Destroylist: Lista Negra de Dominios de Phishing y Estafas

Destroylist

> **Se recomienda el enlace CDN de arriba** — servido a través de la CDN global de jsDelivr, sin límites de velocidad. > Espejo directo de GitHub (puede devolver 429 con tráfico intensivo): `https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/hosts.txt` > Más formatos: [Hosts](#-data-feeds) · [AdBlock](#-data-feeds) · [Dnsmasq](#-data-feeds) · [Unbound](#-data-feeds) · [RPZ](#-data-feeds) · [API](#-threat-intelligence-api) <img src="https://assets.kitploit.com/production/public/readmes/9225/66755568f640f93051ca779dd85131a85bc03d6385f7c57bdaaf388de6854fbc.gif" width="100%"> ## <img src="https://assets.kitploit.com/production/public/readmes/9225/375391e605e2336c5dda1b81c5194a94a192db9a096cf46c24c52a389dbd4d16.png" alt="High Voltage" width="22" height="22" /> Acceso Rápido <details> <summary>Tabla de Contenidos</summary> - [Inicio Rápido](#-quick-start) - [Estadísticas en Vivo](#live-statistics) - [Feeds de Datos](#-data-feeds) - [Listas Raíz](#-root-lists) - [Feeds Verificados por Contenido](#-content-verified-feeds-) - [API de Inteligencia de Amenazas](#-threat-intelligence-api) - [Acerca de Destroylist](#-about-destroylist) - [Flujo de Trabajo y Corrección](#-threat-intelligence--automated-remediation-workflow) - [Información para Víctimas de Fraude](#-key-info-for-online-fraud-victims) - [Proceso de Apelaciones](#-appeals-process) - [Conéctate Con Nosotros](#-connect-with-us) - [Únete a la Lucha](#-join-the-fight) </details> ### Estadísticas en Vivo | Primaria | Primaria en Vivo | Comunidad | Comunidad en Vivo | |:-------:|:------------:|:---------:|:--------------:| | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/count.json&style=for-the-badge&color=FF0000&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/active_count.json&style=for-the-badge&color=CC0000&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/count.json&style=for-the-badge&color=990000&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/live_count.json&style=for-the-badge&color=660000&label=) | | Contenido Primario | Contenido de la Comunidad | |:---------------:|:-----------------:| | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/content_active_count.json&style=for-the-badge&color=dc2626&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/content_active_count.json&style=for-the-badge&color=991b1b&label=) | | | Hoy | Semana | Mes | |:--|:-----:|:----:|:-----:| | **Primaria** | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/today_added.json&style=flat-square&color=FF0000&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/week_added.json&style=flat-square&color=FF0000&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/month_added.json&style=flat-square&color=FF0000&label=) | | **Comunidad** | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/today_community.json&style=flat-square&color=000000&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/week_community.json&style=flat-square&color=000000&label=) | ![](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/month_community.json&style=flat-square&color=000000&label=) | ### <img src="https://assets.kitploit.com/production/public/readmes/9225/bb78fad734ffe1195b52ffbea506a7954009d8b8d2124a6f8c076aeedb2c5d84.png" alt="File Folder" width="22" height="22" /> Feeds de Datos | Feed | Descripción | Actualización | Descargar | |:-----|:------------|:------:|:--------:| | **Primaria** | Dominios de phishing curados | ⚡ En tiempo real | [![JSON](https://img.shields.io/badge/JSON-FF0000?style=flat-square&logo=json&logoColor=white)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/list.json) [![TXT](https://img.shields.io/badge/TXT-000000?style=flat-square)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/list.txt) | | **Primaria en Vivo** | Activos verificados por DNS | 🕐 24h | [![JSON](https://img.shields.io/badge/JSON-CC0000?style=flat-square&logo=json&logoColor=white)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/active_domains.json) [![TXT](https://img.shields.io/badge/TXT-000000?style=flat-square)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/active_domains.txt) | | **Comunidad** | Agregados de más de 13 fuentes | 🕐 2h | [![JSON](https://img.shields.io/badge/JSON-990000?style=flat-square&logo=json&logoColor=white)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/blocklist.json) [![TXT](https://img.shields.io/badge/TXT-000000?style=flat-square)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/blocklist.txt) | | **Comunidad en Vivo** | Verificados por DNS de la comunidad | 🕐 24h | [![JSON](https://img.shields.io/badge/JSON-660000?style=flat-square&logo=json&logoColor=white)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/live_blocklist.json) [![TXT](https://img.shields.io/badge/TXT-000000?style=flat-square)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/live_blocklist.txt) | | **Contenido Primario** | Curados + contenido verificado por HTTP | 🕐 12h | [![JSON](https://img.shields.io/badge/JSON-dc2626?style=flat-square&logo=json&logoColor=white)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/content_active.json) [![TXT](https://img.shields.io/badge/TXT-000000?style=flat-square)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/content_active.txt) | | **Contenido de la Comunidad** | Agregados + contenido verificado por HTTP | 🕐 24h | [![JSON](https://img.shields.io/badge/JSON-991b1b?style=flat-square&logo=json&logoColor=white)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/content_live.json) [![TXT](https://img.shields.io/badge/TXT-000000?style=flat-square)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/content_live.txt) | | **Allowlist** | Protección contra falsos positivos | ✋ Manual | [![JSON](https://img.shields.io/badge/JSON-333333?style=flat-square&logo=json&logoColor=white)](https://raw.githubusercontent.com/phishdestroy/destroylist/main/allow/allowlist.json) | > [!TIP] > **Producción:** `list.json` o `active_domains.json` · **Cobertura máxima:** `blocklist.json` · **Firewall/DNS:** listas raíz <details> <summary>📁 Todos los Formatos de Descarga (TXT, Hosts, AdBlock, Dnsmasq, Unbound, RPZ)</summary> > **¿Recibes errores 429?** Usa los enlaces CDN de jsDelivr a continuación — evitan los límites de velocidad de GitHub. **A través de CDN jsDelivr (recomendado, sin límites de velocidad):** | Format | Primaria | Primaria en Vivo | Comunidad | Comunidad en Vivo | |:------:|:-------:|:------------:|:---------:|:--------------:| | **TXT** | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/domains.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary_active/domains.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community/domains.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community_active/domains.txt) | | **Hosts** | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/hosts.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary_active/hosts.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community/hosts.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community_active/hosts.txt) | | **AdBlock** | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/adblock.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary_active/adblock.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community/adblock.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community_active/adblock.txt) | | **Dnsmasq** | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/dnsmasq.conf) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary_active/dnsmasq.conf) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community/dnsmasq.conf) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community_active/dnsmasq.conf) | | **Unbound** | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/unbound.conf) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary_active/unbound.conf) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community/unbound.conf) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community_active/unbound.conf) | | **RPZ** | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/rpz.zone) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary_active/rpz.zone) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community/rpz.zone) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community_active/rpz.zone) | | **Redis** | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/redis.