{"as_of":"2026-08-07T16:49:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:5d4a8e70e9c3980dba1dcf857aa84564d0020c4f1e05ce37041d6637ade2c761","coverage":[{"denominator":68,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":68,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T16:33:44.237881Z","state":"measured"},{"denominator":68,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":68,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-07T06:34:17.273281+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2509.13186/citation-record","integrity":"/paper/2509.13186/integrity","json":"/paper/2509.13186/citation-record.json","paper":"/paper/2509.13186"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:35.754116Z","title":"APWG Trends","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:35.754116Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:3ecf7473d38680d27ef9e4479c9a2b77a902133a3b61fbe92c9e1a5c55fd9d90","observation_id":"0185daa6-5612-45b0-9001-e1aaeb4832e7","resolution":{"observed_at":"2026-08-04T16:33:35.754116Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:35.896949Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:35.896949Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:3e012969d5ac702219e38cbe4bc037b114f055b711abf24ad522e7591c3f884a","observation_id":"382f6994-608a-4286-a5e1-7fb6f05a4acb","resolution":{"observed_at":"2026-08-04T16:33:35.896949Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.075794Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.075794Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:f91192bea3fe76f8c39273274be96e34a2fe90da9fba2ead4fee6b27978d8f71","observation_id":"dca1d5de-c0a3-404b-9d6d-bdfc8e6cfc09","resolution":{"observed_at":"2026-08-04T16:33:36.075794Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.232541Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.232541Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:5c12e4eaa3c268480b43edaf72222bf2612f5af946439ee6552ab7e66a0b4929","observation_id":"2910beaf-85f2-4312-ac5f-c7f4802c929b","resolution":{"observed_at":"2026-08-04T16:33:36.232541Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.380968Z","title":"MDN Docs, January 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.380968Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:2c9ff448c99f2734142f76f8e731f8716770ca5ba0ba2a4bc20b2ae17c16c9c9","observation_id":"744cd77c-54af-430f-b132-4a342374a591","resolution":{"observed_at":"2026-08-04T16:33:36.380968Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.438849Z","title":"Threat Actor Groups Tracked by Palo Alto Networks Unit 42, June 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.438849Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:230207b327bef8e831f97705cd0e989352aa80491222e8ddba8b3b72dee0afe8","observation_id":"9060946f-db22-4697-8a74-e30f3ae27fcb","resolution":{"observed_at":"2026-08-04T16:33:36.438849Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.503894Z","title":"VisualPhishNet: Zero-Day Phishing Website Detection by Visual Similarity","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.503894Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:58691cd47db5ce3186ffb920ca7abee25326835bd99a856f518923475307647b","observation_id":"87d0567c-f158-40ef-9bbb-290c436718fa","resolution":{"observed_at":"2026-08-04T16:33:36.503894Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.599626Z","title":"{PhishPrint}: Evading Phishing Detection Crawlers by Prior Profiling","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.599626Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:69173cc0b8e6f94832a5cec942adfdc3c1b7e4c0e2ae7f7cb1e0830f40e44f24","observation_id":"b823caa6-9653-44f7-a1d8-f247d7c5ce60","resolution":{"observed_at":"2026-08-04T16:33:36.599626Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.665608Z","title":"eCrime Ex- change (eCX), 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.665608Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:0f42c6f7ea92c298a06254e2b98da563d2a5de96392c0c366954fbd87e47a08d","observation_id":"66b32e0c-b1b2-4254-9620-408442b89fd2","resolution":{"observed_at":"2026-08-04T16:33:36.665608Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.719785Z","title":"Catching Phishers By Their Bait: Investigating the Dutch Phishing Land- scape through Phishing Kit