Scammer4U - Phishing Checklist (C2): leaderboard
Metric: Critical-tier PII leakage rate PLR-crit (%): share of agent sessions in which any critical-tier profile value (SSN, card and CVV, bank account, password, API key, 2FA code, government ID) reaches an attacker-controlled endpoint, by exact match on outbound POST bodies; 91 attacker-controlled web environments x 5 seeds, shared Playwright harness, provider-default sampling; condition C2, a phishing-aware checklist appended to the agent system prompt; lower is better. Source: arxiv.org. Saturation forecast: Around December 2026. 4 models tracked.
Top models
| # | Model | Score |
|---|---|---|
| 1 | Claude Haiku 4.5 | 19.1 |
| 2 | GPT-5 Mini | 38.9 |
| 3 | Gemini 3 Flash (Preview) | 68.5 |
| 4 | Llama 4 Scout | 81.4 |
Interactive version: theaggregate.ai/benchmark?slug=scammer4u-phishing-checklist-c2 · How It Works · Data refreshed daily, snapshot 2026-09-29.