On May 1, 2026, at 03:40, Ching Chiao via Gnso-dnsabuse-pdp <gnso-dnsabuse-pdp@icann.org> wrote:

Dear colleagues, 

Recently my research team completed an analysis of ~4.3 million domains spanning 2025-12-01 to 2026-03-31, identifying approximately 1.25 million potential clusters (i.e. associated domain groups).

Here's our cluster breakdown by detection strategy:

• Prefix + TLD clustering (Strategy A): ~469K clusters — domains sharing a fixed alphanumeric prefix with variant suffixes under the same TLD. (example below)

• Exact apex clustering (Strategy B): ~726K clusters — identical second-level domain registered across multiple TLDs.

• N-gram fuzzy clustering (Strategy C): ~50K clusters — near-duplicate apex names detected via trigram locality-sensitive hashing.

<image.png>

Happy to share the original report / ADC group file offline once it's available. Hope this further helps shape the answers to Charter Question 2. 

Thanks! 

Best,

Ching 

Ching Chiao 

Head of APAC & Corporate Development

Check our latest Internet Abuse Signal research: https://main.whoisxmlapi.com/blog/to-cache-a-predator-ilovepoop-toolkit-react2shell-cve-2025-55182

WhoisXMLAPI.com

中文：https://zh.main.whoisxmlapi.com/

日本语 ：https://ja.main.whoisxmlapi.com/

LinkedIn : https://www.linkedin.com/in/chiao/ 

Book a meeting now: https://calendar.app.google/9neWrkwvhPHRqGZ86

_______________________________________________
Gnso-dnsabuse-pdp mailing list -- gnso-dnsabuse-pdp@icann.org
To unsubscribe send an email to gnso-dnsabuse-pdp-leave@icann.org