Detection","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.719785Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:c13c108c539236330caae991b21f394a712d66e00f14b94b14d299f7c5e42dd5","observation_id":"c312b5d0-2bf4-4342-a164-c250f199c3df","resolution":{"observed_at":"2026-08-04T16:33:36.719785Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.782779Z","title":null,"venue":null,"work_id":null,"year":2013},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.782779Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:1f648b2c238dc53837bdef247222b80ce85491211c4356f329b6f02acceee6c2","observation_id":"1a240b5b-89b6-4289-8417-d60ba5c6e16d","resolution":{"observed_at":"2026-08-04T16:33:36.782779Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.873737Z","title":"PhiKitA: Phish- ing Kit Attacks Dataset for Phishing Websites Identifi- cation.IEEE Access, 11:40779–40789, 2023","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.873737Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:4cf24a93ce551726b9fea935dd38af86f297a6e9f3041d14623f8f5e636834a8","observation_id":"b25d2039-e506-449b-9e84-e5cea87b9098","resolution":{"observed_at":"2026-08-04T16:33:36.873737Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:36.945519Z","title":"USPS Phishing Scam Targeting iOS Users","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:36.945519Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:b00279a53a6845ccfebe55ad26603f980fbe4bde84124b7a1d92d09dfbd6a137","observation_id":"e5994fa6-2fd4-4f87-895c-aea99c65f891","resolution":{"observed_at":"2026-08-04T16:33:36.945519Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2410.02095","last_updated":"2025-02-14T02:29:21Z","snapshot_observed_at":"2026-07-06T19:26:38.002071Z","submitted_at":"2024-10-02T23:32:09Z","title":"DomainLynx: Leveraging Large Language Models for Enhanced Domain Squatting Detection","version":3},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2410.02095","snapshot_observed_at":"2026-08-04T16:33:37.010008Z","title":"Do- mainLynx: Leveraging Large Language Models for Enhanced Domain Squatting Detection.ArXiv, abs/2410.02095, 2024","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.010008Z"},"links":{"cited_paper":"/paper/2410.02095","citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:a42aa2cfdb6686ca3ce8e1822a8cd94d3b7b107ebf300fc73dc576ae95feac0d","observation_id":"8cdde1fa-7407-47e6-ac65-85ccae71dc32","resolution":{"observed_at":"2026-08-04T16:33:37.010008Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.125662Z","title":"Recognize and report","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.125662Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:e0222777225c9b12dc81b87c3d369b4e9ab5e05c46b2dc3dc4cc6c3b96d9af92","observation_id":"8dd98a84-76b5-4dd6-935a-d9cba76c3ec8","resolution":{"observed_at":"2026-08-04T16:33:37.125662Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.189323Z","title":"Phishtank,2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.189323Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:cc43598f675463169ff2b828ad7965d0e6ddbb20cd1f9f83868be9ae16417ed3","observation_id":"ca7732c8-c8c4-43e2-8256-ba328109cd32","resolution":{"observed_at":"2026-08-04T16:33:37.189323Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.236079Z","title":"There is No Free Phish: An Analysis of “Free” and Live Phishing Kits","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.236079Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:c50a671da9f62b6691fe7865722f483dbdb126969c3e57e99c02b7830a29262a","observation_id":"1b972b8c-5c1f-4152-982b-28424a1e76cc","resolution":{"observed_at":"2026-08-04T16:33:37.236079Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.288571Z","title":"Kitphishr:Atooldesignedtohuntforphishing kit source code","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.288571Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:0ea3d38e0bf3a84c29247b9259298f353731b07356cb96632ebd2a3a9f006fc6","observation_id":"b2c0f19d-2b69-450a-81f7-ae9969c2d9dc","resolution":{"observed_at":"2026-08-04T16:33:37.288571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.406788Z","title":"Phishing De- tection Leveraging Machine Learning and Deep Learn- ing: A Review.IEEE Security & Privacy, 20(5):86–95, September 2022","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.406788Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:39d96b6fa89b18a22a09db8ff100af48b3ff6d71a33d8d88c794cf591e024ee2","observation_id":"aba9d68c-e0f6-4f0f-ae42-4a6a908d3d0e","resolution":{"observed_at":"2026-08-04T16:33:37.406788Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.474624Z","title":"OnlineTrack- ing: A 1-million-site Measurement and Analysis","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.474624Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:51ecff38ad68dc6f76c576a59f94dfd4b3555175480ae4d496b2047bf4d7a7c4","observation_id":"54ac9b32-219b-4f72-b526-2205e0c48ba3","resolution":{"observed_at":"2026-08-04T16:33:37.474624Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.606915Z","title":"A Method for Comparing Two Hierarchical