{"bundle_type":"pith_open_graph_bundle","bundle_version":"1.0","pith_number":"pith:2022:LKEKYDH2R7VMF2I6WGI3YCWWWJ","short_pith_number":"pith:LKEKYDH2","canonical_record":{"source":{"id":"2205.13155","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-26T05:01:30Z","cross_cats_sorted":[],"title_canon_sha256":"4cdb1af214f2946e82a3ad6d4efe6bfa38a12b30f1780768539bb2322b7cc4b6","abstract_canon_sha256":"a26df625fbf41384d7360ce2ee5085ac7177263ef933e055a1ed5f78de64b45b"},"schema_version":"1.0"},"canonical_sha256":"5a88ac0cfa8feac2e91eb191bc0ad6b2475ebbd678ba7017cb822fafb53ba2da","source":{"kind":"arxiv","id":"2205.13155","version":1},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.13155","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"arxiv_version","alias_value":"2205.13155v1","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.13155","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"pith_short_12","alias_value":"LKEKYDH2R7VM","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"pith_short_16","alias_value":"LKEKYDH2R7VMF2I6","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"pith_short_8","alias_value":"LKEKYDH2","created_at":"2026-07-05T04:26:40Z"}],"events":[{"event_type":"record_created","subject_pith_number":"pith:2022:LKEKYDH2R7VMF2I6WGI3YCWWWJ","target":"record","payload":{"canonical_record":{"source":{"id":"2205.13155","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-26T05:01:30Z","cross_cats_sorted":[],"title_canon_sha256":"4cdb1af214f2946e82a3ad6d4efe6bfa38a12b30f1780768539bb2322b7cc4b6","abstract_canon_sha256":"a26df625fbf41384d7360ce2ee5085ac7177263ef933e055a1ed5f78de64b45b"},"schema_version":"1.0"},"canonical_sha256":"5a88ac0cfa8feac2e91eb191bc0ad6b2475ebbd678ba7017cb822fafb53ba2da","receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T04:26:40.399593Z","signature_b64":"3TkAMdnYESv+muPVqnWw46FE7qW73rAXe/um48kOtnZbviR6o/oyk13ZJbVRL5+ktjk+IJiNF4SigFaL5z9SCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"5a88ac0cfa8feac2e91eb191bc0ad6b2475ebbd678ba7017cb822fafb53ba2da","last_reissued_at":"2026-07-05T04:26:40.399187Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T04:26:40.399187Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"source_kind":"arxiv","source_id":"2205.13155","source_version":1,"attestation_state":"computed"},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:26:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"UMUZadf5kTbTSXEdgbkHSat4k2QOgRksQ+Y7Pz7GskyGxCL9uaEKnaEkgYEa+QElhEI3BZ26Ra3ZYMc4+6YkCQ==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T04:25:42.725381Z"},"content_sha256":"371683378ac664f27b1cf6433f7c8fbb38b50fa32a41bae72e290338cb808855","schema_version":"1.0","event_id":"sha256:371683378ac664f27b1cf6433f7c8fbb38b50fa32a41bae72e290338cb808855"},{"event_type":"graph_snapshot","subject_pith_number":"pith:2022:LKEKYDH2R7VMF2I6WGI3YCWWWJ","target":"graph","payload":{"graph_snapshot":{"paper":{"title":"A Large Scale Study and Classification of VirusTotal Reports on Phishing and Malware URLs","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Euijin Choo, Issa Khalil, Mohamed Nabeel, Ravindu De Silva, Ting Yu","submitted_at":"2022-05-26T05:01:30Z","abstract_excerpt":"VirusTotal (VT) provides aggregated threat intelligence on various entities including URLs, IP addresses, and binaries. It is widely used by researchers and practitioners to collect ground truth and evaluate the maliciousness of entities. In this work, we provide a comprehensive analysis of VT URL scanning reports containing the results of 95 scanners for 1.577 Billion URLs over two years. Individual VT scanners are known to be noisy in terms of their detection and attack type classification. To obtain high quality ground truth of URLs and actively take proper actions to mitigate different typ"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.13155","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2205.13155/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"verdict_id":null},"signer":{"signer_id":"pith.science","signer_type":"pith_registry","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"created_at":"2026-07-05T04:26:40Z","supersedes":[],"prev_event":null,"signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"kiQa4gnNvM7DnFzRGt40QnkutW2fOvg6FdaOLJAUxth56Hfw3q9j88AKVfJWyHBNGdgIvk4i6PrVhWd4IBQWCg==","signed_message":"open_graph_event_sha256_bytes","signed_at":"2026-07-24T04:25:42.725753Z"},"content_sha256":"e26b984fbba9a80fbfe253b45d808bea17b8fea5b50c7de9f878c80ebfc63872","schema_version":"1.0","event_id":"sha256:e26b984fbba9a80fbfe253b45d808bea17b8fea5b50c7de9f878c80ebfc63872"}],"timestamp_proofs":[],"mirror_hints":[{"mirror_type":"https","name":"Pith Resolver","base_url":"https://pith.science","bundle_url":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/bundle.json","state_url":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/state.json","well_known_bundle_url":"https://pith.science/.well-known/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/bundle.json","status":"primary"}],"public_keys":[{"key_id":"pith-v1-2026-05","algorithm":"ed25519","format":"raw","public_key_b64":"stVStoiQhXFxp4s2pdzPNoqVNBMojDU/fJ2db5S3CbM=","public_key_hex":"b2d552b68890857171a78b36a5dccf368a953413288c353f7c9d9d6f94b709b3","fingerprint_sha256_b32_first128bits":"RVFV5Z2OI2J3ZUO7ERDEBCYNKS","fingerprint_sha256_hex":"8d4b5ee74e4693bcd1df2446408b0d54","rotates_at":null,"url":"https://pith.science/pith-signing-key.json","notes":"Pith uses this Ed25519 key to sign canonical record SHA-256 digests. Verify with: ed25519_verify(public_key, message=canonical_sha256_bytes, signature=base64decode(signature_b64))."