This product uses bloom filters to help users to identify if a domain is used as a malware domain.

Bloom filters are probabilistic space efficient data algorithm, it is generally used for checking if a given data is present in a dataset.

• Check a domain using the cli
• Use the database in a proxy (not developed)

• Pro :

  • Space efficient (database takes only few MBs)
  • Quick lookup for checking if the domain is not is the set

• Con :

  • Could generate false positives
  • Could not list all members of a dataset

• Locky v3 (20 seeds)

• Redis storage
• gRPC microservice
• HTTP Proxy

#> dgabloom build -b 365 -a 10

Generates bloom filter since 365 in the past and 10 days in the future.

#> dgabloom check zenithar.org
zenithar.org,false

#> dgabloom check ruoectomayrj.pw hoflddlod.org zenithar.org
ruoectomayrj.pw,true
hoflddlod.org,true
zenithar.org,false