In-the-wild AI-injection surfaces observed on public web pages. Sourced from CommonCrawl passive crawls.Last updated: 8/11/2026, 08:59:35 UTC
All counts are first-seen surfaces from real CommonCrawl passive scans. No projected, modeled, or seeded values are shown on this page.
Surfaces Per Day
last 30 daysCount of first-seen surfaces per UTC day. Re-observations of the same URL+signature do not increment this series.
Top Surface Types
Where injections are being planted on the page
- #1hidden_text157
- #2html_comment63
- #3script_literal24
- #4alt_aria20
- #5meta_tag6
- #6data_attr5
Top Attack Classes
AIIS taxonomy class for matched payloads
- #1SOUL-INJECT226
- #2UNICODE-STEGO49
Top AIIS Signatures
aiis-signatures on GitHub →Signature IDs link to the public AIIS repository. Counts are total hits observed on active surfaces.
| Signature | Hits | Distribution |
|---|---|---|
| #1AIIS-HIDDEN-JAILBREAK-DAN-01 | 124 | |
| #2AIIS-HIDDEN-ROLE-INJECT-01 | 87 | |
| #3AIIS-UNICODE-TAG-BLOCK-01 | 49 | |
| #4AIIS-ATTR-IGNORE-INST-01 | 15 |
How This Data Is Collected
HoneyMap is a passive scanner that reads WARC archives from CommonCrawl and extracts AI-injection surfaces (hidden text, HTML comments, meta tags, JSON-LD, and other vectors). Each extracted surface is matched against the public AIIS signature set.
Privacy: HoneyMap stores no user data. Matched payload text is base64-encoded at extraction time and replaced with a sanitized preview before any storage. Raw payloads are not retained on the public API path.
Counts on this page: reflect active surfaces only. Surfaces marked as mitigated, removed, or false-positive are excluded.