DataHouse Tools

Tool

DNS audit and domain security

DataHouse technical hub for DNS audits, DNSSEC, SSL/TLS, mixed content, WHOIS/RDAP and protective DNS with SecDNS.pl.

Hub

A DNS and domain security audit should connect delegation, SOA, DNSSEC, RDAP, SSL/TLS, mixed content and protective DNS. A domain problem often looks like a website, mail or certificate failure.

DNS delegation audit Check NS, SOA, DS, DNSKEY and RRSIG records. DNSSEC glossary Review DS, DNSKEY, RRSIG and chain of trust. SSL/TLS checker Verify certificate, trust chain and weak cryptography. Mixed content tester Find HTTP resources loaded by an HTTPS page. WHOIS / RDAP Check public registration data through RDAP. SecDNS.pl Protective DNS filtering from DataHouse.

DNS audit: from delegation to application

DNS errors can remain hidden until a browser, mail server or certificate process exposes them. A practical audit checks authoritative servers, DNSSEC, domain registration data and the application layer that depends on the domain.

What to check first

NS and SOA

Confirm which authoritative servers serve the zone, whether the SOA data is consistent and whether old providers still answer.

DNSSEC

Check DS at the parent, DNSKEY in the zone, RRSIG validity and chain of trust continuity.

HTTPS

Verify certificate names, trust chain, weak algorithms and protocols after DNS or hosting changes.

Protective DNS

SecDNS.pl adds filtering and monitoring for users, servers, RDP environments and business networks.

DNS audit sequence

  1. Start with delegation. Check NS, SOA, authoritative answers and consistency across nameservers.
  2. Verify DNSSEC. Validate DS, DNSKEY and signatures before and after registrar or DNS operator changes.
  3. Check HTTPS. Run certificate and mixed content checks for public services.
  4. Review mail DNS. If the domain handles mail, check MX, SPF, DKIM, DMARC, MTA-STS and TLS-RPT.
  5. Add monitoring. Repeat the checks after migrations and keep alerts for critical DNS and certificate changes.

Common domain security use cases

  • Registrar, DNS operator or hosting migration.
  • DNSSEC deployment or key rotation.
  • Website migration from HTTP to HTTPS or to a new cloud server.
  • Mail migration with MX, SPF, DKIM and DMARC changes.
  • Protection of users and servers with SecDNS.pl filtering.
DNS delegation SSL checker Mixed content WHOIS / RDAP Mail tester SecDNS.pl

FAQ: DNS and domain security

How should I use this DataHouse page?

Use it as a technical checklist and connect it with the relevant diagnostic tools before or after a production change.