refactor dns verification into three steps
first rev of the passive dns integration