Hall of Shame

The 20 lowest-scoring scans on record, worst first.

#URLScoreWhy
1http://reavercncv4.duckdns.org/dddd.sh-25Known Malware URL (URLhaus) (-15), Uses HTTP (-10), Domain Age (+1)
2http://testsafebrowsing.appspot.com/s/malware.html-24Known Phishing Domain (Google Intel) (-15), Uses HTTP (-10), DNS Security (DNSSEC/CAA) (+1)
3http://1.1.1.1/-22IP Address Only (-10), Uses HTTP (-10), HSTS Preload (-1)
4http://93.184.216.34/-21IP Address Only (-10), Uses HTTP (-10), HSTS Preload (-1)
5http://pitline.net/-19Hosting Provider (-10), Uses HTTP (-10), Cookie Security (+1)
6https://long-wildflower-b4f5.gustavosoftware.workers.dev/kgvlI-19Known Malware URL (URLhaus) (-15), Referer Variation (-5), Content Variation (-2)
7https://long-wildflower-b4f5.gustavosoftware.workers.dev/-19Known Malware URL (URLhaus) (-15), Referer Variation (-5), Content Variation (-2)
8https://swanbitcoinguideline.live/-16DNS Blocklist (-10), Domain Age (-6), HSTS Preload (-1)
9https://mukabar.co.mz/css/images/stego_oo8nser2q2.png-15Known Malware URL (URLhaus) (-15), HSTS Preload (-1), Uses HTTPS (+1)
10https://hotmail.co.uk/-15Referer Variation (-10), Content Variation (-5), Cookie Security (-2)
11https://export.kesug.com/img_212250.png-14Known Malware URL (URLhaus) (-15), DNS Security (DNSSEC/CAA) (+1), Domain Age (+1)
12https://res.cloudinary.com/oytyusbd/image/upload/v1786325859/img_213650.jpg-13Known Malware URL (URLhaus) (-15), Domain Age (+1), Uses HTTPS (+1)
13https://linkprotect.cudasvc.com/url?a=https%3a%2f%2flogin.jackhenry.com%2fpassword-reset%2f9ef03163-3b8c-4aef-ab66-28f32a324b9a&c=E,1,PBLzW4-9biFuhO3EzGzYFHN-SvKSBwXrnaVnphAaeunZrWtVY0FEQ0fL0Viq_O8yys1dmLBIzxZJUkfTVQ2a5X9nuYQnGscUkjMhVWflcBJMGWPpEQ,,&typo=1-13Referer Variation (-10), Content Variation (-5), DNS Security (DNSSEC/CAA) (+1)
14http://reddit.com/-12Uses HTTP (-10), Content Variation (-5), DNS Security (DNSSEC/CAA) (+1)
15https://www.google.com/-11Redirect Chain Variation (-5), Referer Variation (-5), Content Variation (-2)
16https://www.googol.com/-11Brand Impersonation (-12), Domain Age (+1), HSTS Preload (-1)
17https://clearlake-capital.sx.cn/-11HTTPS Connection Failed (-10), HSTS Preload (-1)
18https://www.pain.co.uk/-10HTTPS Connection Failed (-10), Domain Age (+1), HSTS Preload (-1)
19https://foo6.com/-10HTTPS Connection Failed (-10), Domain Age (+1), HSTS Preload (-1)
20https://1.4.5.5/fii-10IP Address Only (-10), HSTS Preload (-1), Uses HTTPS (+1)

Top Five