Paper Citation Record · LEDGER

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing

As of 21 August 2026, this Paper Citation Record lists 38 of 38 outbound references and 0 inbound Pith citation observations for arXiv:2608.00643.

A citation records a reference. It does not transfer a finding from one paper to another.

pith.paper-citation-record.v1
2608.00643 v1

Coverage vector

measured 38 of 38 reference resolution

Typed states for the displayed outbound observations.

Source: paper_references, paper_reference_links, observed 2026-08-04T01:33:03.544532Z

measured 38 of 38 standing notices

One-hop event checks from named stored sources.

Source: scholarly_work_events, retraction_status_cache, observed 2026-08-21T06:32:19.484+00:00

measured 0 of 0 inbound itemization

Pith citing papers itemized under the disclosed page cap.

Source: paper_references, paper_reference_links

measured 0 of 1 external citation measurements

A source-named dated measurement, never combined with another source.

Source: cited_works

Reference resolution

38 of 38 outbound references displayed

verified exact0
verified fuzzy0
unresolved38
parse uncertain0
malformed identifier0
metadata mismatch0

External citation measurements

No source-named external measurement is stored.

Outbound references

Observation 86634f00-cb70-4031-9364-e82529b3b1f9 · outbound

This paper cites Hunting for invisibility: Characterizing and detecting malicious web infrastructures through server visibility analysis,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Hunting for invisibility: Characterizing and detecting malicious web infrastructures through server visibility analysis,

Reference 1

Resolution: unresolved; no resolver link, observed 2026-08-04T01:32:59.933025Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e4faa863-0a9c-48e6-8cde-bee41eb88d78 · outbound

This paper cites A long-term perspective of the internet susceptibility to covert channels,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing A long-term perspective of the internet susceptibility to covert channels,

Reference 2

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.072335Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3fa926de-d4e8-40d6-a6ef-5df6fa7e9b88 · outbound

This paper cites Assessing and exploiting domain name misinformation,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Assessing and exploiting domain name misinformation,

Reference 3

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.164848Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e6f5cdcf-aadd-41df-8a8c-57cbeac2a10e · outbound

This paper cites Blocking- resistant communication through domain fronting,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Blocking- resistant communication through domain fronting,

Reference 4

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.259238Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ee11367c-84f8-4f14-99a5-842e191460c1 · outbound

This paper cites Deniable upload and download via passive participation,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Deniable upload and download via passive participation,

Reference 5

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.434209Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4b634266-48ce-4bdf-b6d3-07e853f940de · outbound

This paper cites Hiding in plain sight: An empirical study of web application abuse in malware,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Hiding in plain sight: An empirical study of web application abuse in malware,

Reference 6

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.540210Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3e15fa4d-6d62-4d31-a50b-e1d0d92cb90e · outbound

This paper cites Domain shadowing: Leveraging content delivery networks for robust{Blocking-Resistant}communications,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Domain shadowing: Leveraging content delivery networks for robust{Blocking-Resistant}communications,

Reference 7

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.622747Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7e831bdc-dc47-4f23-872e-96686e04ccac · outbound

This paper cites Censorship evasion with unidentified protocol generation,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Censorship evasion with unidentified protocol generation,

Reference 8

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.745093Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation e4cafeea-9520-43fa-b598-48e4fee451d2 · outbound

This paper cites Discov- ering and measuring CDNs prone to domain fronting,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Discov- ering and measuring CDNs prone to domain fronting,

Reference 9

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.870772Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1a439708-9aef-42af-948c-46411b4d53fa · outbound

This paper cites Domeye: Detecting network covert channel of domain fronting with throughput fluctuation,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Domeye: Detecting network covert channel of domain fronting with throughput fluctuation,

Reference 10

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:00.979275Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f7d809e3-09ad-4130-b1b2-6afc815387b2 · outbound

This paper cites Fakeapp: A high-precision method for domain fronting detection in real networks with neuro-symbolic integration,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Fakeapp: A high-precision method for domain fronting detection in real networks with neuro-symbolic integration,

Reference 11

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.115571Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 99f23849-758b-4bb4-8d43-9f90588d703e · outbound

This paper cites Detecting and Measuring Security Implications of Entangled Domain Verification in CDN.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Detecting and Measuring Security Implications of Entangled Domain Verification in CDN

Reference 12

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.225266Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 169a774d-ae4a-482a-8d56-c5dccb297445 · outbound

This paper cites How effective is{Multiple-Vantage-Point}domain control validation?.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing How effective is{Multiple-Vantage-Point}domain control validation?

Reference 13

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.362719Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8e04b8f3-df05-4b01-9d47-209a367ea473 · outbound

This paper cites Domain borrowing: Catch my c2 traffic if you can,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Domain borrowing: Catch my c2 traffic if you can,

Reference 14

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.426165Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 17447925-71e7-40bd-834a-6d9c6446ec75 · outbound

This paper cites (2025) Zero trust dns.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing (2025) Zero trust dns

Reference 15

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.523881Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 20eeb4f6-af75-4e41-b4f7-12400cee2946 · outbound

This paper cites Zero trust archi- tecture,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Zero trust archi- tecture,

Reference 16

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.620710Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 4b00b062-c8ea-489a-9563-46fb37f3a6e5 · outbound

This paper cites Hypertext transfer protocol (http/1.1): Message syntax and routing,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Hypertext transfer protocol (http/1.1): Message syntax and routing,

