I'd try to contact Assetnote. Most (sadly not all) managed vuln scan companies are pretty sensitive to scanning stuff that doesn't belong to their client and could expose them to liabilities because they don't have permission.

▲

robinpie 3 hours ago | parent [-]

Yeah, I'll try to do this, but I can't find anything better than the generic contact form.

▲

kjs3 3 hours ago | parent [-]

Try search on LinkedIn. Often turns up folks who work there who you can reach out to.

	▲	kjs3 3 hours ago \| parent [-]
		Oh, and be sure to include "you're scanning a pool address so you're probably scanning a lot of other sites that don't belong to your customer". They should know it's potentially not one little web site.