Are they the sole arbitrator if they simply use a DNS record?
That's the same tech used to verify their official website.