Detecting DGA malware using NetFlow
Beyond blacklists: learning to detect malicious web sites from suspicious URLs