phishing.army

What It Is

Phishing Army is a blocklist project for filtering phishing domains. It is not positioned as a full security product, but rather as a domain blacklist that can be consumed by Pi-hole, AdAway, Blokada, AdGuard, and other Hosts/DNS filtering systems. The page also notes that it is included in the NextDNS Threat Intelligence Feed, which suggests it is better suited as an intelligence supplement for DNS-layer anti-phishing protection.

Core Capabilities

In terms of protection type, it primarily blocks phishing domains, reducing the risk of users accessing phishing sites by preventing domain resolution or via Hosts-based blocking. The list is generated every 6 hours from reporting sources such as PhishTank, OpenPhish, Cert.pl, PhishFindR, Urlscan.io, and Phishunt.io, and uses the Anudeep whitelist and Alexa Rank analysis to reduce false positives. The difference between the standard list and the Extended Blocklist lies in subdomain handling: the extended list also includes root domains without subdomains, such as phishing.com in addition to pay.phishing.com. This makes blocking more aggressive, but may also require closer attention to false positives.

Deployment, Management, and Integration

Deployment is lightweight: as long as your existing system supports Hosts/DNS filtering, it can be integrated. The page specifically mentions that Pi-hole updates blocked domains weekly by default, and that this can be changed to daily updates by modifying the updateGravity configuration in cron. For management and alerting, the page does not provide a standalone dashboard, logs, notifications, or reporting capabilities; the actual experience depends on the platform you connect it to, such as Pi-hole, AdGuard, or NextDNS. Integration is one of its strengths, as it is compatible with many common open-source and commercial DNS filtering tools.

Pricing and Compliance

No commercial pricing or paid plans are mentioned. The page states that the work is licensed under the Creative Commons Attribution-NonCommercial 4.0 International License. Personal and non-commercial use is relatively clear, but companies or commercial redistribution scenarios should further confirm the licensing boundaries. The page does not mention compliance certifications such as ISO, SOC 2, or GDPR.

Pros, Cons, and Who It’s For

Its advantages are that it is free and easy to adopt, updates frequently, draws from multiple sources, is simple to integrate, and offers a stricter extended list option. The downside is that it only addresses domain-level blocking and cannot replace browser protection, email security gateways, EDR, or a complete security operations capability. It also does not show evidence of SLA, enterprise support, or centralized alerting. It is suitable for individuals, home networks, small office networks, security enthusiasts, and administrators who want to add phishing intelligence to an existing DNS filtering setup.

Access from China

The page does not provide information about access from mainland China, mirrors, payment, or localization support, so its accessibility from China is unknown. If access to the source site or upstream lists is unstable, alternatives to consider include NextDNS, AdGuard DNS, Pi-hole community lists, or security DNS, gateway, and email security solutions that are accessible in China.