Addresses are ranked independently within their family using retained passive-DNS observation hits, followed by the most recent observation and stable address ordering. Hosted-domain and host counts provide research context but do not determine position. See the complete methodology.