Visual Similarity Engine
Arx "sees" the web page just like a human user does, detecting clones regardless of the code underneath.
Phishing pages often look identical to the real login page but use completely different HTML code to evade text-based scanners. Our visual engine solves this.
Brand Identity Verification
We use advanced consistency models to identify key brand assets on the page (e.g., the Microsoft logo, Google 'G', or your company's specific branding) and verify their legitimacy.
Structural Verification
Arx analyzes the structural layout of the page. If the visual structure matches a protected brand but the domain origin is largely inconsistent, it triggers a blocking event.
Threat Correlation
In addition to visual signals, we identify reused attack infrastructure. Attackers often recycle the underlying frameworks of legitimate sites or other phishing kits.
We identify these recurring patterns across different attacks. A high-confidence match on known attack infrastructure allows us to preemptively block phishing campaigns even when they rotate domains.