Tue Jan 24 16:23:07 CET 2017
Automatic Analysis of the domains in this capture. Results maybe be wrong.
Using https://github.com/staaldraad/fastfluxanalysis
FastFlux Analysis Version: 1.0 (2013)

################################
-

################################
API15.MQL5.COM

################################
API7.MQL5.COM

################################
AQCSUHIWQFE.US

################################
boot-1.anydesk.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
boot-1.anydesk.com.      |   83059|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: boot-1.anydesk.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
boot-2.anydesk.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
boot-2.anydesk.com.      |   58450|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: boot-2.anydesk.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
BPIST.IN

################################
count

################################
DCNCJGSTJA.EU

################################
dns.msftncsi.com
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
dns.msftncsi.com.        |      11|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: dns.msftncsi.com.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): DGA
--

################################
EDPERJFJFV.PM

################################
ERIXNOWG.NL

################################
EVHGTDKGDSEF.US

################################
EXTARRAN.COM
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
EXTARRAN.COM.            |   14399|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: EXTARRAN.COM.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): Benign
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
FJMDAVIWM.RU

################################
FKSXNBWB.DE

################################
HLTMNG.DE

################################
hp

################################
HXPRYBEEI.EU

################################
IDYEXNC.US

################################
isatap

################################
ISATAP

################################
LPQNULOVRSH.COM

################################
LPQNULOVRSH.NET

################################
MAIL.GOOGLE.COM
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
MAIL.GOOGLE.COM.         |   86399|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-30) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (6) Classified (Clean)
Rule Based: Clean

---- Geolocation ----

---- URL Analysis ----
Domain: MAIL.GOOGLE.COM.
Entropy analysis (UNIGRAM): Benign
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): Benign
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
MFXJAEWHUISK.NL

################################
MJCVURP.YT

################################
NBLDRIOM.IN

################################
NVSJUEPY.TF

################################
PCMDDV.EU

################################
PQMBFIEKT.TF

################################
relay-4a55f674.anydesk.com

################################
relay-7f9b4231.anydesk.com

################################
relay-d6835719.anydesk.com

################################
relay-ed7fd90c.anydesk.com

################################
relay-fa5d2b36.anydesk.com

################################
RRUYECY.RU

################################
SAGIOPBFCWYB.DE

################################
TESFXIDLMYFU.NL

################################
trans_id

################################
UHISPHJMIDMW.FR

################################
UTNYNISPFV.EU

################################
VLRKJPEBCDF.NL

################################
VMXBTLQXBV.IT

################################
WBOBMX.IN

################################
WIN1

################################
WWW.GOOGLE.COM
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
WWW.GOOGLE.COM.          |     299|          1|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-25) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (7) Classified (Clean)
Rule Based: Clean

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: WWW.GOOGLE.COM.
Entropy analysis (UNIGRAM): DGA
Entropy analysis (BIGRAM): DGA
Probability analysis (UNIGRAM): DGA
Probability analysis (BIGRAM): DGA
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): DGA
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): DGA
Bayesian analysis (BIGRAM): Benign
--

################################
\x01\x02__MSBROWSE__\x02

################################
XCMD01.T35.COM

################################
XHST01.T35.COM

################################
XHST01.ZXQ.NET
Qname                    |TTL     |A Records  |Ranges  |ASNs  |Countries  |Nameservers  |
XHST01.ZXQ.NET.          |     299|          4|       1|     1|          1|            0|

---- Fast-Flux Scores ----
Modified Thorsten/Holz: Score (-21) Classified (Clean)
Modified Jaroslaw/Patrycja: Score (10) Classified (Clean)
Rule Based: Fast-Flux

---- Geolocation ----
----  Moran's Index ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score (0)
----  Geary's Coefficient ----
Timezones: Score (0) Classified (Clean)
UTM: Score (0) Classified (Clean)
MGRS: Score (0) Classified (Clean)
Combined: Score(0)

---- URL Analysis ----
Domain: XHST01.ZXQ.NET.
Entropy analysis (UNIGRAM): DGA
Entropy analysis (BIGRAM): Benign
Probability analysis (UNIGRAM): Benign
Probability analysis (BIGRAM): Benign
Total Variation analysis (UNIGRAM): DGA
Total Variation analysis (BIGRAM): DGA
Naive-Bayesian analysis (UNIGRAM): Benign
Naive-Bayesian analysis (BIGRAM): Benign
Bayesian analysis (UNIGRAM): Benign
Bayesian analysis (BIGRAM): Benign
--

################################
XSTVAJUWEBR.EU

################################
YBMHB.RU

################################
YFLQUWFHH.US

################################
YRIVJSOTMHP.BIZ

################################
YRIVJSOTMHP.ORG