This product uses bloom filters to help users to identify if a domain is used as a malware domain.
Bloom filters are probabilistic space efficient data algorithm, it is generally used for checking if a given data is present in a dataset.
- Check a domain using the cli
- Use the database in a proxy (not developed)
-
Pro :
- Space efficient (database takes only few MBs)
- Quick lookup for checking if the domain is not is the set
-
Con :
- Could generate false positives
- Could not list all members of a dataset
- Locky v3 (20 seeds)
- Redis storage
- gRPC microservice
- HTTP Proxy
#> dgabloom build -b 365 -a 10
Generates bloom filter since 365 in the past and 10 days in the future.
#> dgabloom check zenithar.org
zenithar.org,false
#> dgabloom check ruoectomayrj.pw hoflddlod.org zenithar.org
ruoectomayrj.pw,true
hoflddlod.org,true
zenithar.org,false