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary_active/redis.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community/redis.txt) | [⬇️](https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/community_active/redis.txt) | > **Redis one-liner** — carga la lista completa en un conjunto de Redis (intercambio atómico, recarga sin tiempo de inactividad): > ``` > curl -s https://cdn.jsdelivr.net/gh/phishdestroy/destroylist@main/rootlist/formats/primary/redis.txt | redis-cli --pipe > ``` > Luego consulta cualquier dominio en O(1): `SISMEMBER destroylist:primary evil-domain.com` <details> <summary>A través de raw.githubusercontent.com (puede devolver 429 con tráfico intensivo)</summary> | Format | Primaria | Primaria en Vivo | Comunidad | Comunidad en Vivo | |:------:|:-------:|:------------:|:---------:|:--------------:| | **TXT** | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary/domains.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/domains.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community/domains.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community_active/domains.txt) | | **Hosts** | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary/hosts.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/hosts.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community/hosts.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community_active/hosts.txt) | | **AdBlock** | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary/adblock.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/adblock.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community/adblock.txt) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community_active/adblock.txt) | | **Dnsmasq** | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary/dnsmasq.conf) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/dnsmasq.conf) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community/dnsmasq.conf) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community_active/dnsmasq.conf) | | **Unbound** | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary/unbound.conf) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/unbound.conf) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community/unbound.conf) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community_active/unbound.conf) | | **RPZ** | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary/rpz.zone) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/rpz.zone) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community/rpz.zone) | [⬇️](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/community_active/rpz.zone) | </details> > **Hosts** → Pi-hole, /etc/hosts, Windows · **AdBlock** → uBlock Origin, AdGuard · **Dnsmasq** → dnsmasq DNS · **Unbound** → pfSense, OPNsense · **RPZ** → BIND, Knot DNS · **Redis** → `redis-cli --pipe` carga masiva </details> ### <img src="https://assets.kitploit.com/production/public/readmes/9225/ce7d7fb4a40580532e4e27b60c441010f36f8f671cdfbb5e988e1258bd2c2bc5.png" alt="Laptop" width="22" height="22" /> Listas Raíz > [!TIP] > **Solo dominios raíz** — sin subdominios, proveedores de hosting excluidos | | Todas las Raíces | Solo en Vivo | Solo Servicios | |:--|:-:|:-:|:-:| | 🔴 **Primaria** | [JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/active_root_domains.json) · [TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/active_root_domains.txt) | [JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/online_root_domains.json) · [TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/online_root_domains.txt) | [JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/services_domains.json) · [TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/services_domains.txt) | | ⚫ **Comunidad** | [JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/community_root_domains.json) · [TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/community_root_domains.txt) | [JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/community_online_root_domains.json) · [TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/community_online_root_domains.txt) | [JSON](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/community_services_domains.json) · [TXT](https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/community_services_domains.txt) | > **Todas las Raíces** — dominios raíz limpios (sin infra) · **Solo en Vivo** — activos verificados por DNS · **Solo Servicios** — subdominios de plataformas de hosting (Vercel, Pages.dev, Netlify, etc.) <img src="https://assets.kitploit.com/production/public/readmes/9225/66755568f640f93051ca779dd85131a85bc03d6385f7c57bdaaf388de6854fbc.gif" width="100%"> ## <img src="https://assets.kitploit.com/production/public/readmes/9225/b6a803f28233508a8d026ca7dbf00c61ac4e5d863de24a7b164bc348c079cef8.webp" width="25" /> Feeds Verificados por Contenido <img src="https://assets.kitploit.com/production/public/readmes/9225/f9508aaeba939041deccda3064343b9e328d5722aac996f0efb873b9fc4885e4.webp" width="25" /> > [!NOTE] > **Verificación real de contenido HTTP** — no solo DNS, sino detección real de páginas de phishing [![Primary Content](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/dns/content_active_count.json&style=for-the-badge)](https://github.com/phishdestroy/destroylist/raw/main/dns/content_active.json) [![Community Content](https://img.shields.io/endpoint?url=https://raw.githubusercontent.com/phishdestroy/destroylist/main/community/content_active_count.json&style=for-the-badge)](https://github.com/phishdestroy/destroylist/raw/main/community/content_live.json) | Feed | Actualización | Descripción | |:-----|:------:|:------------| | **Contenido Primario** | `12h` (06:00 / 18:00 UTC) | Phishing curado con contenido activo verificado | | **Contenido de la Comunidad** | `24h` (03:00 UTC) | Feeds agregados con contenido activo verificado | > Enlaces de descarga: ver [Feeds de Datos](#-data-feeds) arriba > [!WARNING] > **Alerta de Cloaking:** Los estafadores usan cloaking para ocultar el phishing de los bots — mostrando páginas en blanco/falsas a los escáneres. Dominio **NO** en la lista de contenido ≠ seguro. ¡Usa las listas completas **Primaria** o **Comunidad** para protección completa. <img src="https://assets.kitploit.com/production/public/readmes/9225/66755568f640f93051ca779dd85131a85bc03d6385f7c57bdaaf388de6854fbc.gif" width="100%"> ## <img src="https://assets.kitploit.com/production/public/readmes/9225/8473e35500f4880a4b221b0e6b9e0232c4cd8b95dd3e0e87c47b8d1d8456935f.webp" alt="Alien Monster" width="25" height="25" /> API de Inteligencia de Amenazas <img src="https://assets.kitploit.com/production/public/readmes/9225/708e69fca236d3f5355650687e220e2d365289b763ddf4dadea90d99e53ec691.png" alt="API" width="700"/> ```mermaid %%{init: {"theme":"base", "themeVariables": { "background": "transparent", "mainBkg": "#000000", "primaryColor": "#000000", "primaryTextColor": "#FFFFFF", "primaryBorderColor": "#FF0000", "lineColor": "#FF0000", "secondaryColor": "#111111", "tertiaryColor": "#111111", "fontFamily": "Inter, system-ui, sans-serif"}, "flowchart": {"curve": "basis", "htmlLabels": true}}}%% flowchart LR Request["🌐 Client Request (Single / Bulk)"] e1@--> API["⚡ Live API api.destroy.tools"] API e2@--> Engine["🧠 Threat Engine (Risk Score 0-100)"] Engine e3@--> DB[("🗄️ Destroylist DB 1M+ Threats")] DB e4@--> Engine Engine e5@--> Response["📋 JSON Response (Severity & Status)"] classDef client fill:#000000,stroke:#333333,stroke-width:2px,color:#FFFFFF; classDef api fill:#000000,stroke:#FF0000,stroke-width:2px,color:#FFFFFF; classDef db fill:#000000,stroke:#333333,stroke-width:2px,stroke-dasharray: 5 5,color:#FFFFFF; classDef animate stroke:#FF0000,stroke-width:2px,stroke-dasharray:10 5,stroke-dashoffset:900,animation:dash 22s linear infinite; classDef animateDark stroke:#333333,stroke-width:2px,stroke-dasharray:10 5,stroke-dashoffset:900,animation:dash 22s linear infinite; class Request client; class API,Engine,Response api; class DB db; class e1,e2,e3,e5 animate; class e4 animateDark;

