Periodic List Pruning(F2)(1) Candidate flux domain name d – d = : the time when the last DNS query for d was observed : the total number of DNS queries related to d ever seen until : the maximum TTL ever observed for d : the cumulative set of all the resolved IPs ever seen for d until time : a sequence of pairs – where 2010/3/212