Clusterings.Journal of the American statistical association, 78(383):553–569, 1983","venue":null,"work_id":null,"year":1983},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.606915Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:6196af33f95832ed4b68e14a4862c1a0a2ec4e5e2d762abca89c2c140a7a0057","observation_id":"ed98b33a-74d2-41fe-a7bd-54035315acea","resolution":{"observed_at":"2026-08-04T16:33:37.606915Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.769364Z","title":"Magika: AI-Powered Content-Type Detection","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.769364Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:9886dc9b800cb5b4544ab366c2a296c2cc2cc0803608ef113076c32e9b736e0b","observation_id":"1d5d2805-2162-4d41-bfeb-0c862c52b119","resolution":{"observed_at":"2026-08-04T16:33:37.769364Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.890460Z","title":"Catapult","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.890460Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:1a82a3ecc515efe3cd4a87ebe8dffecc413c01ac6ef786767149475d9dfddba4","observation_id":"196fa240-e094-4242-ae51-570402d05b32","resolution":{"observed_at":"2026-08-04T16:33:37.890460Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:37.958176Z","title":"Puppeteer, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:37.958176Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:30da1db3621358ae3bfae6be12bd7a9c14c3a00579dff951efc5bd32d91d7571","observation_id":"f23ea8d2-a813-4e40-b775-a4670c5b5e75","resolution":{"observed_at":"2026-08-04T16:33:37.958176Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:38.085119Z","title":"PhishEye: Live Monitoring of Sandboxed Phishing Kits","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:38.085119Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:dcedc2d4cdc79136dc65e59927aec9fe5d3ef2df60ada9a61ff299b25469b3f9","observation_id":"ac871b2d-66f9-4214-80dd-565b40918b3e","resolution":{"observed_at":"2026-08-04T16:33:38.085119Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:38.245580Z","title":"New sophisticated email- based attack from NOBELIUM","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:38.245580Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:2ad8a604b4d87ecdcea328aa67381509bf81d8907afe121ae27e771d7d1a015a","observation_id":"5d5358da-607f-4e7d-9322-19a93f0c255a","resolution":{"observed_at":"2026-08-04T16:33:38.245580Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:38.427215Z","title":"Franken- phish: TodayZoo built from other phish- ing kits","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:38.427215Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:ad5701df0bac56eb5453674b554f53bd935ce37147c94833ced965b0abbe8f38","observation_id":"25b79422-b599-4f2b-b292-b66f9a7c9259","resolution":{"observed_at":"2026-08-04T16:33:38.427215Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:38.530391Z","title":"Visi- bleV8: In-browser Monitoring of JavaScript in the Wild","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:38.530391Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:ab5c0498b7014b94baa03147d879fc70417ea7c2534279265e6cd524976ca24b","observation_id":"bceaf18c-3f8b-40a5-b4db-eb60fe0b5bde","resolution":{"observed_at":"2026-08-04T16:33:38.530391Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:38.661478Z","title":"Phishreplicant: A language model- based approach to detect generated squatting domain names","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:38.661478Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:0880e72f9717adeadf9a7dbf86c49ccae3fdcc726957ca690eb43e0d2d79fd67","observation_id":"0c7478e6-4942-44c4-bf74-093d0eb98175","resolution":{"observed_at":"2026-08-04T16:33:38.661478Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:38.724086Z","title":"Catching Transparent Phish: Analyz- ingandDetectingMITMPhishingToolkits","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:38.724086Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:1f37126bec46472ce3bd24ac4f548e3de205a866b7388921de162c37b0b95734","observation_id":"6e3e8992-75c8-4b76-9ace-1ba341950454","resolution":{"observed_at":"2026-08-04T16:33:38.724086Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"1802.03162","last_updated":"2018-03-02T03:42:49Z","snapshot_observed_at":"2026-07-06T06:22:31.146439Z","submitted_at":"2018-02-09T08:07:13Z","title":"URLNet: Learning a URL Representation with Deep Learning for Malicious URL