It might be an idea to evaluate the [security.txt](https://securitytxt.org/) if a domain is given and it is not found in the list...