{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2019:GNQEDBN2UNRME2AMZ5C566BB2U","short_pith_number":"pith:GNQEDBN2","schema_version":"1.0","canonical_sha256":"33604185baa362c2680ccf45df7821d51c7d4d33a2715902053a11b914950365","source":{"kind":"arxiv","id":"1902.08454","version":1},"attestation_state":"computed","paper":{"title":"A Study of Newly Observed Hostnames and DNS Tunneling in the Wild","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dennis Tatang, Florian Quinkert, Nico Dolecki, Thorsten Holz","submitted_at":"2019-02-22T12:07:33Z","abstract_excerpt":"The domain name system (DNS) is a crucial backbone of the Internet and millions of new domains are created on a daily basis. While the vast majority of these domains are legitimate, adversaries also register new hostnames to carry out nefarious purposes, such as scams, phishing, or other types of attacks. In this paper, we present insights on the global utilization of DNS through a measurement study examining exclusively newly observed hostnames via passive DNS data analysis. We analyzed more than two billion such hostnames collected over a period of two months. Surprisingly, we find that only"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1902.08454","kind":"arxiv","version":1},"metadata":{"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2019-02-22T12:07:33Z","cross_cats_sorted":[],"title_canon_sha256":"c86eea8ece5438d51917a5d2b928303916478a0973c7161168cdba0a462d597d","abstract_canon_sha256":"99603f53244745c65cfeb566f576818c3347c9ea3e73bce1b8a61f87492a4a56"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:52:57.181151Z","signature_b64":"H9KSoWY4/HUnCUfbTuSBXXT7Y4VRKU7GItXA2pgDv2cewX8vUeFL0GIVRuRm/BhDAfdzlHYggWCP5biBZeZLBQ==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"33604185baa362c2680ccf45df7821d51c7d4d33a2715902053a11b914950365","last_reissued_at":"2026-05-17T23:52:57.180357Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:52:57.180357Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"A Study of Newly Observed Hostnames and DNS Tunneling in the Wild","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","headline":"","cross_cats":[],"primary_cat":"cs.CR","authors_text":"Dennis Tatang, Florian Quinkert, Nico Dolecki, Thorsten Holz","submitted_at":"2019-02-22T12:07:33Z","abstract_excerpt":"The domain name system (DNS) is a crucial backbone of the Internet and millions of new domains are created on a daily basis. While the vast majority of these domains are legitimate, adversaries also register new hostnames to carry out nefarious purposes, such as scams, phishing, or other types of attacks. In this paper, we present insights on the global utilization of DNS through a measurement study examining exclusively newly observed hostnames via passive DNS data analysis. We analyzed more than two billion such hostnames collected over a period of two months. Surprisingly, we find that only"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1902.08454","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1902.08454","created_at":"2026-05-17T23:52:57.180484+00:00"},{"alias_kind":"arxiv_version","alias_value":"1902.08454v1","created_at":"2026-05-17T23:52:57.180484+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1902.08454","created_at":"2026-05-17T23:52:57.180484+00:00"},{"alias_kind":"pith_short_12","alias_value":"GNQEDBN2UNRM","created_at":"2026-05-18T12:33:18.533446+00:00"},{"alias_kind":"pith_short_16","alias_value":"GNQEDBN2UNRME2AM","created_at":"2026-05-18T12:33:18.533446+00:00"},{"alias_kind":"pith_short_8","alias_value":"GNQEDBN2","created_at":"2026-05-18T12:33:18.533446+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U","json":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U.json","graph_json":"https://pith.science/api/pith-number/GNQEDBN2UNRME2AMZ5C566BB2U/graph.json","events_json":"https://pith.science/api/pith-number/GNQEDBN2UNRME2AMZ5C566BB2U/events.json","paper":"https://pith.science/paper/GNQEDBN2"},"agent_actions":{"view_html":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U","download_json":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U.json","view_paper":"https://pith.science/paper/GNQEDBN2","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1902.08454&json=true","fetch_graph":"https://pith.science/api/pith-number/GNQEDBN2UNRME2AMZ5C566BB2U/graph.json","fetch_events":"https://pith.science/api/pith-number/GNQEDBN2UNRME2AMZ5C566BB2U/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U/action/timestamp_anchor","attest_storage":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U/action/storage_attestation","attest_author":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U/action/author_attestation","sign_citation":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U/action/citation_signature","submit_replication":"https://pith.science/pith/GNQEDBN2UNRME2AMZ5C566BB2U/action/replication_record"}},"created_at":"2026-05-17T23:52:57.180484+00:00","updated_at":"2026-05-17T23:52:57.180484+00:00"}