Detection","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"1802.03162","snapshot_observed_at":"2026-08-04T16:33:38.875764Z","title":null,"venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:38.875764Z"},"links":{"cited_paper":"/paper/1802.03162","citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:7b209b73ea5b007e455abe0dfa00fb27fd28547b621aebb7dfbd5fc53e8670c8","observation_id":"4e33ac06-fb82-42e4-86a2-794b15f42a64","resolution":{"observed_at":"2026-08-04T16:33:38.875764Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:39.024953Z","title":"Be- neath the phishing scripts: A script-level analysis of phishing kits and their impact on real-world phishing websites","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:39.024953Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:33eab11c2c30724cb0da8f2961f8888aeb8df785ad754e50f0fc8ac1c3c0eef2","observation_id":"f4b8bac2-1880-4288-ab81-d043f9028053","resolution":{"observed_at":"2026-08-04T16:33:39.024953Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:39.199671Z","title":"Phish- ing Vs","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:39.199671Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:2d2b50a5f3999b8d0aeebd67d2b24bfef6a31083403a8a88a49823a90b4b6d57","observation_id":"a7ee8ae3-b40f-4ede-93b7-81541f3abf17","resolution":{"observed_at":"2026-08-04T16:33:39.199671Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:39.404096Z","title":"Phish in Sheep’s Clothing: Exploring the Au- thentication Pitfalls of Browser Fingerprinting","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:39.404096Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:1777660fc2c7e4cf10053a3ad11175ea197c02a0d255bbc34e7e8fe01854bda7","observation_id":"022e08ef-5994-4627-a54a-9f175b6ba3cb","resolution":{"observed_at":"2026-08-04T16:33:39.404096Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:39.517637Z","title":"Inferring phishing intention via webpage appearance and dynam- ics: A deep vision based approach","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:39.517637Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:99ad6e6c60698c669b8e9ac937f41e020f3de8e6fec4d40d8652ef65fa3a6ad1","observation_id":"e263f858-2a47-41e6-8936-f75453fdd2d7","resolution":{"observed_at":"2026-08-04T16:33:39.517637Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:39.689751Z","title":"Knowledge expansion and counterfac- tual interaction for {Reference-Based} phishing detec- tion","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:39.689751Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:3825ae454cc1de4daa1c81942af23f6206a56729cd4c6d29b57e84441d272edb","observation_id":"233619a8-4cf1-4b0a-8ce9-67d04e861232","resolution":{"observed_at":"2026-08-04T16:33:39.689751Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:39.809129Z","title":"Analysis of Back-Doored Phishing Kits","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:39.809129Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:de04a701777bf1d74205da6864dfeeebd9c82257dc271dbd23a4538176b9f1cd","observation_id":"03dc3b62-cfa7-42d9-939d-6161f1064d7f","resolution":{"observed_at":"2026-08-04T16:33:39.809129Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:39.950586Z","title":"Introducing quieter permission UI for notifications","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:39.950586Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:d2138fac805b0c59c0925736c320dd36c3510791b3fbf377274ca419507947dd","observation_id":"2b8d2704-aac2-421b-8973-533117a6ecfc","resolution":{"observed_at":"2026-08-04T16:33:39.950586Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:40.058888Z","title":"Tycoon2FA New Evasion Technique for 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":39,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:40.058888Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:a6e97477e1c13392577545dfece5b4720be6026681d886b2ab1de3d9a01811ea","observation_id":"b7f891db-974e-4857-96a2-d02b4975b46b","resolution":{"observed_at":"2026-08-04T16:33:40.058888Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:40.185118Z","title":"Phishing kits source code sim- ilarity distribution: A case study","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":40,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:40.185118Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:d6ce77fa61ce867d46d9c97915216c649cf96b197360e68c584e61bc1f213805","observation_id":"cab5b47a-9779-4b7d-95bc-01608afcb055","resolution":{"observed_at":"2026-08-04T16:33:40.185118Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:40.332342Z","title":"PhishingDB, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":41,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:40.332342Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:45e83f8563e56dcfa85ff3e8712cbf8cfb77a21ec9e597cacb7bfd4b2b75c67e","observation_id":"97735f3b-9c04-46f8-b478-7e0a634ed4bc","resolution":{"observed_at":"2026-08-04T16:33:40.332342Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:40.482501Z","title":"Restricting