This invention provides a method and
system for determining the homology of illegal websites, relating to the field of
network monitoring technology. The determination method includes: using a
headless browser to realistically render the entry addresses of two websites to be determined, and recursively
crawling all pages and link information within the corresponding two-level backlink range, starting from the entry address, to obtain the corresponding raw collected data; performing data normalization and cleaning on the raw collected data to obtain the set of second-level backlink domains and statistical data of the two websites to be determined; obtaining multi-
feature data based on the set of second-level backlink domains and statistical data; and fusing the various multi-
feature data to obtain homology probability data. This invention elevates homology determination from a single, superficial similarity judgment to a comprehensive
quantitative assessment based on multiple evidence such as structure, attribution, and content, thereby significantly improving the accuracy of homology association for illegal websites disguised by methods such as domain switching, mirroring, and template reuse.