Why Blocklists Can't Keep Up With AI-Built Phishing Sites
Attackers are spinning up throwaway phishing pages faster than defenders can list them. Researchers at Push Security argue the fix is watching what a page does, not where it lives.
Key points
- Push Security says AI tools now let criminals generate fresh phishing sites and lures faster than security vendors can add them to blocklists.
- Blocklists work by naming known-bad web addresses, so a site that only lives for a few hours often never gets listed in time.
- Push argues detection should shift into the browser, spotting the tricks a phishing page uses rather than its address.
- The change matters because email filters and web gateways still lean heavily on domain reputation.
- Ordinary users should treat any login page reached from a link, ad, or search result with fresh suspicion, even if it looks familiar.
Phishing has always been a numbers game. The attacker sends millions of lures, defenders publish a blocklist of the bad web addresses, and the race is on. AI just tilted the field.
A new writeup from Push Security, first reported by BleepingComputer, lays out why the old defence, blocklists of known-bad domains, is now consistently arriving late. Generative AI lets criminals produce convincing fake login pages, matching logos, and unique domain names in minutes. Each campaign can use a fresh site that only lives a few hours before being burned and replaced.
That is the whole point. If the site is dead before it hits a blocklist, the blocklist never protects anyone.
What is a blocklist, and why is it failing?
A blocklist is a running catalogue of web addresses known to be malicious. Email filters, web proxies, and browsers check outgoing traffic against it and block matches. It works well against reused infrastructure. It works badly against disposable infrastructure.
Push's argument is that AI has pushed attackers firmly into the disposable camp. Toolkits now auto-generate the domain name, the hosting, the HTML, and the lure copy. One campaign can burn through hundreds of unique sites. By the time a security vendor spots one and adds it to a feed, the attackers are on the next batch.
The researchers also flag a second problem: AI-written phishing emails read cleanly in any language, stripping out the clumsy grammar that used to give lures away.
What does browser-level, technique-based detection mean?
It means catching a phishing page by how it behaves, not by its address. A browser extension or built-in check can watch for the tell-tale signs of a credential-stealing page: a login form pointed at an odd destination, a fake Microsoft or Google sign-in rendered on an unrelated domain, a page trying to capture a one-time code and forward it in real time.
Those techniques stay stable even when the domain changes hourly. A brand-new site using the same trick still triggers the same detection.
Push sells a product in this space, so treat the framing accordingly. The underlying point stands on its own: signatures and reputation lists degrade the moment attackers can mass-produce unique infrastructure, and AI has made that trivial.
Old defence vs new defence
| Approach | What it checks | Where AI hurts it |
|---|---|---|
| Domain blocklist | Is this web address on a known-bad list? | Sites are burned before listing |
| Email content filter | Does the message look suspicious? | AI writes clean, native-language lures |
| Browser technique detection | Is this page behaving like a credential thief? | Behaviour is stable across new domains |
What should ordinary users do?
Assume any login page you reached by clicking a link is suspect until proven otherwise. Type the address of your bank, email, or work portal yourself, or use a saved bookmark. If a page asks for your password and then a one-time code straight after, and something feels off about the address bar, stop and go directly to the real site.
Password managers help here in a quiet way. They only auto-fill on the exact domain they saved the password for. If your manager refuses to fill a login page, that is a signal, not a bug.
Blocklists are not dead. They will keep catching lazy attackers and old campaigns. They just cannot be the main line of defence any more.
