On Baidu's settings page, there's a very clear on-off toggle labeled "Anti-Phishing," and I made sure it was set to ON. However, despite many hours of testing I never once saw this feature spring into action.
To find the very freshest phishing URLs, I tap into several lists of URLs that have been reported as fraudulent but not yet verified. Quite a few prove to be bad links, or pages that don't match the definition of phishing. This time around three quarters of the links weren't valid, so testing took extra long.