{"id":"https://openalex.org/W7133357950","doi":"https://doi.org/10.48550/arxiv.2603.01874","title":"Phishing the Phishers with SpecularNet: Hierarchical Graph Autoencoding for Reference-Free Web Phishing Detection","display_name":"Phishing the Phishers with SpecularNet: Hierarchical Graph Autoencoding for Reference-Free Web Phishing Detection","publication_year":2026,"publication_date":"2026-03-02","ids":{"openalex":"https://openalex.org/W7133357950","doi":"https://doi.org/10.48550/arxiv.2603.01874"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.01874","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01874","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.01874","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5073153953","display_name":"Tailai Song","orcid":"https://orcid.org/0000-0003-2051-5346"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Song, Tailai","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081556750","display_name":"Pedro Casas","orcid":"https://orcid.org/0000-0002-0951-2331"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Casas, Pedro","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5105918818","display_name":"Michela Meo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Meo, Michela","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.988099992275238,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.988099992275238,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11147","display_name":"Misinformation and Its Impacts","score":0.0024999999441206455,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0013000000035390258,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/phishing","display_name":"Phishing","score":0.9218000173568726},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5957000255584717},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5570999979972839},{"id":"https://openalex.org/keywords/credential","display_name":"Credential","score":0.5565999746322632},{"id":"https://openalex.org/keywords/blacklisting","display_name":"Blacklisting","score":0.4912000000476837},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.37119999527931213},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.351500004529953},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.30219998955726624}],"concepts":[{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.9218000173568726},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8158000111579895},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5957000255584717},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5570999979972839},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.5565999746322632},{"id":"https://openalex.org/C2779797433","wikidata":"https://www.wikidata.org/wiki/Q632959","display_name":"Blacklisting","level":2,"score":0.4912000000476837},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41429999470710754},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38109999895095825},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.37119999527931213},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3707999885082245},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.351500004529953},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3352000117301941},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.30219998955726624},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.2896000146865845},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C137822555","wikidata":"https://www.wikidata.org/wiki/Q2587068","display_name":"Information sensitivity","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2766000032424927},{"id":"https://openalex.org/C2781241145","wikidata":"https://www.wikidata.org/wiki/Q204606","display_name":"Cyberspace","level":3,"score":0.27390000224113464},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.271699994802475},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.267300009727478},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.2614000141620636},{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.01874","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01874","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.01874","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.01874","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.7757936716079712}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Phishing":[0],"remains":[1],"the":[2,7,88,95,138,169],"most":[3],"pervasive":[4],"threat":[5],"to":[6,55,57,181],"Web,":[8],"enabling":[9,125],"large-scale":[10],"credential":[11],"theft":[12],"and":[13,22,37,45,91,103,188,204],"financial":[14],"fraud":[15],"through":[16],"deceptive":[17],"webpages.":[18],"While":[19],"recent":[20],"reference-based":[21,144,171],"generative-AI-driven":[23],"phishing":[24,59,71,122,140],"detectors":[25],"achieve":[26],"strong":[27],"accuracy,":[28],"their":[29],"reliance":[30],"on":[31,87,129,197],"external":[32],"knowledge":[33],"bases,":[34],"cloud":[35],"services,":[36],"complex":[38],"multimodal":[39],"pipelines":[40],"fundamentally":[41],"limits":[42],"practicality,":[43],"scalability,":[44],"reproducibility.":[46],"In":[47],"contrast,":[48],"conventional":[49],"deep":[50],"learning":[51],"approaches":[52],"often":[53],"fail":[54],"generalize":[56],"evolving":[58],"campaigns.":[60],"We":[61],"introduce":[62],"SpecularNet,":[63],"a":[64,101,105,198],"novel":[65],"lightweight":[66],"framework":[67],"for":[68],"reference-free":[69],"web":[70],"detection":[72,151],"that":[73,147],"demonstrates":[74],"how":[75],"carefully":[76],"designed":[77],"compact":[78],"architectures":[79],"can":[80],"rival":[81],"heavyweight":[82],"systems.":[83],"SpecularNet":[84,148,193],"operates":[85],"solely":[86],"domain":[89],"name":[90],"HTML":[92],"structure,":[93],"modeling":[94],"Document":[96],"Object":[97],"Model":[98],"(DOM)":[99],"as":[100],"tree":[102],"leveraging":[104],"hierarchical":[106],"graph":[107],"autoencoding":[108],"architecture":[109],"with":[110,153],"directional,":[111],"level-wise":[112],"message":[113],"passing.":[114],"This":[115],"design":[116],"captures":[117],"higher-order":[118],"structural":[119],"invariants":[120],"of":[121,137,166],"webpages":[123],"while":[124,174],"fast,":[126],"end-to-end":[127],"inference":[128,176],"standard":[130],"CPUs.":[131],"Extensive":[132],"evaluation":[133],"against":[134,205],"13":[135],"state":[136],"art":[139],"detectors,":[141],"including":[142],"leading":[143],"systems,":[145],"shows":[146],"achieves":[149],"competitive":[150],"performance":[152],"dramatically":[154],"lower":[155],"computational":[156],"cost.":[157],"On":[158],"benchmark":[159],"datasets,":[160],"it":[161],"reaches":[162],"an":[163],"F1":[164],"score":[165],"93.9%,":[167],"trailing":[168],"best":[170],"method":[172],"slightly":[173],"reducing":[175],"time":[177],"from":[178],"several":[179],"seconds":[180],"approximately":[182],"20":[183],"milliseconds":[184],"per":[185],"webpage.":[186],"Field":[187],"robustness":[189],"evaluations":[190],"further":[191],"validate":[192],"in":[194],"real-world":[195],"deployments,":[196],"newly":[199],"collected":[200],"2026":[201],"open-world":[202],"dataset,":[203],"adversarial":[206],"attacks.":[207]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-03-04T00:00:00"}