← Back to Home

Stable Behavioral Signature Search

Behavioral pattern:

ev:none|fc:none|st:high|si:low|ft:low|dw:none|dm:none|E:n|F:n|D:n|W:n|cx:huge|vol:high|tp:burst|ts:moderate|ps:flat|pd:deep|pw:wide|sq:moderate|sl:y|tt:setTimeout->setTimeout

Hash: a03f7b275990b8bd4825da45d0245235461ab6731fd877c7562ecf0e79112af7

Found 9 scans with this behavioral pattern

Stable signatures group scripts by behavioral category (API usage buckets, complexity tier, timing pattern) rather than exact values, enabling similarity clustering across different sites.

Page URL:https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S641534567%3A1774941171536904&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AT1y2_XmwhU1YQ70IoUfn_lGiQlZPBlS1ADrXCjJZaCPXHTQKxu4oFRTV7K66ty6Wf6LY-hcnyk8HA
Risk Level:CRITICAL
Scanned: 3/31/2026, 7:31:31 AM
View Scan
Page URL:https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S1714469998%3A1774923854586671&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AT1y2_VGsk7pHw09CscODvw20_V1ZTwN1DrW7bDvpP3md_W5iVMU1QpuvI2EUQlSl5D9G6Ts3cLidA
Risk Level:CRITICAL
Scanned: 3/31/2026, 2:26:07 AM
View Scan
Page URL:https://733.docs.google.com
Risk Level:CRITICAL
Scanned: 3/30/2026, 6:09:49 PM
View Scan
Page URL:https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S2030386102%3A1774893436715183&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AT1y2_U9Bi2QZMC61prpPnG8jdoEFT9XnCrMbHkfyXflEUPeMKzUcmYEJxEDlJBlo7tOzgxJS8s7qQ
Risk Level:CRITICAL
Scanned: 3/30/2026, 5:59:08 PM
View Scan
Page URL:https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S355530976%3A1774882729880245&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AT1y2_VhxdTutul1IaodxFqUOI9qyO-eM8SMBh13wYNn61XGAvRgXbRtyP6sv5_pcVq8RPl5GgNN7Q
Risk Level:CRITICAL
Scanned: 3/30/2026, 3:00:42 PM
View Scan
Page URL:https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S1392627664%3A1774881441008844&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AT1y2_U8xgS-P2oyFy9u0w8fj7TBqkMYfKhQ0VVSmYiX1AZS437c6JbjKq-aDD0nM5PzGTz1A5h9
Risk Level:CRITICAL
Scanned: 3/30/2026, 2:39:15 PM
View Scan
Page URL:https://s-gke-euw1-nssi2-5.europe-west1.firebasedatabase.app
Risk Level:CRITICAL
Scanned: 3/30/2026, 1:29:31 PM
View Scan
Page URL:https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S238794574%3A1774876402319096&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AT1y2_WKTqmUfmXInclMjL5M5IeFA2_SBMawCG6PbJaFwFfdnBVTTwK0JzTDxF2xShMZNQq4jQNbbg
Risk Level:CRITICAL
Scanned: 3/30/2026, 1:19:41 PM
View Scan
Page URL:https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&dsh=S2064704125%3A1774875747112232&emr=1&followup=https%3A%2F%2Fmail.google.com%2Fmail%2Fu%2F0%2F&osid=1&passive=1209600&service=mail&flowName=GlifWebSignIn&flowEntry=ServiceLogin&ifkv=AT1y2_VIiAPmP9O431pCa-pDYOVquEoM62tzilv9mnQdzoepIUM8TkbB6XAQcHKAAv4PEe-r_s0GcA
Risk Level:CRITICAL
Scanned: 3/30/2026, 1:05:03 PM
View Scan

About Stable Behavioral Signatures

Stable signatures categorize JavaScript behavior into buckets rather than using exact values. This means scripts with similar (but not identical) behavior will share the same signature.

  • API call counts bucketed: none, low (1-3), medium (4-10), high (11-50), very high (50+)
  • Code complexity tiers: tiny, small, medium, large, huge
  • Boolean flags for high-risk APIs: eval, Function constructor, DOM manipulation
  • Timing pattern classification: periodic, burst, random