{"as_of":"2026-08-09T17:53:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:b4fbe098b1b7c914d802ac8fcf3f5d3a992245b01d335763bf3b3f7c23052fd2","coverage":[{"denominator":164,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":100,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-06T15:38:30.410101Z","state":"measured"},{"denominator":101,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":101,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-09T06:31:02.800959+00:00","state":"measured"},{"denominator":1,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":1,"source":"paper_references, paper_reference_links","source_observed_at":"2026-05-13T01:48:46.380615Z","state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"arxiv_reference","source_observed_at":"2026-05-13T01:52:05.365468Z","state":"measured"}],"external_citation_measurements":[],"inbound":[{"citation":{"cited_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"cited_work":{"arxiv_id":"2507.15393","doi":null,"metadata_source":"arxiv_reference","pith_arxiv_id":"2507.15393","snapshot_observed_at":"2026-06-05T21:23:00.469572Z","title":null,"venue":null,"work_id":"8a7ce522-ef19-4dfb-beb8-d36dec0ad58c","year":2025},"citing_paper":{"arxiv_id":"2605.11268","last_updated":"2026-05-11T21:46:52Z","snapshot_observed_at":"2026-07-06T23:23:06.755816Z","submitted_at":"2026-05-11T21:46:52Z","title":"Context-Aware Spear Phishing: Generative AI-Enabled Attacks Against Individuals via Public Social Media Data","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-05-13T01:48:46.380615Z"},"links":{"cited_paper":"/paper/2507.15393","citing_paper":"/paper/2605.11268"},"observation_digest":"sha256:317210717f75cdbcc9472d6b35a785b9f2ca39fb8ab28a36f4b729025bf69931","observation_id":"fb8ea039-b1ca-430c-ae4d-3da332e42f93","resolution":{"observed_at":"2026-05-13T01:52:05.368130Z","resolver_source":"arxiv_id","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"links":{"evidence":"/evidence","html":"/paper/2507.15393/citation-record","integrity":"/paper/2507.15393/integrity","json":"/paper/2507.15393/citation-record.json","paper":"/paper/2507.15393"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:19.447019Z","title":"Ransomware, extortion and the cyber crime ecosystem,","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:19.447019Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:85a872fc285c1c9be30dbcdab615cfb2e7fe9ce709cf23c86e1c0fdd6bba1ce5","observation_id":"2df6c974-4b89-44be-bb7a-61771cc04b82","resolution":{"observed_at":"2026-08-06T15:38:19.447019Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:19.524717Z","title":"Phishing activity trends report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:19.524717Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:2ceed34224fc912dbc9cb7d1c03d7aae209a7ff0f83db25d52299850e3e62c61","observation_id":"67292eda-f240-4139-945a-8cf90700337d","resolution":{"observed_at":"2026-08-06T15:38:19.524717Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:19.644429Z","title":"2023 data breach investigations report dbir","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:19.644429Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:742ddb91b663243e3a5ddaf3d9f8326292510f70f638677d07b6077c2b418a5d","observation_id":"5d9b8c3d-a30f-468b-a37a-a25b875cb80e","resolution":{"observed_at":"2026-08-06T15:38:19.644429Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:19.757328Z","title":"Proofpoint’s 2023 state of the phish report","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:19.757328Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:9efa6edea25e0647a79eac083b9f2082f6e2e5d86ecb79e9dd9e04402793d518","observation_id":"4861ada2-3551-4931-9a6e-1af613012e91","resolution":{"observed_at":"2026-08-06T15:38:19.757328Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:19.919041Z","title":"Top phishing statistics for 2024: Latest figures and trends","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:19.919041Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:ada630a04c18121a93332d2f24c61fb50a72fe603e558cbedfcbb1ae90230c58","observation_id":"5e3514f0-053f-4b1b-a7ce-57b026c61602","resolution":{"observed_at":"2026-08-06T15:38:19.919041Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.001810Z","title":null,"venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.001810Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:8389015ec31b516296debc9a5cf5733d1e568a5963f6e0f56aaaef04bb37acf9","observation_id":"11f592c4-1302-4752-a7c9-6df9e701a9ec","resolution":{"observed_at":"2026-08-06T15:38:20.001810Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.051538Z","title":null,"venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.051538Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:999b49e6fd8b5ee5c3cc80136ef7eb45aca78409ce3b60525ec12b113666debd","observation_id":"ab182e93-1561-469e-baa2-6b685674916e","resolution":{"observed_at":"2026-08-06T15:38:20.051538Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.085512Z","title":null,"venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.085512Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:6dd3066fbfbdb37f924811209dbefc9713c839cafaa5c08bcabef57576861c2b","observation_id":"71e6b25d-1a12-4289-b016-92675c50c4e5","resolution":{"observed_at":"2026-08-06T15:38:20.085512Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.190534Z","title":"Kucherawy, E","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.190534Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:1d2f31b47afd81a91438ff710089b20eb6391e30410eca7608dee9c525860ce8","observation_id":"17dedf92-25fb-44bb-9433-3aded1f126a9","resolution":{"observed_at":"2026-08-06T15:38:20.190534Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.265348Z","title":null,"venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.265348Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:72170db03cb9eb7f03bdadc17909667898bcdf0b843b467408acc89ed4676eb3","observation_id":"8763ddad-114d-4b6a-b946-fa7b016c0e08","resolution":{"observed_at":"2026-08-06T15:38:20.265348Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.353734Z","title":"[Online]","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.353734Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:10ac1217e01b152482e594c6b869c12b602f3e1f7ae868c8aa0326963aebb5f8","observation_id":"e81ed4c6-4d44-4c6e-b5f3-0b41ddce907b","resolution":{"observed_at":"2026-08-06T15:38:20.353734Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.455618Z","title":"(2024) Trend micro cybersecurity solutions","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.455618Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:76adc9a3eb2e0dcc8f79345a5cff7a0591a508ca54a4b358ff61a2f8018580ad","observation_id":"24f0e5b5-5ace-46dc-9f84-5237ada81460","resolution":{"observed_at":"2026-08-06T15:38:20.455618Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.602893Z","title":"Detecting