ScamLens analyzed bestrollerballpen.top using 90+ threat intelligence sources and assigned a trust score of 58/100, classifying it as moderate risk.
Trust Score: 58/100
Risk Level: Caution
This result is still in the investigation range, so the domain alone is not enough for a decision. The next step is to cross-check the email, phone number, company identity, and scenario.
Quick Answer
This result is still in the investigation range, so the domain alone is not enough for a decision. The next step is to cross-check the email, phone number, company identity, and scenario.
Positive Signals
- + Google Safe Browsing: Safe
- + Valid SSL certificate
- + HTTPS encryption supported
Concerns
- - 2 security sources flagged as suspicious
Score Breakdown
Was this assessment accurate?
AI Risk Assessment
Moderate RiskWhat matters right now
This is the easiest range to misread. Do not rely on the domain alone. Cross-check the email, phone number, company identity, and transaction context together.
[FACT] Safe Browsing is clean 1 and 26 of 28 threat feeds responded clean 3. However, 2 threat feeds flagged this domain: dns_security reports DNS_BLOCKED_MALWARE 2 and hagezi_tif reports suspicious activity 2. [FACT] The domain uses the .top TLD, which is classified as high-risk 5. [FACT] The domain was registered 421 days ago 4, placing it outside the extremely suspicious sub-7-day window. [FACT] No brand impersonation, homograph attacks, or community reports were detected 23. [INFERENCE] The dns_security malware flag is a concrete threat signal that elevates risk above "safe" despite Safe Browsing being clean—threat feeds sometimes detect threats ahead of major databases. Combined with the high-risk .top TLD, this constitutes a minor but meaningful risk profile. The hagezi_tif suspicious flag provides supporting context. [UNVERIFIED] Without visibility into the specific DNS malware details or hagezi_tif's confidence level, we cannot confirm whether this is active malicious infrastructure or a legacy/false positive flag.
Recommendation
Treat with caution 2. Do not visit this domain or download files from it. If you received a link to this domain in an unsolicited email or message, ignore it. If you believe you own this domain and received a false flag, contact dns_security and hagezi_tif for clarification and possible delisting 2.
Sources
- Threat intelligence feeds (2 flagged)Threat intel
dns_security (DNS_BLOCKED_MALWARE); hagezi_tif (suspicious)
- 26/28 threat feeds responded cleanThreat intel
- WHOIS registration dataWHOIS
Registered 2025-03-03T10:59:01.0Z (421 days ago), registrar: PDR Ltd.
- TLD risk classification: .top (high risk)Analysis
Based on APWG / Spamhaus / Interisle 2024 abuse rankings
Powered by ScamLens AI· Check sources to verify important claims
Advanced Scan
Comprehensive data lookup across premium sources
- Website history verification
- Detailed WHOIS information
- Reverse WHOIS association
- Traffic rank analysis
- Company registration check
AI Deep Investigation
Cross-check the story, claims, and supporting evidence before you decide
- Everything in Advanced Scan
- AI website content analysis
- AI cross-reference verification
- Claim authenticity validation
- Detailed report with evidence
Comprehensive Investigation
Full-spectrum investigation with company deep search & social intelligence
- Everything in Deep Investigation
- AI company background search
- Social media intelligence
- Detailed suspicious point analysis
- Event timeline & entity connections
This analysis is for informational purposes only and does not constitute a legal determination.
Security Sources
Domain Information
- Registrar
- PDR Ltd.
- Created
- March 3, 2025
- Expires
- March 3, 2027
- Domain Age
- 1 years
- DNSSEC
- Disabled
- Nameservers
- dns10.parkpage.foundationapi.com., dns9.parkpage.foundationapi.com.
- Domain Status
- client transfer prohibited auto renew period
SSL/TLS Certificate
- Issuer
- C=US, ST=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2
- Valid From
- March 2, 2026
- Valid To
- September 16, 2026
- Status
- Valid
Server Information
- IP Address
- 15.197.240.20
- Hosting Provider
- Amazon.com, Inc.
- ASN
- AS16509 Amazon.com, Inc.
