validate that domains and soas match