{
  "declared_links": {
    "economic_signal_ids": [],
    "relation": "topic-surface-only",
    "scan_signal_ids": []
  },
  "dek": "Evidence suggests that criminals may control a substantial share of new gTLD registrations. Although the precise scale remains contested, the article asks whether current DNS Abuse measures adequately address wider misuse of domain names.",
  "desk": "connectivity",
  "event_id": "event-37f1382e3ea5802224421929",
  "evidence_groups": [
    {
      "group_id": "ripe-community-research",
      "roles": [
        "research"
      ],
      "source_ids": [
        "ripe-labs"
      ]
    }
  ],
  "evidence_refs": [
    {
      "independence_group": "ripe-community-research",
      "item_id": "item-5bb78041e75db7279e6aa365",
      "published_at": "2026-08-24T11:30:19Z",
      "role": "research",
      "source_id": "ripe-labs",
      "source_name": "RIPE Labs",
      "title": "DNS Abuse and Criminal Infrastructure: Beyond Definitions and Blocklists",
      "url": "https://labs.ripe.net/author/andrew_campling/dns-abuse-and-criminal-infrastructure-beyond-definitions-and-blocklists/",
      "version_id": "itemv-88246283a05975e4ddd9c1d9"
    }
  ],
  "evidence_strength": "single-source",
  "headline": "DNS Abuse and Criminal Infrastructure: Beyond Definitions and Blocklists",
  "lead": false,
  "lead_reason": "Current single-source metadata is retained but not promoted as a lead.",
  "limitations": [
    "Palimpsest retained only feed title, canonical link, time, and a bounded plain-text excerpt; it did not fetch the article body.",
    "The evidence-strength label describes source structure, not truth, intent, impact, or causation.",
    "Declared instrument links are topical pointers until a separate scan or economic observation is joined by time and method.",
    "Title-similarity clustering can miss differently worded or cross-language accounts and can join closely worded updates.",
    "This dossier currently contains one independent evidence group and remains explicitly attributed."
  ],
  "mutation": {
    "kind": "unchanged",
    "previous_version_id": "eventv-252fc6890c568339f4e9cae1"
  },
  "published_at": "2026-08-24T11:30:19Z",
  "reported_facts": [
    {
      "attribution": "RIPE Labs",
      "evidence_item_id": "item-5bb78041e75db7279e6aa365",
      "published_at": "2026-08-24T11:30:19Z",
      "statement": "RIPE Labs published “DNS Abuse and Criminal Infrastructure: Beyond Definitions and Blocklists”."
    }
  ],
  "topics": [
    "connectivity",
    "measurement",
    "security",
    "technology"
  ],
  "updated_at": "2026-08-24T11:30:19Z",
  "url": "https://palimpsest.info/news/wire/event-37f1382e3ea5802224421929/",
  "version_id": "eventv-252fc6890c568339f4e9cae1"
}