{"as_of":"2026-08-22T03:59:00Z","caps":{"database_statements":6,"inbound":100,"outbound":100},"context_digest":"sha256:ae497cd3984c6d6c30c1c4bba70948fde007a7436c0f6e35377033df36091141","coverage":[{"denominator":38,"lane":"reference_resolution","note":"Typed states for the displayed outbound observations.","records_observed":38,"source":"paper_references, paper_reference_links","source_observed_at":"2026-08-04T01:33:03.544532Z","state":"measured"},{"denominator":38,"lane":"standing_notices","note":"One-hop event checks from named stored sources.","records_observed":38,"source":"scholarly_work_events, retraction_status_cache","source_observed_at":"2026-08-21T06:32:19.484+00:00","state":"measured"},{"denominator":0,"lane":"inbound_itemization","note":"Pith citing papers itemized under the disclosed page cap.","records_observed":0,"source":"paper_references, paper_reference_links","source_observed_at":null,"state":"measured"},{"denominator":1,"lane":"external_citation_measurements","note":"A source-named dated measurement, never combined with another source.","records_observed":0,"source":"cited_works","source_observed_at":null,"state":"measured"}],"external_citation_measurements":[],"inbound":[],"links":{"evidence":"/evidence","html":"/paper/2608.00643/citation-record","integrity":"/paper/2608.00643/integrity","json":"/paper/2608.00643/citation-record.json","paper":"/paper/2608.00643"},"outbound":[{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:32:59.933025Z","title":"Hunting for invisibility: Characterizing and detecting malicious web infrastructures through server visibility analysis,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":1,"source":"pdf_text","source_observed_at":"2026-08-04T01:32:59.933025Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:486aeedc83da89d15c059817e834af98c0a79999f753788b0b06d750034691de","observation_id":"86634f00-cb70-4031-9364-e82529b3b1f9","resolution":{"observed_at":"2026-08-04T01:32:59.933025Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.072335Z","title":"A long-term perspective of the internet susceptibility to covert channels,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":2,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.072335Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:e8d5d1a2f15fe8cd6297789495db1f35677f4b92daa051d67a31970321b56d6a","observation_id":"e4faa863-0a9c-48e6-8cde-bee41eb88d78","resolution":{"observed_at":"2026-08-04T01:33:00.072335Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.164848Z","title":"Assessing and exploiting domain name misinformation,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":3,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.164848Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:26750050a8b7a5ea601c19f9ea5e63938b5109c3683ec3a74a8f5b937500bf4c","observation_id":"3fa926de-d4e8-40d6-a6ef-5df6fa7e9b88","resolution":{"observed_at":"2026-08-04T01:33:00.164848Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.259238Z","title":"Blocking- resistant communication through domain fronting,","venue":null,"work_id":null,"year":2015},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":4,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.259238Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:70e6d98bc777da3b87f078e4cce1011dfe62388e9d5929baa66a36bd7567657f","observation_id":"e6f5cdcf-aadd-41df-8a8c-57cbeac2a10e","resolution":{"observed_at":"2026-08-04T01:33:00.259238Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.434209Z","title":"Deniable upload and download via passive participation,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":5,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.434209Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:a622b8a232f6c3c5cc896fa325cfdd17781a82d2142204612d1f87af3f8e6590","observation_id":"ee11367c-84f8-4f14-99a5-842e191460c1","resolution":{"observed_at":"2026-08-04T01:33:00.434209Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.540210Z","title":"Hiding in plain sight: An empirical study of web application abuse in malware,","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":6,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.540210Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:335a957cac4d94824d65a0fd4f4e1f4255a167ba04cecff460d7f99178806613","observation_id":"4b634266-48ce-4bdf-b6d3-07e853f940de","resolution":{"observed_at":"2026-08-04T01:33:00.540210Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.622747Z","title":"Domain shadowing: Leveraging content delivery networks for robust{Blocking-Resistant}communications,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":7,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.622747Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:fd118005776bb2df7a17a13859d2f7c3b2adbd33eb3dc446f5802da21e582af3","observation_id":"3e15fa4d-6d62-4d31-a50b-e1d0d92cb90e","resolution":{"observed_at":"2026-08-04T01:33:00.622747Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.745093Z","title":"Censorship evasion with unidentified protocol generation,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":8,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.745093Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:ba00dac73168b1ccce3775f188dfe493e07bd1ec0064f0da16538bf95468c187","observation_id":"7e831bdc-dc47-4f23-872e-96686e04ccac","resolution":{"observed_at":"2026-08-04T01:33:00.745093Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.870772Z","title":"Discov- ering and measuring CDNs prone to domain