Fri Jan 13 22:18:21 CET 2017
Automatic Analysis of the domains in this capture. Results maybe be wrong.
Using https://github.com/staaldraad/fastfluxanalysis
FastFlux Analysis Version: 1.0 (2013)

################################
count

################################
dns.msftncsi.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
dns.msftncsi.com.        |      14|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: dns.msftncsi.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): DGA
--

################################
gednksfwi.in
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
gednksfwi.in.            |     599|          4|       3|     1|          2|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-26) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (14) Classified (Clean)
Rule Based: Fast-Flux

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (-0.479456089402) Classified (Fast-Flux)
UTM: Score (-0.465325688662) Classified (Fast-Flux)
MGRS: Score (-0.590867675479) Classified (Fast-Flux)
Combined: Score (-0.131824489847)
----  Geary's Coefficient ----
Timezones: Score (1.2191841341) Classified (Fast-Flux)
UTM: Score (1.21678416534) Classified (Fast-Flux)
MGRS: Score (1.19273574584) Classified (Fast-Flux)
Combined: Score(1.76940433435)

---- URL Analysis ----
Domain: gednksfwi.in.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): DGA
Probability analysis (BIGRAM): DGA
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): DGA
Naive-Bayesian analysis (BIGRAM): DGA
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): DGA
--

################################
google.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
google.com.              |     286|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: google.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
microsoft.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
microsoft.com.           |     884|          5|       5|     1|          3|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-24) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (20) Classified (Fast-Flux)
Rule Based: Fast-Flux

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (-0.148933375635) Classified (Fast-Flux)
UTM: Score (-0.215364975613) Classified (Fast-Flux)
MGRS: Score (-0.269704356054) Classified (Fast-Flux)
Combined: Score (-0.0086507760699)
----  Geary's Coefficient ----
Timezones: Score (0.945224710632) Classified (Fast-Flux)
UTM: Score (0.914857000559) Classified (Fast-Flux)
MGRS: Score (1.06784967188) Classified (Fast-Flux)
Combined: Score(0.923418138233)

---- URL Analysis ----
Domain: microsoft.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
secwento.in

################################
trans_id

################################
www.msftncsi.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
www.msftncsi.com.        |     522|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: www.msftncsi.com.
Entropy analysis (UNIGRAM): DGA
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): DGA
Probability analysis (BIGRAM): DGA
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): DGA
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): Benign
--