2. The storage medium of claim 1 , further comprising instructions executable by the processor to: receive a query domain name; provide the query domain name to the predictive model as input; and receive, as output from the predictive model, a prediction specifying that the query domain name is one of a valid domain name or an algorithmically generated domain name.
4. The storage medium of claim 2 , wherein the instructions executable to receive a query domain name include instructions to: receive a DNS query packet; and extract, from the DNS query packet, the query domain name.