Sun Jan 15 16:18:56 CET 2017
Automatic Analysis of the domains in this capture. Results maybe be wrong.
Using https://github.com/staaldraad/fastfluxanalysis
FastFlux Analysis Version: 1.0 (2013)

################################
BAM.NR-DATA.NET
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
BAM.NR-DATA.NET.         |    2613|          3|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-27) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (8) Classified (Clean)
Rule Based: Fast-Flux

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: BAM.NR-DATA.NET.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): Benign
--

################################
clients1.google.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
clients1.google.com.     |     230|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: clients1.google.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
clients2.google.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
clients2.google.com.     |     299|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: clients2.google.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
count

################################
cr-tools.clients.google.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
cr-tools.clients.google.com.|     299|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: cr-tools.clients.google.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
desktop-ou61ucr

################################
dl.google.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
dl.google.com.           |   86399|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: dl.google.com.
Entropy analysis (UNIGRAM): DGA
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): DGA
Probability analysis (BIGRAM): DGA
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): DGA
Naive-Bayesian analysis (BIGRAM): DGA
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): DGA
--

################################
dns.msftncsi.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
dns.msftncsi.com.        |      20|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: dns.msftncsi.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): DGA
--

################################
isatap

################################
ISATAP

################################
MC.YANDEX.RU
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
MC.YANDEX.RU.            |      30|          4|       4|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-21) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (14) Classified (Clean)
Rule Based: Fast-Flux

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: MC.YANDEX.RU.
Entropy analysis (UNIGRAM): DGA
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): DGA
Probability analysis (BIGRAM): DGA
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): DGA
Naive-Bayesian analysis (BIGRAM): DGA
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): DGA
--

################################
MOROWTYATELD.RU

################################
r1---sn-jxnoxu-2gbe.gvt1.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
r1---sn-jxnoxu-2gbe.gvt1.com.|    1799|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: r1---sn-jxnoxu-2gbe.gvt1.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): DGA
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): DGA
--

################################
r2---sn-jxnoxu-2gbe.gvt1.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
r2---sn-jxnoxu-2gbe.gvt1.com.|    1799|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: r2---sn-jxnoxu-2gbe.gvt1.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): DGA
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): DGA
--

################################
r3---sn-jxnoxu-2gbe.gvt1.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
r3---sn-jxnoxu-2gbe.gvt1.com.|    1799|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: r3---sn-jxnoxu-2gbe.gvt1.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): DGA
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): DGA
--

################################
redirector.gvt1.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
redirector.gvt1.com.     |     299|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: redirector.gvt1.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
ROPONWITHRO.COM

################################
s2.symcb.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
s2.symcb.com.            |    3249|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: s2.symcb.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
service.piriform.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
service.piriform.com.    |     287|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: service.piriform.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
sv.symcd.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
sv.symcd.com.            |    3502|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: sv.symcd.com.
Entropy analysis (UNIGRAM): DGA
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): DGA
Probability analysis (BIGRAM): DGA
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): DGA
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): Benign
--

################################
tools.google.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
tools.google.com.        |   86399|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: tools.google.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
trans_id

################################
WIN1

################################
www.piriform.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
www.piriform.com.        |    3475|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: www.piriform.com.
Entropy analysis (UNIGRAM): DGA
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): DGA
Probability analysis (BIGRAM): DGA
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): DGA
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): Benign
--