fronting,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":9,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.870772Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:05b102df69ac2c46b1609133fedb0f2ba7cfe4d0c279bd334743d18bda933e7f","observation_id":"e4cafeea-9520-43fa-b598-48e4fee451d2","resolution":{"observed_at":"2026-08-04T01:33:00.870772Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:00.979275Z","title":"Domeye: Detecting network covert channel of domain fronting with throughput fluctuation,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":10,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:00.979275Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:79e4e6110ea1a00bddfc1ee4ff764543b69085a503dff4ce919d089f63a90620","observation_id":"1a439708-9aef-42af-948c-46411b4d53fa","resolution":{"observed_at":"2026-08-04T01:33:00.979275Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.115571Z","title":"Fakeapp: A high-precision method for domain fronting detection in real networks with neuro-symbolic integration,","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":11,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.115571Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:4fea24327210962ae5783b839c02b34ad274244ca88106863c073f308f2d0294","observation_id":"f7d809e3-09ad-4130-b1b2-6afc815387b2","resolution":{"observed_at":"2026-08-04T01:33:01.115571Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2409.01887","last_updated":"2024-09-03T13:27:33Z","snapshot_observed_at":"2026-08-16T13:21:46.426788Z","submitted_at":"2024-09-03T13:27:33Z","title":"Detecting and Measuring Security Implications of Entangled Domain Verification in CDN","version":1},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2409.01887","snapshot_observed_at":"2026-08-04T01:33:01.225266Z","title":"Detecting and measuring security implications of entangled domain verification in cdn,","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":12,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.225266Z"},"links":{"cited_paper":"/paper/2409.01887","citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:38476b133b33427c9ba5b370c2eda48258b04ab31871c835357a96adaee4ac25","observation_id":"99f23849-758b-4bb4-8d43-9f90588d703e","resolution":{"observed_at":"2026-08-04T01:33:01.225266Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.362719Z","title":"How effective is{Multiple-Vantage-Point}domain control validation?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":13,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.362719Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:0b05052a00cd6c6d082ac2de86e2fa9cb4ac4a90a94fc9c80a7bcd9bb19efcb9","observation_id":"169a774d-ae4a-482a-8d56-c5dccb297445","resolution":{"observed_at":"2026-08-04T01:33:01.362719Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.426165Z","title":"Domain borrowing: Catch my c2 traffic if you can,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":14,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.426165Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:bd6ea8bd73cf23c1a84969320c7dbf9b7d41bf0489688a6387d7f947624dba68","observation_id":"8e04b8f3-df05-4b01-9d47-209a367ea473","resolution":{"observed_at":"2026-08-04T01:33:01.426165Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.523881Z","title":"(2025) Zero trust dns","venue":null,"work_id":null,"year":2025},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":15,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.523881Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:6aeea64b861882c4603ea93e007775053754ddf2f7b7b19740e5547928037a36","observation_id":"17447925-71e7-40bd-834a-6d9c6446ec75","resolution":{"observed_at":"2026-08-04T01:33:01.523881Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.620710Z","title":"Zero trust archi- tecture,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":16,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.620710Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:18c7f9a04e95b7631a55c8ad8e1f047af165a6153ad54ddbe8eaef22c1c8cec2","observation_id":"20eeb4f6-af75-4e41-b4f7-12400cee2946","resolution":{"observed_at":"2026-08-04T01:33:01.620710Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.717200Z","title":"Hypertext transfer protocol (http/1.1): Message syntax and routing,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":17,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.717200Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:b84221a39c9aedaa791cffb3dbb5fdeedaf9f08d2ac96b7c9381c9b032b0f7b2","observation_id":"4b00b062-c8ea-489a-9563-46fb37f3a6e5","resolution":{"observed_at":"2026-08-04T01:33:01.717200Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.780528Z","title":"The web is smaller than it seems,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":18,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.780528Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:8957cab0095322003f97312eb01e50bc902d3e4c885a2e260e1458185f0c47ed","observation_id":"8c713a62-6143-445f-8eb5-53dd784d8e71","resolution":{"observed_at":"2026-08-04T01:33:01.780528Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.911551Z","title":"Cloudflare ip addresses,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":19,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.911551Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:93a657310b69eefbbeab7a7dc9fffde465f852411339911746a781d84e567368","observation_id":"66179537-ce4c-467a-aeca-5fdef2d9c230","resolution":{"observed_at":"2026-08-04T01:33:01.911551Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:01.978839Z","title":"Satellite: Joint analysis