{"state_type":"pith_open_graph_state","state_version":"1.0","pith_number":"pith:2025:PLACG4VM7CSW4TECW6DJEN2REQ","merge_version":"pith-open-graph-merge-v1","event_count":2,"valid_event_count":2,"invalid_event_count":0,"equivocation_count":0,"current":{"canonical_record":{"metadata":{"abstract_canon_sha256":"6b9985640c9e7168bccca8f4b1d357da047c73e6dc8b56f53870cad78e1b7bf2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T21:46:34Z","title_canon_sha256":"18df659df5e7e06f06df209caabcef396d2cfc81a85506b9fa8fcff46e331e56"},"schema_version":"1.0","source":{"id":"2502.09788","kind":"arxiv","version":1}},"source_aliases":[{"alias_kind":"arxiv","alias_value":"2502.09788","created_at":"2026-07-05T10:14:12Z"},{"alias_kind":"arxiv_version","alias_value":"2502.09788v1","created_at":"2026-07-05T10:14:12Z"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2502.09788","created_at":"2026-07-05T10:14:12Z"},{"alias_kind":"pith_short_12","alias_value":"PLACG4VM7CSW","created_at":"2026-07-05T10:14:12Z"},{"alias_kind":"pith_short_16","alias_value":"PLACG4VM7CSW4TEC","created_at":"2026-07-05T10:14:12Z"},{"alias_kind":"pith_short_8","alias_value":"PLACG4VM","created_at":"2026-07-05T10:14:12Z"}],"graph_snapshots":[{"event_id":"sha256:85a004942f029855cb3a86e00f76d2a07f062957ca24bf141dedfe9e57d32985","target":"graph","created_at":"2026-07-05T10:14:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"graph_snapshot":{"author_claims":{"count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","strong_count":0},"builder_version":"pith-number-builder-2026-05-17-v1","claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"integrity":{"available":true,"clean":true,"detectors_run":[],"endpoint":"/pith/2502.09788/integrity.json","findings":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938","summary":{"advisory":0,"by_detector":{},"critical":0,"informational":0}},"paper":{"abstract_excerpt":"Internet miscreants increasingly utilize short-lived disposable domains to launch various attacks. Existing detection mechanisms are either too late to catch such malicious domains due to limited information and their short life spans or unable to catch them due to evasive techniques such as cloaking and captcha. In this work, we investigate the possibility of detecting malicious domains early in their life cycle using a content-agnostic approach. We observe that attackers often reuse or rotate hosting infrastructures to host multiple malicious domains due to increased utilization of automatio","authors_text":"Fatih Deniz, Issa Khalil, Mohamed Nabeel, Ting Yu","cross_cats":[],"headline":"","license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T21:46:34Z","title":"MANTIS: Detection of Zero-Day Malicious Domains Leveraging Low Reputed Hosting Infrastructure"},"references":{"count":0,"internal_anchors":0,"resolved_work":0,"sample":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2502.09788","kind":"arxiv","version":1},"verdict":{"created_at":null,"id":null,"model_set":{},"one_line_summary":"","pipeline_version":null,"pith_extraction_headline":"","strongest_claim":"","weakest_assumption":""}},"verdict_id":null}}],"author_attestations":[],"timestamp_anchors":[],"storage_attestations":[],"citation_signatures":[],"replication_records":[],"corrections":[],"mirror_hints":[],"record_created":{"event_id":"sha256:666afa1caf8e3fe01191ecabfbe7559948fde73a73f43a479fd78e2b37a0b89e","target":"record","created_at":"2026-07-05T10:14:12Z","signer":{"key_id":"pith-v1-2026-05","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","signer_id":"pith.science","signer_type":"pith_registry"},"payload":{"attestation_state":"computed","canonical_record":{"metadata":{"abstract_canon_sha256":"6b9985640c9e7168bccca8f4b1d357da047c73e6dc8b56f53870cad78e1b7bf2","cross_cats_sorted":[],"license":"http://arxiv.org/licenses/nonexclusive-distrib/1.0/","primary_cat":"cs.CR","submitted_at":"2025-02-13T21:46:34Z","title_canon_sha256":"18df659df5e7e06f06df209caabcef396d2cfc81a85506b9fa8fcff46e331e56"},"schema_version":"1.0","source":{"id":"2502.09788","kind":"arxiv","version":1}},"canonical_sha256":"7ac02372acf8a56e4c82b78692375124293d8a6a96dac808cc9801a29b4aa900","receipt":{"algorithm":"ed25519","builder_version":"pith-number-builder-2026-05-17-v1","canonical_sha256":"7ac02372acf8a56e4c82b78692375124293d8a6a96dac808cc9801a29b4aa900","first_computed_at":"2026-07-05T10:14:12.084822Z","key_id":"pith-v1-2026-05","kind":"pith_receipt","last_reissued_at":"2026-07-05T10:14:12.084822Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54","receipt_version":"0.3","signature_b64":"gmLUh7024Kdkw9RNOEEcNQALjP89AYmjvnkAEwoTnHTvVba5U8VTLaUlMGdq1x1IU8pULZ2ehtUR7e3ksL6/CA==","signature_status":"signed_v1","signed_at":"2026-07-05T10:14:12.085333Z","signed_message":"canonical_sha256_bytes"},"source_id":"2502.09788","source_kind":"arxiv","source_version":1}}},"equivocations":[],"invalid_events":[],"applied_event_ids":["sha256:666afa1caf8e3fe01191ecabfbe7559948fde73a73f43a479fd78e2b37a0b89e","sha256:85a004942f029855cb3a86e00f76d2a07f062957ca24bf141dedfe9e57d32985"],"state_sha256":"3b1aa5295b4722e410ba9ad5ca9534034e8ab1a210736cb541459016202f2316"}