FloodMask
Collection
FloodMask is a phishing detection pipeline inspired by PhishIntention • 3 items • Updated
Part of the FloodMask phishing detection pipeline. Determines whether a webpage is actively requesting credentials -- the final gate before issuing a phishing verdict.
Screenshot -> [AWL] -> element regions -> [Logo Classifier] -> brand match -> [CRP Classifier] -> phishing verdict
A page that matches a known brand logo but does not request credentials is not classified as an active phishing page. The CRP classifier filters these cases out.
optimum.onnxruntime)ToTensor()This model uses a torchvision.transforms pipeline rather than a HuggingFace feature extractor:
from torchvision import transforms
processor = transforms.Compose([
transforms.Resize((224, 224)),
transforms.ToTensor(),
])
from PIL import Image
image = Image.open("screenshot.png").convert("RGB")
tensor = processor(image).unsqueeze(0) # add batch dim
from optimum.onnxruntime import ORTModel
model = ORTModel.from_pretrained("ashim/floodmask-crp-classifier-2026-03-06")
outputs = model(pixel_values=tensor)
CUDA_OPTIONS = {
"device_id": 0,
"arena_extend_strategy": "kNextPowerOfTwo",
"gpu_mem_limit": 2 * 1024 * 1024 * 1024,
"cudnn_conv_algo_search": "EXHAUSTIVE",
"do_copy_in_default_stream": True,
}
model = ORTModel.from_pretrained(
"ashim/floodmask-crp-classifier-2026-03-06",
provider="CUDAExecutionProvider",
provider_options=CUDA_OPTIONS,
)
@inproceedings{liu2022phishintention,
title={PhishIntention: Toward Explainable Content-based Phishing Detection through Intent Identification},
author={Liu, Ruofan and Lin, Yun and Yang, Xianglin and Ng, Siang Hwee and Divakaran, Dinil Mon and Dong, Jin Song},
booktitle={USENIX Security Symposium},
year={2022}
}