of{CDNs}and{Network-Level}interference,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":20,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:01.978839Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:2c8e3c41bfd0117b3864fb815dce197cf2b44a504d5bc642584ece827722cb26","observation_id":"78114453-7503-4ee5-9f29-afa0b46a04e6","resolution":{"observed_at":"2026-08-04T01:33:01.978839Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.069883Z","title":"Issues and requirements for server name identification (sni) encryption in tls,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":21,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.069883Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:e8f7b5b47017c290ee07ee63d19e652906014046528106626583c944d4889d7d","observation_id":"6ee0c4b8-2bce-4e42-8609-fda54f3491a6","resolution":{"observed_at":"2026-08-04T01:33:02.069883Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.171659Z","title":"Reqsminer: Automated discovery of cdn forwarding request inconsistencies and dos attacks with grammar-based fuzzing","venue":null,"work_id":null,"year":2024},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":22,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.171659Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:ed204b50877ca2930f22fd74387c6f228d446037c362a2d460e0a71614b1aa44","observation_id":"8e871586-dae4-4f5a-b33d-fcb3fe8c75d3","resolution":{"observed_at":"2026-08-04T01:33:02.171659Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.234226Z","title":"Paint it black: Evaluating the effectiveness of malware blacklists,","venue":null,"work_id":null,"year":2014},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":23,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.234226Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:23c19ec212463b4065bc66ccef323cff9b916f95672812e6a3a2b6709867cbb7","observation_id":"23ce408d-b8c8-42ac-aec5-f8ea1ae0219d","resolution":{"observed_at":"2026-08-04T01:33:02.234226Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.327396Z","title":"Tranco: A research-oriented top sites ranking hardened against manip- ulation,","venue":null,"work_id":null,"year":2019},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":24,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.327396Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:b1d5f6bc3f9295947026a64ced8b0c6f623b54c3faf9628920d4389037bd8fcf","observation_id":"bd2d23cf-8f25-46ea-8a82-340c18ec964d","resolution":{"observed_at":"2026-08-04T01:33:02.327396Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.421549Z","title":"A system for detecting network intruders in real-time,","venue":null,"work_id":null,"year":1998},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":25,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.421549Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:f9a1e712fac1f123a885d099faf0b0b7a25278d0ab6e9c52553daed120659254","observation_id":"c8cb90f1-8483-4e82-ac28-b99c51487d9d","resolution":{"observed_at":"2026-08-04T01:33:02.421549Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.486900Z","title":"Zeek: The open source network security monitor,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":26,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.486900Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:8df98981439e38a2c8165531ebf147c1502b37e9bb66d718070b64c8a50e9b7a","observation_id":"ee5e58dc-9a1d-4f30-afdb-262d4681edc5","resolution":{"observed_at":"2026-08-04T01:33:02.486900Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.547225Z","title":"Suricata: Network threat detec- tion engine,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":27,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.547225Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:a53e7217193708c299b77c22d37acd4c6b15c46fd3274e25103a04e3577be198","observation_id":"db090a49-d692-433b-9fd3-82029150a088","resolution":{"observed_at":"2026-08-04T01:33:02.547225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.642225Z","title":"Opnsense: Open source firewall and routing plat- form,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":28,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.642225Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:b1db27386b227bf5d9ab3ab6d7572971ebf30730974d9fe84cf8deaacfae6d41","observation_id":"cf87c7c7-6a6a-45c3-861c-67b1b3a65919","resolution":{"observed_at":"2026-08-04T01:33:02.642225Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.750983Z","title":"pfsense: Open source firewall and router platform,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":29,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.750983Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:e8dff2fffbdf4894a764969bf90cbe91cd6b4ea3553a9db90185800c6219fa7e","observation_id":"f014561e-75d0-4251-8e2e-147a05c426bd","resolution":{"observed_at":"2026-08-04T01:33:02.750983Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.813300Z","title":"Simhash: Hash-based similarity detection,","venue":null,"work_id":null,"year":2007},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":30,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.813300Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:9b035a69dc584b329051b4d32a830d5520b03f68055d1147fdfce6ba9a19a4e6","observation_id":"d95e529b-b119-4e89-a5f3-674e4b4827fd","resolution":{"observed_at":"2026-08-04T01:33:02.813300Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:02.899781Z","title":"Geolite2 free geolocation