Leave my domain alone.

The domain and all its subdomains are refused by the Instant Public Fitness Scan, before any network request is made. Every stored record of it is deleted: scan results, and any stored email-security or domain-search lookup. And future lookups of it are not recorded.

The free lookups themselves keep working, because they read only the public DNS and registry records any WHOIS tool can read. What you are opting out of is Onduu keeping a record.

Without a check, anyone could block a competitor’s domain. The one check is an email to an address at the domain itself — you@yourbusiness.co.ke for yourbusiness.co.ke — because receiving mail there is something only the domain’s operator can do. A link in that email confirms the request; it works once and expires in 48 hours. Nothing changes until it is pressed.

The address is kept with the request as the record of who asked. It is not used for anything else, and it is not added to any list. The privacy notice describes the handling in full.

Opting out removes the record; it does not correct it. If a scan reported something about your domain that you believe is wrong, use the contact form and it will be re-examined.