1 · Ask a seller
How the Buyer decides
- Resolve the seller's
_ans-badgeDNS record (only the domain owner can publish it). - Fetch its entry from the GoDaddy ANS transparency log, and refuse any other log.
- Check status is ACTIVE, host and agent ID match, not expired, and the endpoint is the registered one.
- Only then send the request. Any failure means refuse.
2 · Attack battery
Ten attacks against the Buyer's verification: fake domains, swapped endpoints, revoked and expired agents, tampered log data. Every one must be BLOCKED.