{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2022:LKEKYDH2R7VMF2I6WGI3YCWWWJ","short_pith_number":"pith:LKEKYDH2","schema_version":"1.0","canonical_sha256":"5a88ac0cfa8feac2e91eb191bc0ad6b2475ebbd678ba7017cb822fafb53ba2da","source":{"kind":"arxiv","id":"2205.13155","version":1},"attestation_state":"computed","paper":{"title":"A Large Scale Study and Classification of VirusTotal Reports on Phishing and Malware URLs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Euijin Choo, Issa Khalil, Mohamed Nabeel, Ravindu De Silva, Ting Yu","submitted_at":"2022-05-26T05:01:30Z","abstract_excerpt":"VirusTotal (VT) provides aggregated threat intelligence on various entities including URLs, IP addresses, and binaries. It is widely used by researchers and practitioners to collect ground truth and evaluate the maliciousness of entities. In this work, we provide a comprehensive analysis of VT URL scanning reports containing the results of 95 scanners for 1.577 Billion URLs over two years. Individual VT scanners are known to be noisy in terms of their detection and attack type classification. To obtain high quality ground truth of URLs and actively take proper actions to mitigate different typ"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2205.13155","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-26T05:01:30Z","cross_cats_sorted":[],"title_canon_sha256":"4cdb1af214f2946e82a3ad6d4efe6bfa38a12b30f1780768539bb2322b7cc4b6","abstract_canon_sha256":"a26df625fbf41384d7360ce2ee5085ac7177263ef933e055a1ed5f78de64b45b"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:26:40.399593Z","signature_b64":"3TkAMdnYESv+muPVqnWw46FE7qW73rAXe/um48kOtnZbviR6o/oyk13ZJbVRL5+ktjk+IJiNF4SigFaL5z9SCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5a88ac0cfa8feac2e91eb191bc0ad6b2475ebbd678ba7017cb822fafb53ba2da","last_reissued_at":"2026-07-05T04:26:40.399187Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:26:40.399187Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"A Large Scale Study and Classification of VirusTotal Reports on Phishing and Malware URLs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Euijin Choo, Issa Khalil, Mohamed Nabeel, Ravindu De Silva, Ting Yu","submitted_at":"2022-05-26T05:01:30Z","abstract_excerpt":"VirusTotal (VT) provides aggregated threat intelligence on various entities including URLs, IP addresses, and binaries. It is widely used by researchers and practitioners to collect ground truth and evaluate the maliciousness of entities. In this work, we provide a comprehensive analysis of VT URL scanning reports containing the results of 95 scanners for 1.577 Billion URLs over two years. Individual VT scanners are known to be noisy in terms of their detection and attack type classification. To obtain high quality ground truth of URLs and actively take proper actions to mitigate different typ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.13155","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.13155/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2205.13155","created_at":"2026-07-05T04:26:40.399244+00:00"},{"alias_kind":"arxiv_version","alias_value":"2205.13155v1","created_at":"2026-07-05T04:26:40.399244+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.13155","created_at":"2026-07-05T04:26:40.399244+00:00"},{"alias_kind":"pith_short_12","alias_value":"LKEKYDH2R7VM","created_at":"2026-07-05T04:26:40.399244+00:00"},{"alias_kind":"pith_short_16","alias_value":"LKEKYDH2R7VMF2I6","created_at":"2026-07-05T04:26:40.399244+00:00"},{"alias_kind":"pith_short_8","alias_value":"LKEKYDH2","created_at":"2026-07-05T04:26:40.399244+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ","json":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ.json","graph_json":"https://pith.science/api/pith-number/LKEKYDH2R7VMF2I6WGI3YCWWWJ/graph.json","events_json":"https://pith.science/api/pith-number/LKEKYDH2R7VMF2I6WGI3YCWWWJ/events.json","paper":"https://pith.science/paper/LKEKYDH2"},"agent_actions":{"view_html":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ","download_json":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ.json","view_paper":"https://pith.science/paper/LKEKYDH2","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2205.13155&json=true","fetch_graph":"https://pith.science/api/pith-number/LKEKYDH2R7VMF2I6WGI3YCWWWJ/graph.json","fetch_events":"https://pith.science/api/pith-number/LKEKYDH2R7VMF2I6WGI3YCWWWJ/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/action/timestamp_anchor","attest_storage":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/action/storage_attestation","attest_author":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/action/author_attestation","sign_citation":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/action/citation_signature","submit_replication":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/action/replication_record"}},"created_at":"2026-07-05T04:26:40.399244+00:00","updated_at":"2026-07-05T04:26:40.399244+00:00"}