Sun Jan 15 13:04:12 CET 2017 Automatic Analysis of the domains in this capture. Results maybe be wrong. Using https://github.com/staaldraad/fastfluxanalysis FastFlux Analysis Version: 1.0 (2013) ################################ a4.bing.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | a4.bing.com. | 3438| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: a4.bing.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ accounts.google.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | accounts.google.com. | 299| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- Moran's Index ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score (0) ---- Geary's Coefficient ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score(0) ---- URL Analysis ---- [93mDomain: accounts.google.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [92mBenign[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ accounts.youtube.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | accounts.youtube.com. | 3599| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: accounts.youtube.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [92mBenign[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ api.bing.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | api.bing.com. | 1889| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: api.bing.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ clients1.google.cz Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | clients1.google.cz. | 7199| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: clients1.google.cz.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [92mBenign[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ count ################################ dns.msftncsi.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | dns.msftncsi.com. | 16| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- Moran's Index ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score (0) ---- Geary's Coefficient ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score(0) ---- URL Analysis ---- [93mDomain: dns.msftncsi.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [91mDGA[0m -- ################################ fonts.gstatic.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | fonts.gstatic.com. | 298| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: fonts.gstatic.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ img.youtube.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | img.youtube.com. | 3599| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: img.youtube.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [91mDGA[0m -- ################################ login.live.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | login.live.com. | 766| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: login.live.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ mail.bing.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | mail.bing.com. | 3599| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: mail.bing.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ mail.google.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | mail.google.com. | 86399| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: mail.google.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ mail.yahoo.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | mail.yahoo.com. | 21559| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: mail.yahoo.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ outlook.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | outlook.com. | 214| 10| 9| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-13) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (28) Classified ([91mFast-Flux[0m) Rule Based: [91mFast-Flux[0m ---- Geolocation ---- ---- Moran's Index ---- Timezones: Score (-0.15959403156) Classified ([91mFast-Flux[0m) UTM: Score (-0.410334974724) Classified ([91mFast-Flux[0m) MGRS: Score (-0.234856968757) Classified ([91mFast-Flux[0m) Combined: Score (-0.0153800813441) ---- Geary's Coefficient ---- Timezones: Score (1.27880458623) Classified ([91mFast-Flux[0m) UTM: Score (1.22031806351) Classified ([91mFast-Flux[0m) MGRS: Score (1.26124982202) Classified ([91mFast-Flux[0m) Combined: Score(1.96824131137) ---- URL Analysis ---- [93mDomain: outlook.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [92mBenign[0m Total Variation analysis (BIGRAM): [92mBenign[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ ssl.bing.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | ssl.bing.com. | 3582| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: ssl.bing.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [91mDGA[0m -- ################################ ssl.gstatic.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | ssl.gstatic.com. | 299| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- Moran's Index ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score (0) ---- Geary's Coefficient ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score(0) ---- URL Analysis ---- [93mDomain: ssl.gstatic.com.[0m Entropy analysis (UNIGRAM): [92mBenign[0m Entropy analysis (BIGRAM): [92mBenign[0m Probability analysis (UNIGRAM): [92mBenign[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [92mBenign[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [92mBenign[0m Bayesian analysis (BIGRAM): [91mDGA[0m -- ################################ trans_id ################################ w.google.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | w.google.com. | 86399| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: w.google.com.[0m Entropy analysis (UNIGRAM): [91mDGA[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [91mDGA[0m Probability analysis (BIGRAM): [92mBenign[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [91mDGA[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ www.bing.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | www.bing.com. | 14| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: www.bing.com.[0m Entropy analysis (UNIGRAM): [91mDGA[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [91mDGA[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [91mDGA[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ www.facebook.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | www.facebook.com. | 3235| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: www.facebook.com.[0m Entropy analysis (UNIGRAM): [91mDGA[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [91mDGA[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [91mDGA[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ www.googleadservices.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | www.googleadservices.com.| 299| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: www.googleadservices.com.[0m Entropy analysis (UNIGRAM): [91mDGA[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [91mDGA[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [91mDGA[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ www.google.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | www.google.com. | 299| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- Moran's Index ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score (0) ---- Geary's Coefficient ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score(0) ---- URL Analysis ---- [93mDomain: www.google.com.[0m Entropy analysis (UNIGRAM): [91mDGA[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [91mDGA[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [91mDGA[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ www.google.cz Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | www.google.cz. | 299| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-25) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (7) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- Moran's Index ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score (0) ---- Geary's Coefficient ---- Timezones: Score (0) Classified ([92mClean[0m) UTM: Score (0) Classified ([92mClean[0m) MGRS: Score (0) Classified ([92mClean[0m) Combined: Score(0) ---- URL Analysis ---- [93mDomain: www.google.cz.[0m Entropy analysis (UNIGRAM): [91mDGA[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [91mDGA[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [91mDGA[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [92mBenign[0m -- ################################ www.msftncsi.com Qname |TTL |A Records |Ranges |ASNs |Countries |Nameservers | www.msftncsi.com. | 846| 1| 1| 1| 1| 0| ---- Fast-Flux Scores ---- Modified Thorsten/Holz: Score (-30) Classified ([92mClean[0m) Modified Jaroslaw/Patrycja: Score (6) Classified ([92mClean[0m) Rule Based: [92mClean[0m ---- Geolocation ---- ---- URL Analysis ---- [93mDomain: www.msftncsi.com.[0m Entropy analysis (UNIGRAM): [91mDGA[0m Entropy analysis (BIGRAM): [91mDGA[0m Probability analysis (UNIGRAM): [91mDGA[0m Probability analysis (BIGRAM): [91mDGA[0m Total Variation analysis (UNIGRAM): [91mDGA[0m Total Variation analysis (BIGRAM): [91mDGA[0m Naive-Bayesian analysis (UNIGRAM): [91mDGA[0m Naive-Bayesian analysis (BIGRAM): [92mBenign[0m Bayesian analysis (UNIGRAM): [91mDGA[0m Bayesian analysis (BIGRAM): [92mBenign[0m --