}],"merge_version":"pith-open-graph-merge-v1","built_at":"2026-07-24T04:25:42Z","links":{"resolver":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ","bundle":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/bundle.json","state":"https://pith.science/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/state.json","well_known_bundle":"https://pith.science/.well-known/pith/LKEKYDH2R7VMF2I6WGI3YCWWWJ/bundle.json"},"state":{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2022:LKEKYDH2R7VMF2I6WGI3YCWWWJ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"a26df625fbf41384d7360ce2ee5085ac7177263ef933e055a1ed5f78de64b45b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-26T05:01:30Z","title_canon_sha256":"4cdb1af214f2946e82a3ad6d4efe6bfa38a12b30f1780768539bb2322b7cc4b6"},"schema_version":"1.0","source":{"id":"2205.13155","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2205.13155","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"arxiv_version","alias_value":"2205.13155v1","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2205.13155","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"pith_short_12","alias_value":"LKEKYDH2R7VM","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"pith_short_16","alias_value":"LKEKYDH2R7VMF2I6","created_at":"2026-07-05T04:26:40Z"},{"alias_kind":"pith_short_8","alias_value":"LKEKYDH2","created_at":"2026-07-05T04:26:40Z"}],"graph_snapshots":[{"event_id":"sha256:e26b984fbba9a80fbfe253b45d808bea17b8fea5b50c7de9f878c80ebfc63872","target":"graph","created_at":"2026-07-05T04:26:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2205.13155/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"VirusTotal (VT) provides aggregated threat intelligence on various entities including URLs, IP addresses, and binaries. It is widely used by researchers and practitioners to collect ground truth and evaluate the maliciousness of entities. In this work, we provide a comprehensive analysis of VT URL scanning reports containing the results of 95 scanners for 1.577 Billion URLs over two years. Individual VT scanners are known to be noisy in terms of their detection and attack type classification. To obtain high quality ground truth of URLs and actively take proper actions to mitigate different typ","authors_text":"Euijin Choo, Issa Khalil, Mohamed Nabeel, Ravindu De Silva, Ting Yu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-26T05:01:30Z","title":"A Large Scale Study and Classification of VirusTotal Reports on Phishing and Malware URLs"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2205.13155","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:371683378ac664f27b1cf6433f7c8fbb38b50fa32a41bae72e290338cb808855","target":"record","created_at":"2026-07-05T04:26:40Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"a26df625fbf41384d7360ce2ee5085ac7177263ef933e055a1ed5f78de64b45b","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2022-05-26T05:01:30Z","title_canon_sha256":"4cdb1af214f2946e82a3ad6d4efe6bfa38a12b30f1780768539bb2322b7cc4b6"},"schema_version":"1.0","source":{"id":"2205.13155","kind":"arxiv","version":1}},"canonical_sha256":"5a88ac0cfa8feac2e91eb191bc0ad6b2475ebbd678ba7017cb822fafb53ba2da","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"5a88ac0cfa8feac2e91eb191bc0ad6b2475ebbd678ba7017cb822fafb53ba2da","first_computed_at":"2026-07-05T04:26:40.399187Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T04:26:40.399187Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"3TkAMdnYESv+muPVqnWw46FE7qW73rAXe/um48kOtnZbviR6o/oyk13ZJbVRL5+ktjk+IJiNF4SigFaL5z9SCg==","signature_status":"signed_v1","signed_at":"2026-07-05T04:26:40.399593Z","signed_message":"canonical_sha256_bytes"},"source_id":"2205.13155","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:371683378ac664f27b1cf6433f7c8fbb38b50fa32a41bae72e290338cb808855","sha256:e26b984fbba9a80fbfe253b45d808bea17b8fea5b50c7de9f878c80ebfc63872"],"state_sha256":"e6619fa640c0fbc694a98b2e3c854ac736f8ef47a4a93f2bb64a064b2afd1e27"},"bundle_signature":{"signature_status":"signed_v1","algorithm":"ed25519","key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signature_b64":"LCqkCogYkVCsM+Lt6BNHDKUrf1enSQ65rNiOMRbj93ov3soN6eopQ2vpwkSxh5oXRsrqBJZIiYidFRAJc7xHDw==","signed_message":"bundle_sha256_bytes","signed_at":"2026-07-24T04:25:42.727853Z","bundle_sha256":"5a06211673516a5b2ca0f0bb48668bd75d2bbadd9084daf35f289a22b2e3040c"}}