Reference 17

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.717200Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8c713a62-6143-445f-8eb5-53dd784d8e71 · outbound

This paper cites The web is smaller than it seems,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing The web is smaller than it seems,

Reference 18

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.780528Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 66179537-ce4c-467a-aeca-5fdef2d9c230 · outbound

This paper cites Cloudflare ip addresses,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Cloudflare ip addresses,

Reference 19

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.911551Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 78114453-7503-4ee5-9f29-afa0b46a04e6 · outbound

This paper cites Satellite: Joint analysis of{CDNs}and{Network-Level}interference,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Satellite: Joint analysis of{CDNs}and{Network-Level}interference,

Reference 20

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:01.978839Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 6ee0c4b8-2bce-4e42-8609-fda54f3491a6 · outbound

This paper cites Issues and requirements for server name identification (sni) encryption in tls,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Issues and requirements for server name identification (sni) encryption in tls,

Reference 21

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.069883Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 8e871586-dae4-4f5a-b33d-fcb3fe8c75d3 · outbound

This paper cites Reqsminer: Automated discovery of cdn forwarding request inconsistencies and dos attacks with grammar-based fuzzing.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Reqsminer: Automated discovery of cdn forwarding request inconsistencies and dos attacks with grammar-based fuzzing

Reference 22

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.171659Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 23ce408d-b8c8-42ac-aec5-f8ea1ae0219d · outbound

This paper cites Paint it black: Evaluating the effectiveness of malware blacklists,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Paint it black: Evaluating the effectiveness of malware blacklists,

Reference 23

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.234226Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation bd2d23cf-8f25-46ea-8a82-340c18ec964d · outbound

This paper cites Tranco: A research-oriented top sites ranking hardened against manip- ulation,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Tranco: A research-oriented top sites ranking hardened against manip- ulation,

Reference 24

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.327396Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation c8cb90f1-8483-4e82-ac28-b99c51487d9d · outbound

This paper cites A system for detecting network intruders in real-time,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing A system for detecting network intruders in real-time,

Reference 25

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.421549Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation ee5e58dc-9a1d-4f30-afdb-262d4681edc5 · outbound

This paper cites Zeek: The open source network security monitor,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Zeek: The open source network security monitor,

Reference 26

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.486900Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation db090a49-d692-433b-9fd3-82029150a088 · outbound

This paper cites Suricata: Network threat detec- tion engine,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Suricata: Network threat detec- tion engine,

Reference 27

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.547225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation cf87c7c7-6a6a-45c3-861c-67b1b3a65919 · outbound

This paper cites Opnsense: Open source firewall and routing plat- form,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Opnsense: Open source firewall and routing plat- form,

Reference 28

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.642225Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f014561e-75d0-4251-8e2e-147a05c426bd · outbound

This paper cites pfsense: Open source firewall and router platform,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing pfsense: Open source firewall and router platform,

Reference 29

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.750983Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d95e529b-b119-4e89-a5f3-674e4b4827fd · outbound

This paper cites Simhash: Hash-based similarity detection,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Simhash: Hash-based similarity detection,

Reference 30

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.813300Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 200db580-8a16-4476-977f-a9abc2859d9e · outbound

This paper cites Geolite2 free geolocation data,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Geolite2 free geolocation data,

Reference 31

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:02.899781Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation f171ee44-4e36-44ba-bd0b-b871e59c42e0 · outbound

This paper cites Domain fronting is dead, long live domain fronting: Using tls 1.3 to evade censors, bypass network defenses, and blend in with the noise,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Domain fronting is dead, long live domain fronting: Using tls 1.3 to evade censors, bypass network defenses, and blend in with the noise,

Reference 32

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:03.003859Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 7454b08c-8cc2-44ac-b6c3-eae01be33959 · outbound

This paper cites Practical censorship evasion lever- aging content delivery networks,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Practical censorship evasion lever- aging content delivery networks,

Reference 33

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:03.107855Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation d571fba1-1bbb-4390-9cdd-0f2a7a0e1cc1 · outbound

This paper cites The web is still small after more than a decade,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing The web is still small after more than a decade,

Reference 34

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:03.176801Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 50260eb3-ede1-4895-94bd-5baf36c3e6d7 · outbound

This paper cites DNS queries over HTTPS (DoH),.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing DNS queries over HTTPS (DoH),

Reference 35

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:03.258784Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation b7708438-6126-4b8b-a29d-751ae5f8ede6 · outbound

This paper cites TLS encrypted client hello,.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing TLS encrypted client hello,

Reference 36

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:03.349109Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 3ce26b8b-2966-44ff-a409-c4a98de013a0 · outbound

This paper cites Attacking DoH and ECH: Does server name encryption protect users’ privacy?.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Attacking DoH and ECH: Does server name encryption protect users’ privacy?

Reference 37

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:03.440854Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Observation 1064aec1-49d6-489c-8011-530991354bba · outbound

This paper cites Domain Name Encryption Is Not Enough: Privacy Leakage via IP-based Website Fingerprinting.

Domain Decoupling Attack: Exploiting the Validation Gap Between Protective DNS and Shared Edge Routing Domain Name Encryption Is Not Enough: Privacy Leakage via IP-based Website Fingerprinting

Reference 38

Resolution: unresolved; no resolver link, observed 2026-08-04T01:33:03.544532Z

Source-reported events for the cited work

Unavailable: canonical work link unavailable.

Pith citing papers

No inbound Pith citation observations are available.