Add verified domains with a few initial examples

[rogeriochaves]

this adds hardcoded verified domains for domains we can trust, or cannot. This list will grow after the work from #10