and characterizing lateral phishing at scale,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.602893Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:529a99ce37043acd0f64e4d1d4000dfc223d445d3801040bd7883938d68f035b","observation_id":"19a4773b-6c1a-4ec9-a7dc-fd08dbfc718f","resolution":{"observed_at":"2026-08-06T15:38:20.602893Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.676386Z","title":"High precision detection of business email compromise,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.676386Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:eedcf153caec26c9b0ac217db1ad6ba9a1335c137c51bb3cd34d1160a1145db7","observation_id":"201fbb05-e7f2-47da-92de-257c07db63d2","resolution":{"observed_at":"2026-08-06T15:38:20.676386Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:20.839788Z","title":"Detecting credential spearphishing in enterprise settings,","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:20.839788Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:8f6fe29894363afd536960b0278f68021f05eff7a17aa7245002eb8e23939dd5","observation_id":"fc826e0f-0c21-4007-b17b-9c49a61808a9","resolution":{"observed_at":"2026-08-06T15:38:20.839788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.040700Z","title":"Catching classical and hijack-based phishing attacks,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.040700Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:34df25d893b9d2d15f4ee7bd48a1b0b2d64fdff7f63d245be385d614cb65c86c","observation_id":"a1d2e928-67c0-4481-b335-afb7887c9403","resolution":{"observed_at":"2026-08-06T15:38:21.040700Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1410.6629","last_updated":"2014-10-24T09:45:03Z","snapshot_observed_at":"2026-08-09T16:11:33.715031Z","submitted_at":"2014-10-24T09:45:03Z","title":"That Ain't You: Detecting Spearphishing Emails Before They Are Sent","version":1},"cited_work":{"arxiv_id":"1410.6629","doi":null,"metadata_source":"pith","pith_arxiv_id":"1410.6629","snapshot_observed_at":"2026-08-06T15:38:39.058019Z","title":"That Ain't You: Detecting Spearphishing Emails Before They Are Sent","venue":"cs.CR","work_id":"5633c6f3-0d79-42db-9099-9703e57d70e3","year":2014},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.073786Z"},"links":{"cited_paper":"/paper/1410.6629","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0837cf9210bb628aa07e43b86efde39f3507fb09243ff4d050187f27f19e4f08","observation_id":"7dc04c12-1f53-4a2c-850b-ab7065643aa1","resolution":{"observed_at":"2026-08-06T15:38:39.153976Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.188721Z","title":"Emailprofiler: Spearphishing filtering with header and stylometric features of emails,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.188721Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:d6168b90b43af4380c5e18bcc6aae8eb84a2b21eb771f412471fa2a457e55c37","observation_id":"630a3b19-67f4-4144-a858-e39cf765f98b","resolution":{"observed_at":"2026-08-06T15:38:21.188721Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.285014Z","title":"Reading between the lines: content-agnostic detection of spear-phishing emails,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.285014Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:b4d3105d59f8ec00cc1c8a9fc3594e5d7604a810527706b8b54da9211864c332","observation_id":"3b6e809b-0cd5-4076-82dc-8ffa188158b5","resolution":{"observed_at":"2026-08-06T15:38:21.285014Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.417403Z","title":"Mitigation of spear phishing attacks: A content-based authorship identification framework,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.417403Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:1d2acba2601bd4d0160a633d4caa04005d4a53218a6f4112e51c835e81443130","observation_id":"a31bd61b-78b4-4318-84fb-1c2bc439563e","resolution":{"observed_at":"2026-08-06T15:38:21.417403Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.470981Z","title":"Detecting phishing emails using hybrid features,","venue":null,"work_id":null,"year":2009},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.470981Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:41a4a10805ac2106162e58eae96fe89e60eced099bd23ef08a653fc6461de905","observation_id":"c841cf1f-6d75-4b3b-940a-3f17eff04fd5","resolution":{"observed_at":"2026-08-06T15:38:21.470981Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.515936Z","title":"Hybrid feature selection for phish- ing email detection,","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.515936Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:9e299fb8ea1a49936c70b60b1e7c89f740656e395caa9bd1dcce0ddfd23cc0b3","observation_id":"19ebcc4e-20a4-4536-8693-7b987cff4c26","resolution":{"observed_at":"2026-08-06T15:38:21.515936Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.621964Z","title":"Enhancing phishing e-mail classifiers: A lexical url analysis approach,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.621964Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:7b67095f6d8842e40c8824a9c30f4d48ce47b599517822d8bc9fc12907a5122f","observation_id":"561ac2f3-b069-44a5-9509-f2a2edf8023a","resolution":{"observed_at":"2026-08-06T15:38:21.621964Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.769083Z","title":"Comparison of machine learning techniques for spam detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.769083Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:3d6eeeeff702be409e06269a7c35c5a39d3beb529c0bdaa0c0709a8ffb589f3f","observation_id":"8907b0c2-2fcb-4cd1-9f43-c799f3ef2f88","resolution":{"observed_at":"2026-08-06T15:38:21.769083Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:21.914757Z","title":"D-fence: A flexible, efficient, and comprehensive phishing email detection system,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:21.914757Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:44dcb34cd18ba671ee88040c03673d56fe0d7fd113019975d98e4e3c605f9d47","observation_id":"5f19c778-9ef5-4a51-83b3-29af114d27c5","resolution":{"observed_at":"2026-08-06T15:38:21.914757Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.052039Z","title":"Helphed: Hybrid ensemble learn- ing phishing email detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.052039Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:2365361a35f98360ff567a6c023c4ba8fa0be6a6b1aa2f80f17ccc56ebf9089f","observation_id":"3ff3be2f-39f9-42b8-9edf-c234c853108c","resolution":{"observed_at":"2026-08-06T15:38:22.052039Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.126603Z","title":"A machine learning approach towards phishing email