<details> <summary>🔧 Ejemplos rápidos de integración (URLs de suscripción · curl · Python · Bash)</summary> ### One-Click Subscribe URLs | Herramienta | Formato | URL | |:-----|:------:|:----| | **Pi-hole** | Hosts | `https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/hosts.txt` | | **AdGuard Home** | AdBlock | `https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/adblock.txt` | | **uBlock Origin** | AdBlock | `https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/adblock.txt` | | **pfSense / OPNsense (Unbound)** | Unbound | `https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/unbound.conf` | | **BIND / Knot DNS (RPZ)** | RPZ | `https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/rpz.zone` | | **Dnsmasq** | Dnsmasq | `https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/dnsmasq.conf` | > **Pi-hole** — Ajustes > Listas de bloqueo > pegar la URL de Hosts > **AdGuard Home** — Filtros > Listas de bloqueo de DNS > Añadir lista de bloqueo > pegar la URL de AdBlock > **uBlock Origin** — Ajustes > Listas de filtros > Importar > pegar la URL de AdBlock > **pfSense** — Servicios > Resolvedor DNS > pegar la URL de Unbound > **BIND/Knot** — Añadir la URL de RPZ como zona de política de respuesta ### curl Comandos de una línea```bash # Plain domain list curl -fsSL https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/domains.txt -o domains.txt # Hosts format (Pi-hole, /etc/hosts) curl -fsSL https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/hosts.txt -o hosts_blocklist.txt # AdBlock format (uBlock Origin, AdGuard) curl -fsSL https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/adblock.txt -o adblock.txt # Dnsmasq curl -fsSL https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/dnsmasq.conf -o dnsmasq_blocklist.conf # Unbound (pfSense / OPNsense) curl -fsSL https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/unbound.conf -o unbound_blocklist.conf # RPZ (BIND / Knot) curl -fsSL https://raw.githubusercontent.com/phishdestroy/destroylist/main/rootlist/formats/primary_active/rpz.zone -o rpz_blocklist.zone

