DNS Scanner — GuardDex

Also auto-block experimental 🎯 Trackers 📢 Ads 📡 Telemetry Manage list →

Enter the root domain (dnscry.pt) — not a wildcard. The scanner matches by suffix, so the root covers every subdomain automatically.

⚠️ These block on the AI classifier's label alone — no threat-intel confirmation — so they can false-positive on legitimate sites. Watch the review queue for a while after turning one on. Confirmed threats always auto-block regardless.

	Domain	What & Why	Frequency	Sources	Threat Intel	Status	Actions
🔍 Loading…

🔧 Maintenance & Retention ▶ show

⏰ Auto-Purge Schedule

Runs automatically every 24 hours. Dismissed items older than 7 days and scan history older than 30 days are removed silently. Pending and blocked items are always preserved.

Loading…

🗑 Queue Purge — Remove Reviewed Items

Statuses to purge:

Dismissed Allowed

Items older than:

⚠ Blocked items are never purged. Pending items require the nuclear clear below.

☢ Nuclear Clear — Reset Entire Queue

Deletes ALL selected statuses immediately — no age filter. Blocked items are always preserved.
Note: the hourly scanner will re-add dismissed/pending items from your DNS logs on the next run.

Include:

Pending Dismissed Allowed

🧹 Clear DNS-Blocked Entries from Queue

Removes all entries marked Blocked by DNS from GuardDex's review queue only.
Your DNS server blocklists (NextDNS, PiHole, Technitium) are NOT affected. Use this when you've manually cleared your DNS server blocklists and want GuardDex to re-discover and re-classify those domains from scratch on the next scan.

🔄 DNS Cache & Log Flush

Force DNS servers to drop cached responses so blocked domains take effect immediately. NextDNS has no cache-flush API — clear it in the NextDNS dashboard.

Targets:

Pi-hole cache Pi-hole logs Technitium cache

📋 Scan History Purge

History older than: