8. The computing device of claim 7 , further comprising instructions executable by the processor to: provide the query domain name as input to a second predictive model that has been trained to determine whether the query domain name was generated by a particular domain name generation algorithm, wherein the determination is based on at least one of the syntactic features of the query domain name; and receive, as output from the second predictive model, data indicating whether the query domain name was generated by the particular domain name generation algorithm.
7. A computing device comprising: a processor; and a data storage device storing instructions executable by the processor, cause the processor to: receive a query domain name; provide the query domain name as input to a predictive model that has been trained to determine whether the query domain name is an algorithmically generated domain name, wherein: the determination is based on syntactic features of the query domain name; and the syntactic features include a count of impossible character n-grams included in at least a portion of the query domain name, where n is a positive integer greater than one; and receive, as output from the predictive model, data indicating whether the query domain name is algorithmically generated.