<img src="https://assets.kitploit.com/production/public/readmes/9225/b44d5f0758cb8b29e42734f5d032478fbc6c2c1574e5c5dbc1042c5551cb60da.png" alt="Flujo de trabajo" width="700"/> <div align="center"> | 🔍 **DESCUBRIR** | 📤 **INFORMAR** | ⚖️ **LEGAL** | 📡 **PUBLICAR** | |:---:|:---:|:---:|:---:| | Más de 30 analizadores | Más de 50 proveedores | Cumplimiento ICANN | Tiempo real | | Registros CT, DNS | Google, Microsoft | Notificaciones de abuso | GitHub, Telegram | | Redes sociales | VirusTotal, Cloudflare | Paquetes de evidencia | Twitter, Mastodon | </div> <details> <summary>📖 Leer detalles completos del flujo de trabajo</summary> ### 🔍 Fase 1: Descubrimiento e Ingesta Preventivos 🔎 Utilizamos una red distribuida de **más de 30 analizadores propietarios** para identificar dominios maliciosos en su etapa más temprana: - **Heurística avanzada:** Monitoreo continuo de anuncios de Google (malvertising), resultados de búsqueda manipulados por SEO y campañas de redes sociales en tendencia en Twitter (X), YouTube y Telegram - **Análisis de infraestructura:** Uso de *dnstwist* y detección de typosquatting para atrapar dominios similares que apuntan a marcas establecidas - **Inteligencia comunitaria:** Ingesta en tiempo real de amenazas reportadas por la comunidad a través de nuestro bot de Telegram y fuentes de inteligencia de socios --- ### 📤 Fase 2: Contribución al Ecosistema Global Una vez que se confirma una amenaza, enviamos datos a más de **50 proveedores líderes de la industria**:``` Cloudflare Google Safe Browsing Microsoft Security VirusTotal Netcraft ESET Bitdefender Norton Safe Web Avira PhishTank Dr.Web Yandex Safe Browsing URLScan.io PolySwarm SiteReview Urlquery PhishStats PhishReport IsItPhish ThreatCenter

