ERR_NAME_NOT_RESOLVED, ERR_CERT_AUTHORITY_INVALID, and more - Classifies 492 known services across 13 categories by functional impact - Shows **impact badges** — not just "blocked," but what actually breaks - Shows **blocklist attribution** — which list flagged the domain (HaGeZi, AdGuard, uBlock, etc.) - Live badge on the extension icon — red dot means high-risk blocks are active now - Filter by **High / Medium / Low** risk with one click - **One-click allowlist** for NextDNS, Pi-hole (v5 + v6), and Control D - DNS flush command shown automatically after every allowlist action - **Light and dark mode** — follows your system preference or set manually --- ### Risk levels 🔴 **High — May break this site** Auth providers (Auth0, Okta, Clerk), feature flags (Statsig, LaunchDarkly, PostHog), payment processors (Stripe, Braintree, Adyen), search APIs (Algolia, Bloomreach), CAPTCHA (reCAPTCHA, hCaptcha, Turnstile), and core CDNs. When these are blocked, things fail visibly — or silently. 🟡 **Medium — Worth reviewing** Support chat (Intercom, Zendesk, Drift), video players (YouTube Embed, Vimeo), maps (Google Maps, Mapbox), image CDNs (Cloudinary, Imgix), error monitoring (Sentry, Datadog, New Relic), and e-commerce widgets. May affect functionality depending on the site. 🟢 **Low — Safe to ignore** Analytics (Google Analytics, Mixpanel, Amplitude) and ad pixels (Meta, LinkedIn, TikTok). Blocking these is usually intentional and rarely breaks anything. Unknown domains default to Medium. --- ### Impact badges Every blocked domain shows what breaks if you leave it blocked: - 🔴 **login / forms** — auth, CAPTCHA, payments - 🟣 **feature flags** — silent behavior changes - 🩵 **search** — autocomplete and results - 🔵 **media / maps / assets** — video, maps, images - 🟢 **chat** — support widgets - ⚫ **monitoring** — error reporting --- ### Blocklist attribution See exactly which blocklist rule flagged each domain: - **NextDNS** — pulled from the NextDNS logs API, showing the exact list name - **Pi-hole** — searches your gravity database, with pretty names for 30+ popular lists: HaGeZi, Steven Black, OISD, AdGuard DNS filter, EasyList, EasyPrivacy, Disconnect.me, Energized, URLhaus, and more - **Control D** — shows the active filter profile that triggered the block --- ### One-click allowlist **NextDNS** — Connect with your API key. DNS Medic auto-detects which profile belongs to this device and labels it "This device." One click adds the domain. **Pi-hole** — Connect with your Pi-hole URL and API token. Supports v5 and v6. One click allowlists the domain instantly. **Control D** — Connect with your Control D credentials. One click adds the domain to your custom rules. After every allowlist action, a banner appears with the exact DNS flush command for your OS — with its own copy button. --- ### 492-domain database Ships with a curated database of 492 known services across 13 categories. Automatically updated from GitHub and cached locally for 7 days. Force-refresh anytime from Settings. --- ### Light & Dark mode Full light mode support added in v3.2.0. Follows your system preference by default, or set it manually in Settings. --- ### Privacy - No data is ever sent to any third party - All monitoring is session-only — cleared on navigation - Only hostnames are stored, never full URLs or page content - Your API keys stay in local Chrome storage only - Remote DB fetch contacts GitHub only — no user data sent Full privacy policy: https://raw.githubusercontent.com/jstoneky/nextdns-medic/main/store/PRIVACY.md --- ### Perfect for - NextDNS, Pi-hole, and Control D users who want to know what's being blocked - Developers debugging sites behind DNS filters - Anyone who's had a site break mysteriously and suspected their DNS setup - Anyone who wants to allowlist responsibly — understanding the impact before unblocking ---