investigate HTML VT data - possibility of building a malicious HTML detector

[hillarysanders]

phishing, ads that you click on but can't see, download buttons that have malware or just download URLs, etc.

• the HTML includes CSS, javascript as well.
• baracuda stores malicious webpages and stuff
• how exploit kits work
• can you render the page? detect phising - e.g. if it looks like paypal but isn't --> NN --> score. Interesting. Heavy load.
• bad content often in iframes - virtual window that renders content. Tend to stick a lot of nasty redirects in iframes.