URL analysis to detect DGAs