notifica- tion permission prompts in firefox","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":42,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:40.482501Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:de4c9e17efaa521508b729cf482783f81c1c3143489c3aa9c85a47ee889450ec","observation_id":"73b4c65f-ed12-483c-a0e1-f2ffdd6d725e","resolution":{"observed_at":"2026-08-04T16:33:40.482501Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:40.605776Z","title":"On SMS Phishing Tactics and Infrastructure","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":43,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:40.605776Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:caf861ff7c94e1263a07cc07fc58a1601237e9babc94a3500c82608a3af43938","observation_id":"07217cf9-71dd-4f0b-9110-6ff74a49a813","resolution":{"observed_at":"2026-08-04T16:33:40.605776Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:40.778101Z","title":"Recent tycoon 2fa phishing campaigns target government entities","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":44,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:40.778101Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:1113d514acf4a88c0d5abcabbb2f47f8db84b9488353e13df9d8e72d5b6f65d7","observation_id":"ce3f3384-f592-458d-9809-8a5a5a994313","resolution":{"observed_at":"2026-08-04T16:33:40.778101Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:40.905031Z","title":"PhishFarm: A Scalable Framework for Measuring the Effectiveness of EvasionTechniquesagainstBrowserPhishingBlacklists","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":45,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:40.905031Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:2652b6df7d6db178914c5f8e895a299e32c7bf5ec96d2c4d32dd8733372e764d","observation_id":"a4c226aa-84e1-46f4-be0c-f05ec97f7002","resolution":{"observed_at":"2026-08-04T16:33:40.905031Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:41.026200Z","title":"Inside a Phisher’s Mind: Understanding the Anti-Phishing Ecosystem through Phishing Kit Analysis","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":46,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:41.026200Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:4e8d5f55e128ee985ac657a93d1fbff60f2eb1a08cd3ca57eed369905177d263","observation_id":"d0b1177d-924a-4dc8-bcf8-bb48ba18a042","resolution":{"observed_at":"2026-08-04T16:33:41.026200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:41.147934Z","title":"Sunrise to Sunset: Analyzing the End- to-end Life Cycle and Effectiveness of Phishing Attacks at Scale","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":47,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:41.147934Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:4fe0d8ec4370724ce9f0fb31a5f4d83776b694a617683b2fd3ae61c65e4883f9","observation_id":"b5d1eac6-1a1c-4142-a74b-8c9c06199679","resolution":{"observed_at":"2026-08-04T16:33:41.147934Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:41.238331Z","title":"Puppeteer stealth plugin, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":48,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:41.238331Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:820f9e107598cc9a07b8edfc6e1417b2291cc0c225ecde8c5a6315bc9180c4b8","observation_id":"b735c664-12a8-4378-ab3e-7d98ddbd95d7","resolution":{"observed_at":"2026-08-04T16:33:41.238331Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:41.418603Z","title":"OpenPhish, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":49,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:41.418603Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:b341428efe02570d2e9e77af96496452feb9e7afd5f3a625561a56e2ad7be034","observation_id":"a5e4ab8b-a4f1-418a-b05d-afd37062a391","resolution":{"observed_at":"2026-08-04T16:33:41.418603Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:41.598609Z","title":"FV8: A Forced Execution JavaScript Engine for Detecting Evasive Techniques","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":50,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:41.598609Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:5e574b3073f055474abd70735863f442ee5de430a2629dec7fcb49cf7ef689dc","observation_id":"94b3f51f-67ac-4a75-a2c3-900f929eba42","resolution":{"observed_at":"2026-08-04T16:33:41.598609Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:41.806463Z","title":"Pedregosa, G","venue":null,"work_id":null,"year":2011},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":51,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:41.806463Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:d12547d4da0d93fd673b8fb7c6fcb425c325626b172ba4134a33bed878d03a58","observation_id":"ea75f022-09c6-4aea-b4f3-55373f1dd29d","resolution":{"observed_at":"2026-08-04T16:33:41.806463Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:41.918385Z","title":"Chakradhara