It doesn’t seem to detect subdomains set up with Kubernetes ingresses, based on results for one of my domains, so that might be a place to start research.
In my case I use Google Cloud DNS. Maybe they have some sort of protection in place (I wouldn't be surprised).