I would have expected at least Virustotal to flag them if that were the case. It does more than just looking up in a database of known malicious URLs and I thin

I would have expected at least Virustotal to flag them if that were the case. It does more than just looking up in a database of known malicious URLs and I think the reputation of the domains is the key factor here. https://www.virustotal.com/gui/url/6dd23e90ee436e1ff066725aa7ebcd5cfa238966b2b1712e856dffedbee0429f/details https://www.virustotal.com/gui/url/6dd23e90ee436e1ff066725aa... > BitDefender - government > Sophos - government > Forcepoint ThreatSeeker - government - https://docs.virustotal.com/docs/how-it-works https://docs.virustotal.com/docs/how-it-works