The service analyzes a DNS request log and detects if there are domain names which can be generated by a Domain Generating Algorithm (DGA). These domains are exploited by malware to register new domain names aimed at avoiding the dependency between the malware and a static domain or IP address, which would be easily blocked.