detection,","venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.126603Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:b5bf8a4a203f7a5e6a8adc63b2fc38fd32c12a642d8a4a15709ff972c6f21de2","observation_id":"3cbb8dad-42d1-441d-9e7d-343e3bdbde70","resolution":{"observed_at":"2026-08-06T15:38:22.126603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.207634Z","title":"A multi-classifier based prediction model for phishing emails detection using topic modelling, named entity recognition and image processing,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.207634Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:fdf8f221642893395fc9aa2d71eeedfac93e12740fcfbeb097f60a557b3abbe6","observation_id":"34f54371-288a-4372-9ad3-65cf7145478d","resolution":{"observed_at":"2026-08-06T15:38:22.207634Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2010.03484","last_updated":"2020-10-07T15:40:36Z","snapshot_observed_at":"2026-07-06T10:02:21.717009Z","submitted_at":"2020-10-07T15:40:36Z","title":"CATBERT: Context-Aware Tiny BERT for Detecting Social Engineering Emails","version":1},"cited_work":{"arxiv_id":"2010.03484","doi":null,"metadata_source":"pith","pith_arxiv_id":"2010.03484","snapshot_observed_at":"2026-08-06T15:38:38.871561Z","title":"CATBERT: Context-Aware Tiny BERT for Detecting Social Engineering Emails","venue":"cs.CR","work_id":"d0c9576c-f21f-479b-88d4-1885458e5248","year":2020},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.301154Z"},"links":{"cited_paper":"/paper/2010.03484","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:1bbba7c69dcc021083833e6c069448fd9cf7b31bde89faf8fd7d31cd54cdd8e1","observation_id":"df208250-2ef6-4788-a1c0-8e5ddb4c4e3f","resolution":{"observed_at":"2026-08-06T15:38:38.957630Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2308.10776","last_updated":"2023-08-21T15:06:02Z","snapshot_observed_at":"2026-07-06T16:08:33.160103Z","submitted_at":"2023-08-21T15:06:02Z","title":"A Modular and Adaptive System for Business Email Compromise Detection","version":1},"cited_work":{"arxiv_id":"2308.10776","doi":null,"metadata_source":"pith","pith_arxiv_id":"2308.10776","snapshot_observed_at":"2026-08-06T15:38:38.733887Z","title":"A Modular and Adaptive System for Business Email Compromise Detection","venue":"cs.CR","work_id":"6007a208-7261-4698-8637-45a3db07df19","year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.390779Z"},"links":{"cited_paper":"/paper/2308.10776","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:1f2fc206aa3b782792ae188efdc58a09bf17c5bf848e380eaa5ff1772e8ea173","observation_id":"84f980ad-e0cf-4efa-8fab-f1905df8c15d","resolution":{"observed_at":"2026-08-06T15:38:38.789049Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.480118Z","title":"Catching the phish: Detecting phishing attacks using recurrent neural networks (rnns),","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.480118Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:65da2bc4558e7098ce742c61f5d5549dbf432a95449bac83b1568b557870678e","observation_id":"e48fcd83-7f7e-4564-bca5-745f8de513b0","resolution":{"observed_at":"2026-08-06T15:38:22.480118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2402.18093","last_updated":"2024-08-23T05:03:44Z","snapshot_observed_at":"2026-08-09T13:26:27.574277Z","submitted_at":"2024-02-28T06:28:15Z","title":"ChatSpamDetector: Leveraging Large Language Models for Effective Phishing Email Detection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2402.18093","snapshot_observed_at":"2026-08-06T15:38:22.584922Z","title":"Chatspamdetec- tor: Leveraging large language models for effective phishing email detection,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.584922Z"},"links":{"cited_paper":"/paper/2402.18093","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:13ecd1882705cbc5c5a7b63b60db04bf1035b2159a47dae9b6e240c5f495c100","observation_id":"fc344906-a770-42de-8b3a-794d2ca084e0","resolution":{"observed_at":"2026-08-06T15:38:22.584922Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.673814Z","title":"(2024) Coremail professional mail system","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.673814Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:750b43caed9ce998a6421332fb2b4b17f3b36fbf501e24bcfe0142477c02479e","observation_id":"6d5d16ec-c16b-40be-8006-42176afa6c36","resolution":{"observed_at":"2026-08-06T15:38:22.673814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.728522Z","title":"Anonymous website for pimref: Homepage,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.728522Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:cbafa15fee50a87d74a0b4467107465b584129e97a472bc41d2ba7ffa4d7caa3","observation_id":"e1f7e48f-0199-4612-bbc2-ea87f9b478d2","resolution":{"observed_at":"2026-08-06T15:38:22.728522Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.851353Z","title":"Detecting and characterizing sms spearphishing attacks,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.851353Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:f25100ea7a668703d5fbbfe7a3fb050f07d323acd685b80d425d16f267d65fd6","observation_id":"f29586b7-d8be-4a7e-a37b-f2d6407392c0","resolution":{"observed_at":"2026-08-06T15:38:22.851353Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:22.938659Z","title":"Characterizing the security of the sms ecosystem with public gateways,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:22.938659Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:877671b32cf21159bb862a0710ad0889dd5cddc9578f3be159e9bd0a63a3fd88","observation_id":"17dda46e-cd30-4ffd-9acd-1218e6489851","resolution":{"observed_at":"2026-08-06T15:38:22.938659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2210.10451","last_updated":"2022-10-19T10:33:10Z","snapshot_observed_at":"2026-07-06T14:07:38.886996Z","submitted_at":"2022-10-19T10:33:10Z","title":"An Empirical Analysis of SMS Scam Detection Systems","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2210.10451","snapshot_observed_at":"2026-08-06T15:38:23.087040Z","title":"An empirical analysis of sms scam detection systems,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.087040Z"},"links":{"cited_paper":"/paper/2210.10451","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:9a42e09f2596522baf1179cc01345afe07a4976509b1366d481aa87d08930c8b","observation_id":"f742e402-ed3b-4de7-a741-7917b663376d","resolution":{"observed_at":"2026-08-06T15:38:23.087040Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:23.201602Z","title":"On sms phishing tactics and infrastructure,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.201602Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:7b8e0499f4b6568ffd5a0409c2b63fb3e9cb48fa7fbcef39fe406795f2cdcac6","observation_id":"d93b571b-095f-49e3-8b85-6f9d02f35ce1","resolution":{"observed_at":"2026-08-06T15:38:23.201602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:23.320992Z","title":"Phishing attacks on modern