Rao, A.V.T","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":52,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:41.918385Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:be28126ba6f9c11da35ca2432b6f5c56a749da3f916be44f2e0467a70b0b5eda","observation_id":"c52264a4-4d46-4c51-b7f9-7981aeba75c2","resolution":{"observed_at":"2026-08-04T16:33:41.918385Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:42.068683Z","title":"V-measure: A conditional entropy-based external cluster evaluation measure","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":53,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:42.068683Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:725d68db5deb7402dfa803bab4a1b1576935a14609e1660a2dc0cfaaca7510b1","observation_id":"57cbc034-3dac-480f-b585-a9ee177385b7","resolution":{"observed_at":"2026-08-04T16:33:42.068683Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:42.216540Z","title":"Rods with LaserBeams:UnderstandingBrowserFingerprintingon Phishing Pages","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":54,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:42.216540Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:ae9265c81802e76ff4d182cad3fd38809b2f709a1f7df27f2456afd5b58443a6","observation_id":"59a9e3bb-9d2b-461f-ad81-15096fcfa0ff","resolution":{"observed_at":"2026-08-04T16:33:42.216540Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:42.347896Z","title":"Hiding in Plain Site: Detecting JavaScript Obfuscation through Concealed Browser API Usage","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":55,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:42.347896Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:cf4fa42da45c2b38748b83d809e3d9d2e2cb5575fb27049fd21bce8376f89f67","observation_id":"d295c2a7-0523-45a4-8049-126808102972","resolution":{"observed_at":"2026-08-04T16:33:42.347896Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:42.460325Z","title":"Urlscan, 2025","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":56,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:42.460325Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:9747780ea835cc9e1aeddf12511205226e1b8003baade6640335867d22988163","observation_id":"d6057a6f-2380-40ff-9313-490c1880a6ce","resolution":{"observed_at":"2026-08-04T16:33:42.460325Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:42.682044Z","title":"kn0w thy doma1n name","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":57,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:42.682044Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:c189f88cb60ac574b69e4b729386eaad843c57f552683296d8926ff60c6ffd81","observation_id":"31a6c893-4d83-4aa4-a7e1-5a9ddd45dde5","resolution":{"observed_at":"2026-08-04T16:33:42.682044Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:42.808498Z","title":"Kiz- zle: A signature compiler for detecting exploit kits","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":58,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:42.808498Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:5acc4172de70bd82963b3a778eba847288c5e19ce7d878859ee88b6c33489fff","observation_id":"4d46c8ba-d92f-4e6e-88ba-27f37128285c","resolution":{"observed_at":"2026-08-04T16:33:42.808498Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:42.937742Z","title":"Automatic Discovery of Emerging Browser Fingerprinting Tech- niques","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":59,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:42.937742Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:335ca18b96c9424778be4f4f72115e4ec0de6d11227c53e50cc90c14432b2174","observation_id":"adceb9ca-6e45-44b4-95e2-1c7e80c178a7","resolution":{"observed_at":"2026-08-04T16:33:42.937742Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:43.237696Z","title":"PhishInPatterns: measuring elicited user interactions at scale on phish- ing websites","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":60,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:43.237696Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:643508c37184756d9ca2c8d9fbcd7058677a19ffcc8b10d0d310f9f7ecc45e9f","observation_id":"7afdb4fa-9bab-4846-a1ea-a0180021a469","resolution":{"observed_at":"2026-08-04T16:33:43.237696Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:43.392018Z","title":"Leaky Kits: The Increased Risk of Data Exposure from Phish- ing