In-the-wild AI-injection surfaces observed on public web pages. Sourced from CommonCrawl passive crawls.Last updated: 11/10/2026, 01:56:35 UTC
All counts are first-seen surfaces from real CommonCrawl passive scans. No projected, modeled, or seeded values are shown on this page.
Surfaces Per Day
last 30 daysCount of first-seen surfaces per UTC day. Re-observations of the same URL+signature do not increment this series.
peak 3
Top Surface Types
Where injections are being planted on the page
- #1hidden_text154
- #2html_comment61
- #3script_literal55
- #4alt_aria18
- #5meta_tag8
- #6data_attr7
Top Attack Classes
AIIS taxonomy class for matched payloads
- #1SOUL-INJECT226
- #2UNICODE-STEGO77
Top AIIS Signatures
aiis-signatures on GitHub →Signature IDs link to the public AIIS repository. Counts are total hits observed on active surfaces.
| Signature | Hits | Distribution |
|---|---|---|
| #1AIIS-HIDDEN-JAILBREAK-DAN-01 | 120 | |
| #2AIIS-HIDDEN-ROLE-INJECT-01 | 85 | |
| #3AIIS-UNICODE-TAG-BLOCK-01 | 77 | |
| #4AIIS-ATTR-IGNORE-INST-01 | 21 |
How This Data Is Collected
HoneyMap is a passive scanner that reads WARC archives from CommonCrawl and extracts AI-injection surfaces (hidden text, HTML comments, meta tags, JSON-LD, and other vectors). Each extracted surface is matched against the public AIIS signature set.
Privacy: HoneyMap stores no user data. Matched payload text is base64-encoded at extraction time and replaced with a sanitized preview before any storage. Raw payloads are not retained on the public API path.
Counts on this page: reflect active surfaces only. Surfaces marked as mitigated, removed, or false-positive are excluded.