android,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.320992Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:e1aa15aeafed6404ef13d111d8bb8556f8ac056453efb7339d2d638d2fe12c78","observation_id":"950c51b9-b5a4-4ba4-af54-82901d1ab75b","resolution":{"observed_at":"2026-08-06T15:38:23.320992Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:23.466431Z","title":"See no evil: phishing for permissions with false transparency,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.466431Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:981af545ede26993b456de0f91d2b47481dd0ebe69b2521c139b9cc18ef53c1f","observation_id":"ded3eaaa-c773-45a2-b2be-7cc1e912edee","resolution":{"observed_at":"2026-08-06T15:38:23.466431Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:23.629454Z","title":"Sok: Everyone hates robocalls: A survey of techniques against telephone spam,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.629454Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:bdd86db5ea9f336d0053d019681454b115896fb589b0ae7fe3b6481cef7176ad","observation_id":"ec46f653-76b0-462b-b9d3-15a76549ed86","resolution":{"observed_at":"2026-08-06T15:38:23.629454Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:23.743225Z","title":"Phoneypot: Data-driven understanding of telephony threats","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.743225Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:c2e33c6a634990d297f4648e974d2374ffc1efc8ce14a20e0825f25b9f477847","observation_id":"3c04ba97-abf7-4988-b62a-f372e2b45af5","resolution":{"observed_at":"2026-08-06T15:38:23.743225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:23.885423Z","title":"Applying deep learning to combat mass robocalls,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.885423Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:d627af7df9434e89774421669ad31dfb4daec045c5b6d0b6f0643261375f1058","observation_id":"7e05880b-457b-4a1b-a1e2-3e5afe08b503","resolution":{"observed_at":"2026-08-06T15:38:23.885423Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.17361","last_updated":"2024-10-22T18:54:12Z","snapshot_observed_at":"2026-07-06T19:38:04.948333Z","submitted_at":"2024-10-22T18:54:12Z","title":"Characterizing Robocalls with Multiple Vantage Points","version":1},"cited_work":{"arxiv_id":"2410.17361","doi":null,"metadata_source":"pith","pith_arxiv_id":"2410.17361","snapshot_observed_at":"2026-08-06T15:38:38.511987Z","title":"Characterizing Robocalls with Multiple Vantage Points","venue":"cs.CR","work_id":"06102032-5a2e-4532-a0cc-76e506361883","year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:23.962842Z"},"links":{"cited_paper":"/paper/2410.17361","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:d0a07f621485f236a624cdc9cd20cadc594b1439e31ecc30666c6cbd6c11cec0","observation_id":"51822fa0-2a7c-4b2f-b230-9ca2be0b5903","resolution":{"observed_at":"2026-08-06T15:38:38.630701Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:24.101697Z","title":"J ¨ager: Automated telephone call traceback,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:24.101697Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:c25e483771161b14a9397ef2b7881fc95b6951fd8b40914efce4c8392d5b13fa","observation_id":"b28dd2e2-d1db-4ae5-aa32-f568f65b904f","resolution":{"observed_at":"2026-08-06T15:38:24.101697Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:24.232814Z","title":"Needle in a haystack: Tracking down elite phishing domains in the wild,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:24.232814Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:d6044447e2d80787145bc6cad9eaea56780aa73790775ea913f4c25ab9159c21","observation_id":"47f415d4-909b-4c82-84ff-0b08a7a7720c","resolution":{"observed_at":"2026-08-06T15:38:24.232814Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:24.315956Z","title":"Visualphishnet: Zero-day phishing website detection by visual similarity,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:24.315956Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:3d084d04b52b319e23d29b1a7d483f90ab67192f5eb72f47170312e46b86b356","observation_id":"7084f20a-b809-4536-a894-d8e94edaf5d7","resolution":{"observed_at":"2026-08-06T15:38:24.315956Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:24.469309Z","title":"Phishpedia: A hybrid deep learning based approach to visually identify phishing webpages,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:24.469309Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0855dfc21312eb6466b4690f7d3ca91fb01fe18903eaf3df561d3e92df3490d1","observation_id":"3b095e61-1348-41ad-a9c5-3b3cc5ebf550","resolution":{"observed_at":"2026-08-06T15:38:24.469309Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:24.639219Z","title":"Inferring phishing intention via webpage appearance and dynamics: A deep vision based approach,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:24.639219Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0baa483e71e63bdc3679f136b645170be36ddf8114a9ee5ed20928316712ca43","observation_id":"564b4d5a-9d91-4148-8223-6772fdc4cf20","resolution":{"observed_at":"2026-08-06T15:38:24.639219Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:24.825060Z","title":"Knowledge expan- sion and counterfactual interaction for {Reference-Based} phishing detection,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:24.825060Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:530deb3f193852a24e3e960d25539c5fd119117d45eaa14ad0cd22f1211f8142","observation_id":"b506a6a0-2df2-43fb-bbf3-a0966da82812","resolution":{"observed_at":"2026-08-06T15:38:24.825060Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:24.950602Z","title":"Less defined knowledge and more true alarms: Reference-based phishing detection without a pre-defined reference list,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:24.950602Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:df8a68c73580da830387309f33ad41250260a7ff960713643d677971f346aa37","observation_id":"20433cf9-c6d4-42e8-901f-e727003f327d","resolution":{"observed_at":"2026-08-06T15:38:24.950602Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.027963Z","title":"Phishinpatterns: measuring elicited user interactions at scale on phishing websites,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.027963Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:4b4b65184c0fa5487ce04bbf8467ff901ed0a6125f70b848cb4393b3d5ba3657","observation_id":"04e1aeee-d0d1-45bc-9681-4e9a3e8bb439","resolution":{"observed_at":"2026-08-06T15:38:25.027963Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.134771Z","title":"{PhishTime}: Continuous longitudinal measurement of the effectiveness of anti-phishing