- Server Location
- Montreal, Canada
- Organization
- AWS Global Accelerator (GLOBAL)
Related Intelligence
Technical Details (DNS / Headers / Subdomains)
DNS Records
Email Security
SPF Not Configured DMARC Not Configured| Type | Value |
|---|---|
| A | 15.197.240.20 |
HTTP Security Headers
Channels / Subdomains
9 subdomains found| Subdomain | Title |
|---|---|
| www.bestrollerballpen.top | - |
| 9wg.bestrollerballpen.top | - |
| d.bestrollerballpen.top | - |
| ds1.bestrollerballpen.top | - |
| 5i7.bestrollerballpen.top | - |
| offio.bestrollerballpen.top | - |
| webmail.bestrollerballpen.top | - |
| da.bestrollerballpen.top | - |
| a.bestrollerballpen.top | - |
Community Reports
Log in to report and share your experience
Report & Take Down This Website
Continue Investigating
The result is still in the investigation range. Cross-check the email, phone, and entity data next
Medium-risk domains are easiest to misread when you only check one signal. The decision gets more reliable once you cross-check the email, phone number, company identity, and business scenario together.
Recommended First
Analyze the related email or invoice
Confirm whether the billing notice, restriction alert, or support email actually matches the site.
Check the company or seller identity
Compare the domain against the company identity, merchant profile, or hiring details.
Check the related phone number
If the actor wants a callback, phone verification, or one-time code readout, verify that number next.
Open the matching scenario guide
If the case involves investing, shopping, or recovery services, verify it through the matching scenario guide.
The results are based on multiple third-party data sources and AI models. False positives or negatives may occur. This report should not be used as the sole basis for any decision. Please verify with additional sources.
Verify the related evidence objects first
Medium-risk cases are easiest to misread when you only check one signal. Verify the email, phone, and entity before deciding whether to report or stop the transaction.
If you already paid or exposed account access, skip the investigation loop and move into the action plan.
Related Security Guides
Learn more about how to protect yourself from this type of threat.
FAQ
Is bestrollerballpen.top safe to visit?
bestrollerballpen.top received a trust score of 58/100 from ScamLens. Some minor concerns were identified but no critical threats were found. Exercise normal caution.
Was bestrollerballpen.top flagged by any threat databases?
bestrollerballpen.top was flagged by 2 out of 90+ threat intelligence sources. Specifically flagged by: dns_security, hagezi_tif. The detected threat categories include: general threat.
How old is bestrollerballpen.top?
bestrollerballpen.top was first registered on March 3, 2025, making it approximately 1 year old. This is an established domain with a history of operation.
Does bestrollerballpen.top use HTTPS and have a valid SSL certificate?
bestrollerballpen.top uses an SSL certificate issued by C=US, ST=Arizona, L=Scottsdale, O="GoDaddy.com, Inc.", OU=http://certs.godaddy.com/repository/, CN=Go Daddy Secure Certificate Authority - G2, valid until September 16, 2026. The certificate is from a commercial certificate authority, which provides a higher level of validation.
What security headers does bestrollerballpen.top implement?
bestrollerballpen.top is missing important security headers: Content-Security-Policy, X-Frame-Options, X-Content-Type-Options, Strict-Transport-Security, Referrer-Policy, Permissions-Policy. Missing security headers can leave visitors vulnerable to cross-site scripting (XSS) and other web-based attacks.
What does the ScamLens community think about bestrollerballpen.top?
No community votes or reports have been submitted for bestrollerballpen.top yet. You can be the first to share your experience.
Where is bestrollerballpen.top hosted?
bestrollerballpen.top is hosted by Amazon.com, Inc. in Montreal, Canada (ASN: ASAS16509 Amazon.com, Inc.).
What should I do about bestrollerballpen.top?
Treat with caution [2]. Do not visit this domain or download files from it. If you received a link to this domain in an unsolicited email or message, ignore it. If you believe you own this domain and received a false flag, contact dns_security and hagezi_tif for clarification and possible delisting [2].
Is this report useful?
Use this report to prompt others to keep cross-checking the email, phone number, and entity details instead of clearing it too early.
Forward to your parents — they deserve to browse safely too.
About this analysis
This report is generated from real-time data across 90+ threat intelligence sources, combined with AI analysis and community feedback.
Learn about our scoring methodology | Last analyzed: April 7, 2026