DNS Audit.

The whole zone read out loud: records, delegation, DNSSEC, and the names that leak.

Reads only what public DNS already publishes. Nothing is changed. A deep audit takes a few seconds.