blacklists,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.134771Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0046b4fb4fc8afcfb48a7b4c40112d3e84a2818f1549a8cbf2a39c4d69c6fddd","observation_id":"2e8f3a91-3416-452c-b21d-f46fda0dd8cf","resolution":{"observed_at":"2026-08-06T15:38:25.134771Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.222492Z","title":"{PhishPrint}: evading phishing detection crawlers by prior profiling,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.222492Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:fe3e2539ea4d11e9e4e20eb932db555ed09fdf0023557a756060afddceb38c1c","observation_id":"25d7f0ea-5bf7-4103-82bf-eb512e55d496","resolution":{"observed_at":"2026-08-06T15:38:25.222492Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.334685Z","title":"Phishfarm: A scalable framework for measuring the effectiveness of evasion techniques against browser phishing blacklists,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.334685Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:3d34d526318318c4b4743ae52a43e195e5390d0f2e4a1427e5bf401c82ab07ac","observation_id":"fe44618e-824a-4041-95e4-19a89777d6b0","resolution":{"observed_at":"2026-08-06T15:38:25.334685Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.448488Z","title":"I’m spartacus, no, i’m spartacus: Proactively protecting users from phishing by intentionally triggering cloaking behavior,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.448488Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:b2cb31c6516ae376c6b8714f5d645d41a21eccbd9576f59ece10556ba520f3e8","observation_id":"701f21ba-10f0-474f-be94-98a2cf93ef47","resolution":{"observed_at":"2026-08-06T15:38:25.448488Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.589143Z","title":"Crawlphish: Large-scale analysis of client-side cloaking techniques in phishing,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.589143Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:59b6de3dcda2379270e3976d41b085a2eed654a12e0f0659d11dac08cc0d859d","observation_id":"862ea881-030d-426e-80b6-7e404f2c0646","resolution":{"observed_at":"2026-08-06T15:38:25.589143Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.677498Z","title":"Cloak of visibility: Detecting when machines browse a different web,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.677498Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:2d677b04fff5ca99b962ac252b6bfb8006dd74702f4c0059ab87299703f66eb8","observation_id":"d0476ee1-9a78-404b-b032-714b59211838","resolution":{"observed_at":"2026-08-06T15:38:25.677498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.765361Z","title":"Phish in sheep’s clothing: Exploring the authentication pitfalls of browser fingerprinting,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.765361Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:3e7bbe32ce9d727a4762ac9a30eb80e484b02b42f6748404529189aefa59e9a8","observation_id":"fe2b2640-b6d6-4ac8-b4ce-2cbce1ca1934","resolution":{"observed_at":"2026-08-06T15:38:25.765361Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:25.880710Z","title":"Rods with laser beams: understanding browser finger- printing on phishing pages,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:25.880710Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:517a97358e9a8abdaebe9dbb447d28719d1e9833ed54f88b0e4babe3dbf1fe86","observation_id":"a9a06c47-8ef1-4374-b786-38d1854bafd9","resolution":{"observed_at":"2026-08-06T15:38:25.880710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.029145Z","title":"Phisheye: Live monitoring of sandboxed phishing kits,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.029145Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:6965217cf38c3e411018e4c73a358a519032aeebdd86625d962c480917b84da0","observation_id":"5eb0c6ae-7073-49ac-a011-ab9e8b6b59f7","resolution":{"observed_at":"2026-08-06T15:38:26.029145Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.134095Z","title":"There is no free phish: An analysis of","venue":null,"work_id":null,"year":2008},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.134095Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:8e1b0d43b90c896ea23c20e2c7a161b2ed447dffe70fcd626e5e0a0fdcdceff4","observation_id":"3b1fcf16-6746-4340-8fe5-6fdc11ccbc76","resolution":{"observed_at":"2026-08-06T15:38:26.134095Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.238311Z","title":"Catching phishers by their bait: Investigating the dutch phishing landscape through phishing kit detection,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.238311Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:104cd34dbbfb69f9ea5ed13aa730b2b89954bfececdbdb3544f504742816e437","observation_id":"91498f91-3f9e-4689-85fd-98a4a804dae0","resolution":{"observed_at":"2026-08-06T15:38:26.238311Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.384065Z","title":"Spacephish: The evasion- space of adversarial attacks against phishing website detectors using machine learning,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.384065Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:fb1a2d7472d9aa3c16bf1ef0388ac8226390607f64f25490c813ff9b96f150ac","observation_id":"da9b8cd6-df7a-4000-8b07-14a5871b1b5e","resolution":{"observed_at":"2026-08-06T15:38:26.384065Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.533500Z","title":"Know your phish: Novel techniques for detecting phishing sites and their targets,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.533500Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:71fd1e92255e0bbfd6616780889a23ab3927a1191a022804964307cb665c6424","observation_id":"4ff44320-3ac5-4dcb-a46b-85a99df06c6d","resolution":{"observed_at":"2026-08-06T15:38:26.533500Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.640491Z","title":"Inside a phisher’s mind: Understanding the anti-phishing ecosys- tem through phishing kit analysis,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.640491Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:c50024d632fe33e2b95a9a5f5f82439860c27e8eede95fc7892baf4b394b63a2","observation_id":"ea6251fb-af56-4aa1-b042-5cefc7578b09","resolution":{"observed_at":"2026-08-06T15:38:26.640491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.736986Z","title":"The phishing funnel model: a design artifact to predict user susceptibility to phishing websites,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":68,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.736986Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:204f4e03e12e747d870d088fee138e074565c3b3b3cb7900993fdfecabe36a1e","observation_id":"1303d09e-e2c4-4bcd-acbe-edf132842623","resolution":{"observed_at":"2026-08-06T15:38:26.736986Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.826841Z","title":"What happens after you leak your password: Understanding credential sharing on phishing