Researchers are often able to ifer relationships between different strains or families of malware due to them using similar or identical domain names.
This can also be done by checking for domains registered by the same user, organization, or email address.