Método	Endpoint	Descripción
`GET`	`/v1/check?domain=`	Verificación de dominio único con puntuación de riesgo y severidad
`POST`	`/v1/check/bulk`	Verificación masiva de hasta 500 dominios por solicitud
`GET`	`/v1/search?q=`	Buscar dominios bloqueados por palabra clave
`GET`	`/v1/feed/{list}`	Descargar feeds completos de dominios (principal, comunidad, activos)
`GET`	`/v1/stats`	Estadísticas en vivo y recuentos de dominios

Granularidad	Dónde	Retención
Cada cambio	Historial de confirmaciones	Para siempre (más de 41,000 confirmaciones)
Diferencias diarias de agregados/eliminados	`changes/`	Para siempre, buscable en la búsqueda de código de GitHub
Instantáneas completas semanales y mensuales	`archives/` → Recursos de lanzamiento	Reciente en el árbol, los antiguos rotados al lanzamiento permanente

Repositorio	Descripción
namesilo-evidence	Archivo de evidencia — investigación de abuso del registrador NameSilo
nicenic-evidence	Archivo de evidencia — investigación de abuso del registrador NiceNIC
trustname-evidence	Archivo de evidencia — investigación de abuso del registrador TrustName
ScamIntelLogs	Registros de inteligencia de estafas en bruto y datos de IOC
DestroyScammers	Operaciones de exposición y desarticulación de estafadores

Lista negra curada	+40	En la lista de destrucción principal
Reportado por la comunidad	+20	Reportado por fuentes comunitarias
DNS activo	+30	El dominio actualmente resuelve
Multi-fuente	+10	Confirmado por múltiples feeds
Palabras clave sospechosas	+5 cada una	metamask, wallet, airdrop, etc.
TLD riesgoso	+5	.xyz, .top, .club, .icu, etc.

Más Populares

destroylist

Inicio Rápido

Endpoints

Puntuación de Amenazas

Integración Rápida

Acerca de Destroylist

Pipeline de datos```mermaid

Python```python

Inteligencia de Amenazas y Flujo de Trabajo de Corrección Automatizada```mermaid

📝 Fase 3: Notificaciones Legales y Soporte de Investigación

📢 Fase 4: Transparencia Pública y Alertas Comunitarias

Información Clave para Víctimas de Fraude en Línea

Casos de Uso y Archivo Histórico

Proceso de Apelación

Conéctate Con Nosotros

👾 Gráfico de Contribución Pac-Man

🔗 Investigaciones y Repositorios Relacionados

📄 Licencia

¡Únete a la Lucha!