sites,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":69,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.826841Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:733dc2d31e0d262b448c4be36dd602a591b2139ba07b5c8649d7a21bca46b17d","observation_id":"1168a8da-91cf-49cc-a183-3abefc58497e","resolution":{"observed_at":"2026-08-06T15:38:26.826841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.887857Z","title":"Beyond phish: Toward detecting fraudulent e-commerce websites at scale,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":70,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.887857Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:d48c72049ef3db7ea21e59943c500e0f7d64abe629a044e8301bc976d931a838","observation_id":"8da47e1f-3709-45d5-be3c-93af899f2e95","resolution":{"observed_at":"2026-08-06T15:38:26.887857Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:26.994115Z","title":"Scamnet: Toward ex- plainable large language model-based fraudulent shopping website detection,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":71,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:26.994115Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:da4dee45363a8dc207d3b019a9be6d6f540ecc979b5e6bbf51d5a151f6c9aff2","observation_id":"7f980b17-edad-48a7-8829-88d70fb1aa4a","resolution":{"observed_at":"2026-08-06T15:38:26.994115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:27.149788Z","title":"Conning the crypto conman: End- to-end analysis of cryptocurrency-based technical support scams,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":72,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.149788Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0d8300e564b33923b010509c9eabcde45af82cfd8655da9ea41d433d09267a1e","observation_id":"a76b033b-1908-48d7-9201-2d6dc1dcae9b","resolution":{"observed_at":"2026-08-06T15:38:27.149788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:27.254130Z","title":"Understanding, measuring, and detecting modern technical support scams,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":73,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.254130Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:8f97161c7b0b3ee534bd0fd425f4712d00a1e66ee3e7ed83e45d0b193b6d1644","observation_id":"7f1fdcb6-3582-4ec4-9120-429a17c512fb","resolution":{"observed_at":"2026-08-06T15:38:27.254130Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:27.328052Z","title":"Detecting organized ecommerce fraud using scalable categorical clustering,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":74,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.328052Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:3fa5bcc89017a39622d2c00ab91400f1710405c1c20bf697d7fc09c3feb81d17","observation_id":"e3e6334e-a955-4861-b3d2-9d5dedcab0b3","resolution":{"observed_at":"2026-08-06T15:38:27.328052Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:27.432477Z","title":"Automatically dismantling online dating fraud,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":75,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.432477Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:ba526f5b0baf06a6bc013378f6e3f72bec9de7a2b74c4e6a9994fb9a80545807","observation_id":"54ffd247-abb6-4fb7-8f76-6a0d18917d07","resolution":{"observed_at":"2026-08-06T15:38:27.432477Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:27.572784Z","title":"A multiview clustering frame- work for detecting deceptive reviews,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":76,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.572784Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:d3ac1ed14ea7a1f7f65a8939d84b0a0c72931e1326bc110eb5ea731a715b2d4a","observation_id":"99f657cf-4af7-4c64-804d-1471bde8330d","resolution":{"observed_at":"2026-08-06T15:38:27.572784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:27.670220Z","title":"Detecting deceptive reviews using generative adversarial networks,","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":77,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.670220Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0545beab391447393a5831610523b6b8308fe63f3e11cafc17ae071f410c17a9","observation_id":"958bd4dd-3d15-479f-a815-de9879bc3a73","resolution":{"observed_at":"2026-08-06T15:38:27.670220Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:27.809676Z","title":"The dark alleys of madison avenue: Understanding ma- licious advertisements,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":78,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.809676Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:5b57203dac3256ca34a76163f1d9627d5b13cc2c2eaa1929eb67dea9a44ad268","observation_id":"9f9187a3-8315-4fd4-ba53-b85995231d42","resolution":{"observed_at":"2026-08-06T15:38:27.809676Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15072","last_updated":"2024-12-19T17:22:35Z","snapshot_observed_at":"2026-07-06T20:10:19.704368Z","submitted_at":"2024-12-19T17:22:35Z","title":"ScamChatBot: An End-to-End Analysis of Fake Account Recovery on Social Media via Chatbots","version":1},"cited_work":{"arxiv_id":"2412.15072","doi":null,"metadata_source":"pith","pith_arxiv_id":"2412.15072","snapshot_observed_at":"2026-08-06T15:38:38.339155Z","title":"ScamChatBot: An End-to-End Analysis of Fake Account Recovery on Social Media via Chatbots","venue":"cs.CR","work_id":"00f3f37e-9524-40d1-85d3-894643f67fd5","year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":79,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.902828Z"},"links":{"cited_paper":"/paper/2412.15072","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:c67c8e2c2790300c94b00307cca83dd8f017a23f4b6f5f5e65550dfa72a2efd5","observation_id":"c99587dd-93eb-4625-b21a-67b7078f79a3","resolution":{"observed_at":"2026-08-06T15:38:38.437063Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":{"arxiv_id":"2412.15423","last_updated":"2024-12-19T22:15:50Z","snapshot_observed_at":"2026-07-06T20:10:32.826840Z","submitted_at":"2024-12-19T22:15:50Z","title":"An Explorative Study of Pig Butchering Scams","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2412.15423","snapshot_observed_at":"2026-08-06T15:38:27.996077Z","title":"An explorative study of pig butchering scams,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":80,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:27.996077Z"},"links":{"cited_paper":"/paper/2412.15423","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:3bcf00aa20892f9ba34da9af1b0cbacc438155e624add1ba83f3800885d994a6","observation_id":"bce24c0c-891f-4a9f-b874-e7dcd50876bd","resolution":{"observed_at":"2026-08-06T15:38:27.996077Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:28.252491Z","title":"Pirates of charity: Exploring donation-based abuses in social media