RFC2142 - I like it when organisations use standardised email addresses such as support@ and security@ for different business units.

Unfortunately many orgs either don't have these mailboxes set up, or they aren't actively monitored.