Skip to main content
PPPhishPondPhishing Tradecraft Intelligence

Attack · Detection · Validation

CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe
CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe

Research Desk

PhishPond

Phishing tradecraft research desk covering campaign analysis, adversary infrastructure, detection engineering, and validation workflows.

High signal for security teams who need tradecraft, not recycled filler.

Navigate

  • Home
  • Newsroom
  • Research
  • Subscribe

Signals

  • editorial@phishpond.dev
  • Research Mission & Ethics
  • Intel Brief
  • RSS Feed
  • Submit Research Tip
© 2026 PhishPond. Authorized security research use only.

GitHub RadarDual-use project

phishdestroy/destroylist

Real-time phishing & scam domain blocklist — 130k+ curated threats, 888K+ community, free API, multiple formats Primary language: HTML. 920 stars.

HTML920 stars112 forkspushed Jun 12, 2026MIT

Project links:Open GitHub projectBack to radar

README Preview

Fetched from GitHub

<img src="https://raw.githubusercontent.com/Tarikul-Islam-Anik/Animated-Fluent-Emojis/master/Emojis/Activities/Performing%20Arts.png" alt="Performing Arts" width="28" height="28" /> Destroylist: Phishing & Scam Domain Blacklist

<p align="center"> <img src="scripts/destroylist_image.png" alt="Destroylist" width="100%"/> </p>

<p align="center"> <a href="https://github.com/phishdestroy/destroylist"> <img src="https://readme-typing-svg.demolab.com?font=Fira+Code&weight=700&size=24&duration=3000&pause=1000&color=FF0000&center=true&vCenter=true&multiline=true&repeat=true&width=700&height=100&lines=%F0%9F%94%A5+150%2C068%2B+Phishing+Domains+Destroyed;%F0%9F%9B%A1%EF%B8%8F+Real-time+Threat+Intelligence;%F0%9F%8C%8D+Protecting+Users+Worldwide" alt="Typing SVG"/> </a> </p>

<p align="center"> <img src="https://github.com/phishdestroy/destroylist/actions/workflows/rootlist.yml/badge.svg" alt="Rootlist"/> <img src="https://github.com/phishdestroy/destroylist/actions/workflows/on_list_update.yml/badge.svg" alt="On List Update"/> <img src="https://github.com/phishdestroy/destroylist/actions/workflows/update_stats.yml/badge.svg" alt="Update Statistics"/> <img src="https://github.com/phishdestroy/destroylist/actions/workflows/pages.yml/badge.svg" alt="Deploy GitHub Pages"/> </p>

<p align="center"> <img src="https://img.shields.io/badge/status-maintained-FF0000?style=flat-square" alt="Status"/> <img src="https://img.shields.io/badge/license-MIT-000000?style=flat-square" alt="License"/> <img src="https://img.shields.io/badge/contributions-welcome-FF0000?style=flat-square" alt="Contributions"/> <img src="https://img.shields.io/github/last-commit/phishdestroy/destroylist?style=flat-square&color=000000" alt="Last Commit"/> <img src="https://img.shields.io/github/stars/phishdestroy/destroylist?style=flat-square&color=FF0000" alt="Stars"/> <img src="https://img.shields.io/github/forks/phishdestroy/destroylist?style=flat-square&color=000000" alt="Forks"/> </p>

<img src="https://user-images.githubusercontent.com/74038190/212284100-561aa473-3905-4a80-b561-0d28506553ee.gif" width="100%">

<img src="https://raw.githubusercontent.com/Tarikul-Islam-Anik/Animated-Fluent-Emojis/master/Emojis/Travel%20and%20places/Rocket.png" alt="Rocket" width="22" height="22" /> Quick Start

Add to Pi-hole or AdGuard Home in one click — paste this URL into your blocklist settings:

https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/hosts.txt
More formats: Hosts · AdBlock · Dnsmasq · Unbound · RPZ · API

<img src="https://user-images.githubusercontent.com/74038190/212284100-561aa473-3905-4a80-b561-0d28506553ee.gif" width="100%">

<img src="https://raw.githubusercontent.com/Tarikul-Islam-Anik/Animated-Fluent-Emojis/master/Emojis/Travel%20and%20places/High%20Voltage.png" alt="High Voltage" width="22" height="22" /> Quick Access

<details> <summary><b>Table of Contents</b></summary>

  • Quick Start
  • Live Statistics
  • Data Feeds
  • Root Lists
  • Content-Verified Feeds
  • Threat Intelligence API
  • About Destroylist
  • Workflow & Remediation
  • Fraud Victims Info
  • Appeals Process
  • Connect With Us
  • Join the Fight

</details>

Live Statistics

| Primary | Primary Live | Community | Community Live | |:-------:|:------------:|:---------:|:--------------:| | Image: README asset | Image: README asset | Image: README asset | Image: README asset |

| Primary Content | Community Content | |:---------------:|:-----------------:| | Image: README asset | Image: README asset |

| | Today | Week | Month | |:--|:-----:|:----:|:-----:| | Primary | Image: README asset | Image: README asset | Image: README asset | | Community | Image: README asset | Image: README asset | Image: README asset |

<img src="https://raw.githubusercontent.com/Tarikul-Islam-Anik/Animated-Fluent-Emojis/master/Emojis/Objects/File%20Folder.png" alt="File Folder" width="22" height="22" /> Data Feeds

| Feed | Description | Update | Download | |:-----|:------------|:------:|:--------:| | Primary | Curated phishing domains | ⚡ Real-time | ![JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/list.json) ![TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/list.txt) | | Primary Live | DNS verified active | 🕐 24h | ![JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/active_domains.json) ![TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/active_domains.txt) | | Community | Aggregated from 13+ sources | 🕐 2h | ![JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/blocklist.json) ![TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/blocklist.txt) | | Community Live | Community DNS verified | 🕐 24h | ![JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/live_blocklist.json) ![TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/live_blocklist.txt) | | Primary Content | Curated + HTTP content verified | 🕐 12h | ![JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/content_active.json) ![TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/content_active.txt) | | Community Content | Aggregated + HTTP content verified | 🕐 24h | ![JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/content_live.json) ![TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/content_live.txt) | | | False positive protection | ✋ Manual | ](https://raw.githubusercontent.com/phishdestroy/destroylist/main/allow/allowlist.json) |

[!TIP]
Production: list.json or active_domains.json · Max coverage: blocklist.json · Firewall/DNS: root lists

<details> <summary>📁 <b>All Download Formats</b> (TXT, Hosts, AdBlock, Dnsmasq, Unbound, RPZ)</summary> <br>

| Format | Primary | Primary Live | Community | Community Live | |:------:|:-------:|:------------:|:---------:|:--------------:| | TXT | ⬇️ | ⬇️ | ⬇️ | ⬇️ | | Hosts | ⬇️ | ⬇️ | ⬇️ | ⬇️ | | AdBlock | ⬇️ | ⬇️ | ⬇️ | ⬇️ | | Dnsmasq | ⬇️ | ⬇️ | ⬇️ | ⬇️ | | Unbound | ⬇️ | ⬇️ | | | | | | | | [⬇️](https://raw.githubus

Allowlist
![JSON
⬇️
⬇️
RPZ
⬇️
⬇️
⬇️