Skip to main content
PPPhishPondPhishing Tradecraft Intelligence

Attack · Detection · Validation

CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe
CampaignTradecraftInfrastructureDetectionResearchRadarNewsroomAboutSubscribe

Research Desk

PhishPond

Phishing tradecraft research desk covering campaign analysis, adversary infrastructure, detection engineering, and validation workflows.

High signal for security teams who need tradecraft, not recycled filler.

Navigate

  • Home
  • Newsroom
  • Research
  • Subscribe

Signals

  • editorial@phishpond.dev
  • Research Mission & Ethics
  • Intel Brief
  • RSS Feed
  • Submit Research Tip
© 2026 PhishPond. Authorized security research use only.

GitHub RadarBlue team tool

Tempest-Solutions-Company/pihole_blocklists

Pi-hole and AdguardHome Block lists updated every 24Hrs, we aim for less than 0.01% false positive rate, block malware, C&C infrastructure, phishing and banking threats 51 stars.

51 stars1 forkspushed Jun 12, 2026

Project links:Open GitHub projectBack to radar

README Preview

Fetched from GitHub

Pi-hole Blocklists

Automatically generated blocklists for Pi-hole from multiple threat intelligence sources.

Tempest Solutions is committed to making the internet safe for all. See our networking website at https://tempest-solutions.network for more details.

Github Pages Dashboard: https://tempest-solutions-company.github.io/pihole_blocklists/

💝 Support the Project

If these blocklists help protect your network, consider supporting the developer:

![ko-fi](https://ko-fi.com/J3J31HZAUU)

Last Updated: 2026-06-12 17:24:44 UTC

📊 Performance Statistics

  • Phishing Domains: 905,676
  • Malware Domains: 48,619
  • C2 Server Domains: 73,684
  • Banking Trojan Domains: 9,439
  • Update Frequency: Every 24 hours
  • False Positive Rate: <0.01% (1.6M+ legitimate domains filtered)

Available Lists

| List | Description | Domains | Download | |------|-------------|---------|----------| | Phishing | Phishing domains and URLs | 905,676 | Download | | Malware | Malware hosting & distribution sites | 48,619 | Download | | C2 Servers | Command & control servers | 73,684 | Download | | Banking Trojan | Banking trojan & financial malware | 9,439 | Download | | All Malicious | All threats combined | 1,017,120 | Download |

🚀 Quick Installation

Add these URLs to your Pi-hole blocklists:

https://raw.githubusercontent.com/Tempest-Solutions-Company/pihole_blocklists/main/phishing.txt
https://raw.githubusercontent.com/Tempest-Solutions-Company/pihole_blocklists/main/malware.txt
https://raw.githubusercontent.com/Tempest-Solutions-Company/pihole_blocklists/main/c2_servers.txt
https://raw.githubusercontent.com/Tempest-Solutions-Company/pihole_blocklists/main/banking_trojan.txt
https://raw.githubusercontent.com/Tempest-Solutions-Company/pihole_blocklists/main/all_malicious.txt

⚙️ Advanced Installation with Auto-Update

For automatic daily updates, simply add a cron job to update your Pi-hole every 24 hours:

Step 1: Add Cron Job

Add to root crontab (sudo crontab -e):

# Update Pi-hole blocklists daily at 3 AM
0 3 * * * pihole -up
Step 2: Monitor Updates (Optional)

To log the updates, you can redirect output:

# Update Pi-hole blocklists daily at 3 AM with logging
0 3 * * * pihole -up >> /var/log/pihole-update.log 2>&1
Step 3: Check Update Logs (Optional)

View the update history:

tail -f /var/log/pihole-update.log
Alternative: Weekly Updates

For weekly updates every Sunday at 3 AM:

0 3 * * 0 pihole -up

False Positive Prevention

Multiple layers of false positive prevention:

  • Legitimate Domain Lists: Top 1M (~1.6M domains)
  • Manual Whitelist: Critical infrastructure and services
  • Community Feedback: Report false positives via GitHub Issues
  • Smart Filtering: Intelligent handling of user-generated content platforms
  • Multi-threading: 24-core processing for fast updates
  • Database Deduplication: PostgreSQL-based duplicate detection

🛡️ Protection Statistics

This blocklist provides protection against:

  • ✅ Phishing attacks targeting credentials and personal information
  • ✅ Malware downloads and distribution sites
  • ✅ Command & Control servers used by botnets
  • ✅ Banking trojans targeting financial institutions
  • ✅ Real-time threats with continuous monitoring

System Requirements

  • Pi-hole version: 5.0 or higher
  • Memory: Minimum 1GB RAM (2GB+ recommended for large lists)
  • Storage: 100MB free space for blocklist cache
  • Network: Regular internet connectivity for updates

Support

  • False Positives: Report here
  • Updates: Lists are updated automatically every 24 hours
  • Donations: Support development via Ko-fi (link above)

---

Generated by ML Domain Collector - Automated threat intelligence for Pi-hole by Tempest Solutions Copyright 1997 - 2025