data,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":31,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:02.899781Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:fca79a709ee38ee7412cd02c9668178978a9a7176fe171b29bd37358d24ff16a","observation_id":"200db580-8a16-4476-977f-a9abc2859d9e","resolution":{"observed_at":"2026-08-04T01:33:02.899781Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:03.003859Z","title":"Domain fronting is dead, long live domain fronting: Using tls 1.3 to evade censors, bypass network defenses, and blend in with the noise,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":32,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:03.003859Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:2b48dccc66a922ac91654f9e914ccfface7cc79f31f81b757c816acf139df8d6","observation_id":"f171ee44-4e36-44ba-bd0b-b871e59c42e0","resolution":{"observed_at":"2026-08-04T01:33:03.003859Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:03.107855Z","title":"Practical censorship evasion lever- aging content delivery networks,","venue":null,"work_id":null,"year":2016},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":33,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:03.107855Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:8836c73403529d1b652c27e61b0b9e176ac01a99aa426d1075d181fb2b65f857","observation_id":"7454b08c-8cc2-44ac-b6c3-eae01be33959","resolution":{"observed_at":"2026-08-04T01:33:03.107855Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:03.176801Z","title":"The web is still small after more than a decade,","venue":null,"work_id":null,"year":2020},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":34,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:03.176801Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:9f025415baa2ea4a5f2a863c0b42bda4f30cf80951fda8f7fbce443373ffd83a","observation_id":"d571fba1-1bbb-4390-9cdd-0f2a7a0e1cc1","resolution":{"observed_at":"2026-08-04T01:33:03.176801Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:03.258784Z","title":"DNS queries over HTTPS (DoH),","venue":null,"work_id":null,"year":2018},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":35,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:03.258784Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:93b40d675eb7b0ec47da19167ddfca57bc18ae2d2211592c3059f8ff9997ee57","observation_id":"50260eb3-ede1-4895-94bd-5baf36c3e6d7","resolution":{"observed_at":"2026-08-04T01:33:03.258784Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:03.349109Z","title":"TLS encrypted client hello,","venue":null,"work_id":null,"year":2026},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":36,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:03.349109Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:bd6d217db4efeb0dfff79b6352bb3075aaf89ffa936350d655e16848539b7cd2","observation_id":"b7708438-6126-4b8b-a29d-751ae5f8ede6","resolution":{"observed_at":"2026-08-04T01:33:03.349109Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":null,"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":null,"snapshot_observed_at":"2026-08-04T01:33:03.440854Z","title":"Attacking DoH and ECH: Does server name encryption protect users’ privacy?","venue":null,"work_id":null,"year":2023},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":37,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:03.440854Z"},"links":{"citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:fb66a0ae38b2969c6f866a10353087f69cc3a443970e3c2376fbcb60ab8a4f42","observation_id":"3ce26b8b-2966-44ff-a409-c4a98de013a0","resolution":{"observed_at":"2026-08-04T01:33:03.440854Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}},{"citation":{"cited_paper":{"arxiv_id":"2102.08332","last_updated":"2021-06-16T04:53:59Z","snapshot_observed_at":"2026-08-16T18:45:09.298313Z","submitted_at":"2021-02-16T18:19:37Z","title":"Domain Name Encryption Is Not Enough: Privacy Leakage via IP-based Website Fingerprinting","version":2},"cited_work":{"arxiv_id":null,"doi":null,"metadata_source":null,"pith_arxiv_id":"2102.08332","snapshot_observed_at":"2026-08-04T01:33:03.544532Z","title":"Domain name encryption is not enough: Privacy leakage via ip-based website fingerprinting,","venue":null,"work_id":null,"year":2021},"citing_paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing","version":1},"reference_index":38,"source":"pdf_text","source_observed_at":"2026-08-04T01:33:03.544532Z"},"links":{"cited_paper":"/paper/2102.08332","citing_paper":"/paper/2608.00643"},"observation_digest":"sha256:5bb09ab3f18e7caaa9b2ed275e7869159778171dd2635e64f7e777977c2393c5","observation_id":"1064aec1-49d6-489c-8011-530991354bba","resolution":{"observed_at":"2026-08-04T01:33:03.544532Z","resolver_source":null,"status":"unresolved"},"standing_notice":{"events":[],"reason":"canonical_work_link_unavailable","source_receipts":[],"state":"unavailable"}}],"paper":{"arxiv_id":"2608.00643","last_updated":"2026-08-01T12:56:28Z","latest_version":1,"primary_category":"cs.CR","snapshot_observed_at":"2026-08-06T23:17:34.352585Z","submitted_at":"2026-08-01T12:56:28Z","title":"Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing"},"reference_resolution":{"displayed":38,"state_counts":{"malformed_identifier":0,"metadata_mismatch":0,"parse_uncertain":0,"unresolved":38,"verified_exact":0,"verified_fuzzy":0},"total_outbound_references":38},"refusal":"A citation records a reference. It does not transfer a finding from one paper to another.","schema":"pith.paper-citation-record.v1","standing_sources":[{"observed_at":"2026-08-21T06:32:19.484+00:00","source":"crossref"},{"observed_at":"2026-08-21T06:32:16.066871+00:00","source":"retraction_watch"}],"thesis":"As of 22 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2608.00643."}