How to block phishing sites and malware sites on your phone

To block phishing sites and malware sites on your phone, install EZOBLOCKER and keep the Security category on. Your phone sends its DNS lookups, encrypted, to our servers, which stop the harmful and fake sites on our lists before the page loads. It does not scan your phone, apps or files.

Last reviewed October 3, 2026

How do I block phishing sites on my phone?

  1. Install EZOBLOCKER from the App Store or Google Play.
  2. Open the app and make sure the Security category is on. In the app it is described as "Harmful and fake sites".
  3. Accept the system's VPN prompt. The app uses it only to catch DNS lookups.
  4. Tap connect.

A blocked address doesn't load. Changes take effect in about 30 seconds.

How does DNS blocking of harmful sites work?

A page can only load after your phone looks up the address of its server. EZOBLOCKER sends that lookup, encrypted, to our servers and compares it with the lists of the categories you switched on. If the address belongs to a harmful or fake site on the Security lists, the lookup gets no usable answer, and the page does not load.

This happens before any content reaches your phone. The lists stay on our servers, they refresh every 6 hours, and only DNS lookups come to us.

What counts as a harmful or fake site here?

The Security category combines four sources:

  • HaGeZi Threat Intelligence Feeds, a collection of addresses linked to threats.
  • URLhaus, run by abuse.ch, which tracks addresses used to distribute malware.
  • Block List Project Phishing, addresses of fake login and payment pages.
  • Block List Project Malware, addresses linked to malicious software.

These are open lists, and you can read where each one comes from on the blocklists page. Phishing sites are often short-lived. The 6-hour refresh keeps the lists close to current, but a brand-new address can appear before it reaches a list.

What is the difference between phishing and malware sites?

A phishing site imitates a bank, a delivery company or a login page to collect passwords and card details. A malware site tries to get you to install or run something harmful. Both need your phone to find their address first, and that lookup is where our servers step in.

What does EZOBLOCKER not do?

It is a DNS filter, and the boundary is simple:

  • It doesn't scan your phone, apps or files, and it can't remove anything already installed.
  • It doesn't inspect a page. It acts on the address, so a harmful page on an address that isn't on our lists loads normally.
  • Apps that use their own encrypted DNS or fixed IP addresses can skip a DNS filter.
  • Only one VPN can run at a time. Turning on another VPN stops EZOBLOCKER.

Treat it as one layer next to keeping your system updated, installing apps only from the official stores and double-checking unexpected links. The limits page explains these points in full.

Is the Security category on by default?

Security is one of the categories that is meant to stay on. You can see and change it in the Categories screen. If you set up Family lock, the basic family filter fallback keeps harmful sites blocked even when our servers can't be reached.

How can I test it?

Run the protection check. It tries a normal address and one test address per category. If the Security test address doesn't open while the normal one does, the category is working on your connection.

Can I block or allow a single address myself?

Yes. My list has a Blocked list and an Allowed list, with up to 250 addresses each. Subdomains follow the same rule. The Allowed list is checked before the categories, so it wins over them. The Blocked screen, which shows what was stopped, is stored only on your phone.

Does EZOBLOCKER keep a record of my browsing?

No record of the sites you visit is kept on our servers. See the privacy page for the full list of what is and isn't collected.

Questions people ask

Which lists does the Security category use?

HaGeZi Threat Intelligence Feeds, URLhaus from abuse.ch, the Block List Project Phishing list and the Block List Project Malware list. Our servers refresh them every 6 hours.

Does EZOBLOCKER scan my phone for threats?

No. It doesn't scan your phone, apps or files. It checks the address your phone is about to look up against the harmful and fake sites on our lists and stops matching ones before they load.

Can it stop a phishing link that arrives by SMS or email?

If the address in the link is on our lists, the page doesn't load when you tap it. A brand-new phishing address may not be listed yet, so keep checking links before you enter passwords or card details.

What if a safe site is blocked by mistake?

Open the Blocked screen, find the address and tap Open, or add it to the Allowed list in My list. Report it through Feedback in the app and we will take a look.