I used example.com in the past, though at some point I was looking whether there's any commitment from them never to default to HTTPS or use HSTS. Haven't found any.

So I found it better to use some domain dedicated exactly for this (and I hope even if the person running neverssl.com chooses to stop doing so someone will probably take over).