platforms,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":81,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:28.252491Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:a42869b73a6e50fda765db565fd829c331c86cffb7bae9014a1c628043476b82","observation_id":"86c5f4d6-24cc-4c0c-93fd-83a5afedaba5","resolution":{"observed_at":"2026-08-06T15:38:28.252491Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1205.3856","last_updated":"2012-12-07T22:53:22Z","snapshot_observed_at":"2026-08-04T03:10:01.371982Z","submitted_at":"2012-05-17T05:50:30Z","title":"Social Turing Tests: Crowdsourcing Sybil Detection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1205.3856","snapshot_observed_at":"2026-08-06T15:38:28.407833Z","title":"Social turing tests: Crowdsourcing sybil detection,","venue":null,"work_id":null,"year":2012},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":82,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:28.407833Z"},"links":{"cited_paper":"/paper/1205.3856","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:033c915f06f29f334a41e9072602ec3af9a4fb70745e773fd2118d3ce31c6a26","observation_id":"98cc3edf-f347-4748-b06f-cd79c2ace22e","resolution":{"observed_at":"2026-08-06T15:38:28.407833Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:28.544978Z","title":"User awareness and defenses against sockpuppet friend invitations in facebook,","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":83,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:28.544978Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:9739e06cdc68aa14749bcb995c8bf3434f663ddfa12e5925dad437fbc12939b2","observation_id":"d65af04f-eb71-4f3c-b080-abfffc4238a0","resolution":{"observed_at":"2026-08-06T15:38:28.544978Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:28.641514Z","title":"Turning the tide: Curbing deceptive yelp behaviors,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":84,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:28.641514Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:fec83103dbc0148b61d3b066a852dd1521bddb51963b5851f1b2a5509a898111","observation_id":"bb946c83-44a2-41ea-87c6-1b19b3210eb4","resolution":{"observed_at":"2026-08-06T15:38:28.641514Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:28.758892Z","title":"“i have no idea what a social bot is","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":85,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:28.758892Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:ac0ddbdab9b9ff44fb509af7b06f017ec6095e438240563aa37b54d3a9791425","observation_id":"07c59073-aab1-44ed-9b40-faa08cd55e4f","resolution":{"observed_at":"2026-08-06T15:38:28.758892Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:28.841977Z","title":"Detecting fake accounts in online social networks at the time of registrations,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":86,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:28.841977Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:fadb036b43b62c265e22cca98e46e3791cc8274b0563daf08f9cb9ee49372f72","observation_id":"0ac93d4e-4a63-4610-9592-78d1279062a3","resolution":{"observed_at":"2026-08-06T15:38:28.841977Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2401.05569","last_updated":"2024-01-10T22:25:44Z","snapshot_observed_at":"2026-08-05T00:26:48.561661Z","submitted_at":"2024-01-10T22:25:44Z","title":"SENet: Visual Detection of Online Social Engineering Attack Campaigns","version":1},"cited_work":{"arxiv_id":"2401.05569","doi":null,"metadata_source":"pith","pith_arxiv_id":"2401.05569","snapshot_observed_at":"2026-08-06T15:38:38.183682Z","title":"SENet: Visual Detection of Online Social Engineering Attack Campaigns","venue":"cs.CR","work_id":"1d6c530e-347c-4547-8f0c-97a08dba5129","year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":87,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:28.954162Z"},"links":{"cited_paper":"/paper/2401.05569","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:b7c6d776066a439810589cbc934d0411940d2152b134da43373c5458103a0f06","observation_id":"93e5518f-b0cb-4ac6-abd6-7d60fc834e7b","resolution":{"observed_at":"2026-08-06T15:38:38.233965Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:29.086987Z","title":"Fairplay: Fraud and malware detection in google play,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":88,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.086987Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:52a9f7c4bc9c4ea2af6c1d71b7941eb0f1c88d935fac682284d29be35f480692","observation_id":"a25c8e36-0b65-47b8-b6af-e6055cccc48a","resolution":{"observed_at":"2026-08-06T15:38:29.086987Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1502.06824","last_updated":"2015-02-24T14:46:28Z","snapshot_observed_at":"2026-07-31T18:08:11.731905Z","submitted_at":"2015-02-24T14:46:28Z","title":"Personalized Security Indicators to Detect Application Phishing Attacks in Mobile Platforms","version":1},"cited_work":{"arxiv_id":"1502.06824","doi":null,"metadata_source":"pith","pith_arxiv_id":"1502.06824","snapshot_observed_at":"2026-08-06T15:38:38.018514Z","title":"Personalized Security Indicators to Detect Application Phishing Attacks in Mobile Platforms","venue":"cs.CR","work_id":"6563e8b9-2a6c-42c9-9d53-e8ce40bff614","year":2015},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":89,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.180266Z"},"links":{"cited_paper":"/paper/1502.06824","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:49494a9a79019b8ee8660a2ebafe7aa80513692a37c7edeaf9aa55ede23c2a29","observation_id":"31772176-5cf0-4350-8bb5-7eea9098e9b4","resolution":{"observed_at":"2026-08-06T15:38:38.072270Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:29.265127Z","title":"Android, notify me when it is time to go phishing,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":90,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.265127Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:850f9c4dc0c6328064f27542ca8d2ae7317e8aae326c6288eae6b332cb7de849","observation_id":"a87ff36d-34e3-480c-932b-56a16576e30c","resolution":{"observed_at":"2026-08-06T15:38:29.265127Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:29.376841Z","title":"Pulling off the mask: Forensic analysis of the deceptive creator wallets behind smart contract fraud,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":91,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.376841Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:3bb9a55ba0b1abecae689a277343c657ac975abaaf7e76385fb9e7c00aa6ae33","observation_id":"456f8b03-abdb-4159-9abe-99080706a8ae","resolution":{"observed_at":"2026-08-06T15:38:29.376841Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:29.575635Z","title":"Towards usable protec- tion against