ONDUU / FREE TOOL
Is your domain actually wired up correctly?
Enter your domain. This reads the public DNS and registry records that decide whether your website and email work reliably — nameservers, delegation, addresses and DNSSEC — and explains what they mean for the business, in plain English.
Reads public DNS and registry records only. No signup, nothing private.
01 / WHAT THIS READS
Public records, compared against each other.
Everything checked here is already public — DNS answers anyone can query, and the registry record anyone can read over RDAP. What makes the check useful is the comparison: the nameservers the registry has on file against the ones actually answering, the bare domain against its www, the DNSSEC fingerprint against the keys in the zone. The domain checked and the result are kept so Onduu can see which checks are run and which failures are common; nothing about you is recorded with them.
- Nameservers — how many answer, and whether one provider carries everything
- Delegation — registry record and live answers, compared
- SOA — the zone’s own housekeeping record, present and sensible
- Addresses — the bare domain and www both reaching a server
- Mail routing — whether MX records exist (depth lives in the email check)
- DNSSEC — adopted, absent, or broken mid-move
02 / WHY IT MATTERS
DNS failures do not look like DNS failures.
They look like a website that works in the office but not for a customer, email that vanishes after a hosting move, or a domain that quietly stops resolving abroad. The causes — a stale delegation, a single overloaded nameserver, DNSSEC left behind in a migration — are visible in public records long before they cost an enquiry. That is what this check reads.
Related checks: can a stranger send email as your business? and the instant readiness scan for the wider picture.
YOUR NEXT STEP
DNS is one layer. Readiness covers the rest.
Identify the priorities, understand the responsibility and continue through the right route.
Check Your Digital Readiness