An nprofile holds only a public key plus relay hints, nothing about who runs it. Decode it to get the key, and treat those relay hints as untrusted metadata rather than proof of anything.