Depends on the one validating and creating the NIP05 validation. Could be through your own domain, through PM (manually) like nostr-check.com or validation through twitter account. Different providers use different methods.