Kits","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":61,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:43.392018Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:543b7e82116e0c2320aa361d7dc85a9bb4134cb817654d568d19ae1da6931cd8","observation_id":"04a5b299-9908-4370-86a9-80cf44e58020","resolution":{"observed_at":"2026-08-04T16:33:43.392018Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:43.505639Z","title":"{PhishDecloaker}: Detecting {CAPTCHA-cloaked} phishing websites via hybrid vision-based interactive models","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":62,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:43.505639Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:b748f116f2b927b970dddefbde8bb6d919ea34367e08eabf34c2ed406959c862","observation_id":"a447d873-88ec-41cf-be67-54c5274743d2","resolution":{"observed_at":"2026-08-04T16:33:43.505639Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:43.623115Z","title":"Browser-in-the-middle - evaluation of a modern approach to phishing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":63,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:43.623115Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:b44af6edaf00847d7076afa26240aeaecfa7679e71841d903b2bda110e8456ce","observation_id":"9e39451b-19c4-4830-af87-14302ec21da0","resolution":{"observed_at":"2026-08-04T16:33:43.623115Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:43.826035Z","title":"Verma and Avisha Das","venue":null,"work_id":null,"year":2017},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":64,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:43.826035Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:f6c735779bf6c4317f7041598f09cd9759bd553de9eb253f9fbbb1a1c4b318c2","observation_id":"f3c09c68-bf6f-40eb-81cb-ebab146b92e8","resolution":{"observed_at":"2026-08-04T16:33:43.826035Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:43.947599Z","title":"CrawlPhish: Large-scaleAnalysisofClient-sideCloakingTechniques in Phishing","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":65,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:43.947599Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:a7b41dbc7f1653c64ffbc378d1c9d009595bc9f0415fbced66800c36a72fd544","observation_id":"0552f821-09ce-4e88-8754-2f9e1cb7c76d","resolution":{"observed_at":"2026-08-04T16:33:43.947599Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:44.059471Z","title":"CrawlPhish: Large-scale analysis of client-side cloaking techniques in phishing","venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":66,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:44.059471Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:1577038099628339919fe2e53784fe6140ccc2922e3c836a299a9e551bf5c4d8","observation_id":"def51eca-4571-4888-9a4e-21f6338cfa40","resolution":{"observed_at":"2026-08-04T16:33:44.059471Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:44.237881Z","title":"I’m SPAR- TACUS, No, I’m SPARTACUS: Proactively Protecting Users from Phishing by Intentionally Triggering Cloak- ing Behavior","venue":null,"work_id":null,"year":2022},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":67,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:44.237881Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:52499442dbbd7e444d2ca28cd08ff4bf066d201f4e12e1679669ad3b423dc0a3","observation_id":"891ec558-48ed-40ee-96a6-147d103264db","resolution":{"observed_at":"2026-08-04T16:33:44.237881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T16:33:43.087767Z","title":null,"venue":null,"work_id":null,"year":null},"citing_paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities","version":2},"reference_index":2023,"source":"pdf_text","source_observed_at":"2026-08-04T16:33:43.087767Z"},"links":{"citing_paper":"/paper/2509.13186"},"observation_digest":"sha256:7b53771d065c816828992b3ddeee5693c18ec1579d048ee95911e029b1389b02","observation_id":"d6429eb2-ea77-4b9d-b396-eee0edd2fa08","resolution":{"observed_at":"2026-08-04T16:33:43.087767Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2509.13186","last_updated":"2026-07-17T04:17:05Z","latest_version":2,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-05T01:19:08.203701Z","submitted_at":"2025-09-16T15:39:23Z","title":"Characterizing Phishing Pages by JavaScript Capabilities"},"reference_resolution":{"displayed":68,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":68,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":68},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-07T06:34:17.273281+00:00","source":"crossref"},{"observed_at":"2026-08-07T06:34:11.927384+00:00","source":"retraction_watch"}],"thesis":"As of 7 August 2026, this Paper Citation Record lists 68 of 68 outbound references and 0 inbound Pith citation observations for arXiv:2509.13186."}