One domain seller accounts for 6% of the HSTS preload list

An analysis of Chromium's HSTS preload list from 17 October found that 5,691 of its 95,147 entries belong to a single domain seller, GKJ, all resolving to two IP addresses. Chromium purged these domains twice, in 2023 and 2025, but they returned through the same submission form.

• 5,691 of the 95,147 HSTS preload entries belong to one seller, GKJ
• All resolve to two IPs and send max-age=63072000; includeSubDomains; preload
• Chromium purged them in April 2023 and August 2025, yet they returned
• Since August 2025 the list shrank by 182 entries while GKJ's block grew by 5,286