@Grutjes nevermind I take it back, BlueSky themselves did verify this, and ICE did not use the DNS approach to verify themselves as ice.gov.