This seems closer to Levenshtein distance than NLP classification. You could also get similar results from a soundex comparison against domain names (substituting numbers for letters when appropriate and breaking up/combining subdomains).

Even with categorization based on ASN's, there is still a high risk of false positives that would make this more a analytical process as opposed to automated inline blocking approach.