Collected research

Bit-squatting: DNS Hijacking Without Exploitation

Artem Dinaburg · dinaburg.org

Registering domains one bit away from popular hostnames catches traffic misdirected by random RAM and cache bit-flips in clients, with no exploit involved. Thirty bitsquats of microsoft.com, fbcdn.net, doubleclick.net and others were run for eight months, drawing Windows Update, iTunes, Facebook and crash-report requests from thousands of unique IPs.

Record

Researcher

Artem Dinaburg

Published by

dinaburg.org

Format

Whitepaper

Topic

Other

In the archive

• Collected in the 2011 research round

Tags

• dns
• typosquatting
• measurement-study
• large-scale-scan
• info-leak
• attack-chain
• owasp-a06-2021

This page is the archive's own catalogue record. The research is the work of Artem Dinaburg, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on 11 August 2026.