{"test":"Test 3: opening pages safely in locked boxes","version":"Locked box capture, test build 0.1","method":"Test 3: 1,991 page loads in locked boxes from Lagos, Ireland and Cape Town","datasets":["PhishTank: the 200 newest entries marked verified and online","PhiUSIIL Phishing URL Dataset (UCI Machine Learning Repository): 100 phishing addresses"],"results":{"fetches":1991,"viewpoints":[{"city":"Lagos","loads":600,"loaded":342,"gone":222,"challenge":26,"slow":10,"p50":9.6,"p95":19.6},{"city":"Ireland","loads":600,"loaded":343,"gone":221,"challenge":27,"slow":9,"p50":12.1,"p95":26.2},{"city":"Cape Town","loads":401,"loaded":254,"gone":117,"challenge":20,"slow":10,"p50":14.2,"p95":35.3}],"liveCaptured":{"min":92.9,"max":100,"target":85},"phishtank":{"newest":200,"stillLive":77},"livePhishing":88,"onBuilders":24,"malware":{"archives":2005,"flagged":42,"livePhishingServing":7},"noInput":{"typed":0,"submitted":0,"loggedIn":0,"sendsCancelled":3002,"submitsBlocked":225,"autoSendShare":"34 to 40%"},"cloaking":{"livePairs":163,"formInOnlyOne":0},"safetyTests":["No typing, clicking or filling code anywhere in the capture code","Never submits a form, even when the page tries six ways on its own","No passwords or cloud keys inside the locked box","No way into private networks or the cloud's own services","Not fooled by names that point back inside our network","A fresh, empty browser for every page","Downloads cancelled, including a test virus","Endless loops, memory bombs and huge pages stopped safely","“Checking your browser” pages recorded, never answered","Our own page that hides from foreign visitors was caught from Lagos","The browser's own sandbox stayed on in every one of the 1,991 loads"],"standIns":{"brands":5,"names":39423,"registered":32,"live":12,"pageTypes":[{"k":"Empty or error page","v":8},{"k":"Unrelated business","v":3},{"k":"Parked or for sale","v":1}],"copies":0},"source":"Test 3: 1,991 page loads in locked boxes from Lagos, Ireland and Cape Town"},"safetyTests":[{"Safety test":"Never types or clicks","What happened":"A check of the capture code found no typing, clicking, pressing, filling or file picking."},{"Safety test":"Never submits a form","What happened":"Our test login tried to submit on its own six ways: on load, on a timer, by fetch, by XMLHttpRequest, by beacon and by an automatic form. Our server received page requests only."},{"Safety test":"No keys inside","What happened":"A probe started like every capture found no cloud keys, no credential files and no route to the cloud's own metadata service."},{"Safety test":"No way into private networks","What happened":"Private addresses, the host itself and the network's resolver were unreachable. The filter dropped 38 attempts during the safety jobs."},{"Safety test":"Not fooled by pointing names inward","What happened":"Names set up to resolve to private addresses got no answer."},{"Safety test":"A fresh browser every time","What happened":"Cookies, local storage, a database and a service worker set by one page were gone for the next."},{"Safety test":"Downloads cancelled","What happened":"A test virus and a 100 MB file were both cancelled; at most 2.9 MB of the large file left the server first."},{"Safety test":"Bad pages stopped safely","What happened":"An endless loop was stopped at about 81 seconds, a memory bomb crashed only its own tab, a redirect loop ended in an error and a 400,000 element page loaded. Every next job ran normally."},{"Safety test":"“Checking your browser” pages","What happened":"Recorded as blocked, with no interaction."},{"Safety test":"Hidden traps caught","What happened":"Our page that shows a fake login only to phones in Lagos showed it to the Lagos phone capture and to no other."},{"Safety test":"The browser's own sandbox","What happened":"Stayed on inside the locked box in all 1,991 loads."}],"byCityAndList":[{"City and list":"Lagos, PhishTank","Loads":400,"Live pages":"77 of 200","Live pages captured":"92.9%","Challenge pages":"5.0%","Typical, slowest 5%":"10.5 s, 23.1 s"},{"City and list":"Ireland, PhishTank","Loads":400,"Live pages":"77 of 200","Live pages captured":"95.5%","Challenge pages":"5.0%","Typical, slowest 5%":"12.7 s, 27.0 s"},{"City and list":"Cape Town, PhishTank","Loads":400,"Live pages":"77 of 200","Live pages captured":"94.8%","Challenge pages":"5.0%","Typical, slowest 5%":"14.2 s, 35.5 s"},{"City and list":"Lagos, public research set","Loads":200,"Live pages":"11 of 100","Live pages captured":"100%","Challenge pages":"3.0%","Typical, slowest 5%":"8.6 s, 14.7 s"},{"City and list":"Ireland, public research set","Loads":200,"Live pages":"11 of 100","Live pages captured":"100%","Challenge pages":"3.5%","Typical, slowest 5%":"11.0 s, 17.8 s"}],"acrossCities":[{"Cities compared":"Lagos and Ireland","Page pairs live in both":163,"Same title":"100%","Same final address":"100%","Text far apart":"1.8%","Login form in only one":0},{"Cities compared":"Lagos and Cape Town","Page pairs live in both":140,"Same title":"100%","Same final address":"100%","Text far apart":"2.9%","Login form in only one":0},{"Cities compared":"Ireland and Cape Town","Page pairs live in both":143,"Same title":"100%","Same final address":"100%","Text far apart":"2.8%","Login form in only one":0}]}