This article documents the advanced hash-based fields available in the SPQL v3 preview. These fields provide enhanced fingerprinting capabilities for content, headers, paths, and structure, and are currently available on Web Scan and Torscan sources.
New Fields (SPQL v3 Preview)
The following advanced hash fields are available in preview on webscan and torscan. Full SPQL v3 support is expected later in 2026. These fields are currently visible in the UI but searchable with the SPQL v3 release.
Field | Type | Description |
|---|---|---|
HHV2 | string | Second-generation header hash value (improved version of HHV) |
KHV | string | Key-based hash value |
PIH | string | Path-based hash |
RPH | string | Response path hash |
SHP | string | Structure hash |
TNH | string | Title/name hash |
body_analysis.CCF | string | Content characteristic fingerprint |
body_analysis.FSH | string | Footer structure hash |
body_analysis.IEP | string | Inline entropy profile |
body_analysis.IEP_max_entropy | string | Maximum entropy value from the inline entropy profile |
body_analysis.LSH | string | Locality-sensitive hash |
body_analysis.MPH | string | Meta/path hash |
origin_HHV | string | Origin host hash value |
origin_HHV2 | string | Origin second-generation host hash |
SPQL v3 Preview fields
The new hash fields listed above are currently limited to webscan and torscan. They will become fully searchable with the SPQL v3 release later in 2026.