honeypots,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":92,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.575635Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:1d7ee5ddc253314e9a8025f0fe375a531fd179e83b742213c208dd03be754659","observation_id":"82a10170-0e33-4273-860f-eb0d104975bb","resolution":{"observed_at":"2026-08-06T15:38:29.575635Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:29.653735Z","title":"Ægis: Smart shielding of smart contracts,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":93,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.653735Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:5265894315247aeee913cecd71e18c290eef098142fa4680476f7dc0d695de36","observation_id":"1b73eced-996a-4413-9a1a-4af57b1d05ff","resolution":{"observed_at":"2026-08-06T15:38:29.653735Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:29.787510Z","title":"Siege: Self-supervised incremental deep graph learning for ethereum phishing scam detec- tion,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":94,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.787510Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:4c20d992672bcbb24ae2c39d5506853215edea543ba2174b97775596c52744eb","observation_id":"6c768f4c-fb2d-407f-bc21-c23f003d1fa2","resolution":{"observed_at":"2026-08-06T15:38:29.787510Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:29.887675Z","title":"An end to end analysis of crypto scams on ethereum,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":95,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:29.887675Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:4fbd817c01042a1da475bb1c63542d1d0d863072700b09cb76cc8a0cae4d9027","observation_id":"9b6760dd-8c25-419f-ab83-b4f2ae0b066b","resolution":{"observed_at":"2026-08-06T15:38:29.887675Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2502.20234","last_updated":"2025-02-27T16:20:21Z","snapshot_observed_at":"2026-08-07T17:42:25.669729Z","submitted_at":"2025-02-27T16:20:21Z","title":"URL Inspection Tasks: Helping Users Detect Phishing Links in Emails","version":1},"cited_work":{"arxiv_id":"2502.20234","doi":null,"metadata_source":"pith","pith_arxiv_id":"2502.20234","snapshot_observed_at":"2026-08-06T15:38:37.901044Z","title":"URL Inspection Tasks: Helping Users Detect Phishing Links in Emails","venue":"cs.CR","work_id":"05367659-af5e-4e92-8f4a-e8a1d08591ea","year":2025},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":96,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:30.015453Z"},"links":{"cited_paper":"/paper/2502.20234","citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:19bde408d07e539a76015595ad97469d0504ed845b395aae3c33209bff0de460","observation_id":"8c2a1b00-3dac-48a8-a13a-0075aba62f25","resolution":{"observed_at":"2026-08-06T15:38:37.930577Z","resolver_source":"local_arxiv","status":"verified_exact"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:30.088807Z","title":"Content, nudges and incentives: A study on the effectiveness and perception of embedded phishing training,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":97,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:30.088807Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:7b2f8ab42ac4f8b3db4834cb703d48a6d55743f63ccfad7202da869d11dbd2af","observation_id":"4eadc9f8-ac16-424b-80b5-d668422e45f4","resolution":{"observed_at":"2026-08-06T15:38:30.088807Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:48.606804Z","title":"Al- pha phi-shing fraternity: Phishing assessment in a higher educa- tion institution,","venue":null,"work_id":"f76a822f-a08c-45d7-8601-10464f22e355","year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":98,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:30.174578Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:2e636ed383e89b64afe2e4489b8fd2f0652fc281aa394e8b9b5e77071a685918","observation_id":"ae50b195-53c6-4e21-b0b7-09936d7e8fc9","resolution":{"observed_at":"2026-08-06T15:38:48.663200Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:48.463628Z","title":"Phishing in organizations: Findings from a large-scale and long-term study,","venue":null,"work_id":"ac7ddb75-b948-45f6-8965-78e806e63a31","year":2022},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":99,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:30.250243Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:de50b44f7fd198ed557d595a12ea0bc4cc46df29339bb3587635d53fc9fd9f69","observation_id":"0b2c5d6a-9312-471a-954c-cd4a9f0b3f3c","resolution":{"observed_at":"2026-08-06T15:38:48.531131Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:48.341290Z","title":"You’ve got report: Measurement and security implications of{DMARC} reporting,","venue":null,"work_id":"a937974c-cb82-4e1a-b72c-b48149068b02","year":2023},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":100,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:30.330001Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0a05b7c5f6467f0a143a217f3f319d9ec6f3e309831955c34dfb21354a2b301a","observation_id":"e5f064ac-a819-48bb-a719-6d8f8f00b861","resolution":{"observed_at":"2026-08-06T15:38:48.415502Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":"raw_reference","pith_arxiv_id":null,"snapshot_observed_at":"2026-08-06T15:38:48.182375Z","title":"Weak links in authentication chains: A large- scale analysis of email sender spoofing attacks,","venue":null,"work_id":"88524a65-284e-4d14-a40f-7c1ce502d335","year":2021},"citing_paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants","version":1},"reference_index":101,"source":"pdf_text","source_observed_at":"2026-08-06T15:38:30.410101Z"},"links":{"citing_paper":"/paper/2507.15393"},"observation_digest":"sha256:0b6878f621bf85255b896205efaa527890844b9359bea92ca2be5441994f7116","observation_id":"1888ea15-90be-414b-9819-73b727259487","resolution":{"observed_at":"2026-08-06T15:38:48.275351Z","resolver_source":"raw_fallback","status":"verified_fuzzy"},"standing_notice":{"events":[],"observation":"No event found in the named queried sources as of 2026-08-09T06:31:02.800959+00:00.","reason":null,"source_receipts":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"state":"measured"}}],"paper":{"arxiv_id":"2507.15393","last_updated":"2025-07-21T08:53:41Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-09T06:11:03.830968Z","submitted_at":"2025-07-21T08:53:41Z","title":"PiMRef: Detecting and Explaining Ever-evolving Spear Phishing Emails with Knowledge Base Invariants"},"reference_resolution":{"displayed":100,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":88,"verified_exact":8,"verified_fuzzy":4},"total_outbound_references":164},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-09T06:31:02.800959+00:00","source":"crossref"},{"observed_at":"2026-08-09T06:30:57.326959+00:00","source":"retraction_watch"}],"thesis":"As of 9 August 2026, this Paper Citation Record lists 100 of 164 outbound references and 1 inbound Pith citation observation for arXiv:2507.15393."}