A private RPC (Helius, Triton, QuickNode…) is strongly recommended: the public endpoint rate-limits holder lookups.