Phishing Activity: Hosting Networks (ASNs)
Quarter over Quarter Comparison:
August 1, 2022 - October 31, 2022

For purposes of observing change over time, it is useful to compare measurements and metrics over successive reporting periods. Such comparisons illustrate whether phishing activities are increasing or decreasing, and where such changes are occurring. Such comparisons can identify hosting networks where phishing web sites or pages are concentrated and whether or not such concentration is persistent or atypical. Investigators or policy makers may focus on these hosting networks for deeper analyses.

In the table below, we use the measurement number of phishing attacks to compare the ranking of Hosting Networks (ASNs) for the May 1, 2022 - July 31, 2022 period to the ranking for the August 1, 2022 - October 31, 2022 period.

Ranking of Hosting Networks (ASNs) by Phishing Attacks, Quarter over Quarter (August to October 2022)

IPv4 Addresses Assigned Number of Phishing Attacks
Rank Hosting Provider ASN May to July 2022 August to October 2022 May to July 2022 August to October 2022 ▼
1 ▲ +3* ASN-QUADRANET-GLOBAL 8100 619,008 676,096 (+9%) 18,918 89,797 (+375%)
2 ▼ -1 AS-COLOCROSSING 36352 768,512 766,464 (-0%) 49,134 77,024 (+57%)
3 ▼ -1 CLOUDFLARENET 13335 2,419,968 2,445,312 (+1%) 38,395 55,630 (+45%)
4 ▲ +5 AMAZON-02 16509 43,143,424 44,003,328 (+2%) 7,908 19,579 (+148%)
5 GOOGLE 15169 23,109,120 15,355,904 (-34%) 16,407 17,805 (+9%)
6 ▲ +26 DEDIPATH-LLC 35913 274,688 300,032 (+9%) 849 17,686 (+1,983%)
7 ▼ -1 MICROSOFT-CORP-MSN-AS-BLOCK 8075 48,722,688 48,730,112 (0%) 12,062 17,291 (+43%)
8 ▼ -5 UNIFIEDLAYER-AS-1 46606 1,139,712 1,064,704 (-7%) 26,377 14,865 (-44%)
9 ▼ -1 DIGITALOCEAN-ASN 14061 2,720,000 2,749,184 (+1%) 8,699 10,261 (+18%)
10 ▼ -3 FASTLY 54113 534,528 533,504 (-0%) 8,740 8,610 (-1%)
11 ▼ -1 NAMECHEAP-NET 22612 104,192 104,960 (+1%) 6,334 8,400 (+33%)
12 GOOGLE-CLOUD-PLATFORM 396982 18,624,512 24,186,368 (+30%) 4,534 6,375 (+41%)
13 N/R** WEEBLY 27647 2,048 2,048 (0%) 6,765 6,009 (-11%)
14 N/R AWEX - Hostinger International Limited 204915 768 768 (0%) 7,405 4,613 (-38%)
15 OVH - OVH SAS 16276 4,125,696 4,128,256 (0%) 2,968 4,447 (+50%)
16 ▼ -5 AMAZON-AES 14618 16,412,672 16,454,400 (0%) 5,424 4,267 (-21%)
17 ▼ -3 BCPL-SG BGPNET Global ASN 64050 407,552 405,504 (-1%) 3,067 3,452 (+13%)
18 ▼ -2 AS-HOSTINGER - Hostinger International Limited 47583 132,096 140,800 (+7%) 2,922 3,154 (+8%)
19 HETZNER-AS - Hetzner Online GmbH 24940 2,296,832 2,292,992 (-0%) 2,080 2,828 (+36%)
20 ▲ +15 LGDACOM LG DACOM Corporation 3786 8,926,464 8,915,200 (-0%) 717 2,524 (+252%)

* Indicates change over prior quarter

** Indicates not ranked in prior quarter; either number of addresses or number of phishing attacks did not meet minimum threshold for ranking

In the table below, we use the metric phishing attack score to compare the ranking of Hosting Networks (ASNs) for the May 1, 2022 - July 31, 2022 period to the ranking for the August 1, 2022 - October 31, 2022 period.

Ranking of Hosting Networks (ASNs) by Phishing Attack Score, Quarter over Quarter (August to October 2022)

Hosting Providers with a minimum of 50,000 addresses assigned to the ASN and 25 phishing attacks

IPv4 Addresses Assigned Phishing Attack Score
Rank Hosting Provider ASN May to July 2022 August to October 2022 May to July 2022 August to October 2022 ▼
1 ▲ +2* ASN-QUADRANET-GLOBAL 8100 619,008 676,096 (+9%) 306 1,328 (+335%)
2 ▼ -1 AS-COLOCROSSING 36352 768,512 766,464 (-0%) 639 1,005 (+57%)
3 ▼ -1 NAMECHEAP-NET 22612 104,192 104,960 (+1%) 608 800 (+32%)
4 ▲ +25 DEDIPATH-LLC 35913 274,688 300,032 (+9%) 31 589 (+1,807%)
5 ▲ +3 CLOUDFLARENET 13335 2,419,968 2,445,312 (+1%) 159 228 (+43%)
6 AS-HOSTINGER - Hostinger International Limited 47583 132,096 140,800 (+7%) 221 224 (+1%)
7 ▲ +77 TIER-NET 397423 104,960 56,832 (-46%) 8 209 (+2,610%)
8 ▲ +2 A2HOSTING 55293 158,208 137,472 (-13%) 134 165 (+23%)
9 ▼ -2 FASTLY 54113 534,528 533,504 (-0%) 164 161 (-1%)
10 ▲ +55 SCALAXY-AS - Scalaxy B.V. 58061 67,584 53,504 (-21%) 12 154 (+1,168%)
11 ▼ -2 TIMEWEB-AS - TimeWeb Ltd. 9123 58,624 59,648 (+2%) 150 143 (-5%)
12 ▼ -7 UNIFIEDLAYER-AS-1 46606 1,139,712 1,064,704 (-7%) 231 140 (-40%)
13 ▼ -9 IS-AS-1 19318 124,416 126,976 (+2%) 282 137 (-51%)
14 ▼ -2 AS-REGRU - "Domain names registrar REG.RU", Ltd 197695 89,344 88,064 (-1%) 103 113 (+10%)
15 ▲ +80 NETWORK-SOLUTIONS-HOSTING 19871 118,528 186,368 (+57%) 6 95 (+1,407%)
16 ▼ -1 PONYNET 53667 63,232 64,000 (+1%) 88 93 (+5%)
17 ▼ -3 UCLOUD-HK-AS-AP UCLOUD INFORMATION TECHNOLOGY HK LIMITED 135377 140,032 141,568 (+1%) 98 90 (-8%)
18 ▼ -7 IMH-IAD 54641 63,744 68,352 (+7%) 105 87 (-17%)
19 ▼ -1 BCPL-SG BGPNET Global ASN 64050 407,552 405,504 (-1%) 75 85 (+13%)
20 ▼ -1 CONTABO 40021 56,064 60,160 (+7%) 74 84 (+14%)

* Indicates change over prior quarter


Quarterly Update:
Hosting Networks
Quarter over Quarter:
Key Statistics
Quarter over Quarter:
Top Level Domains
Quarter over Quarter:
Registrars
Quarter over Quarter:
Hosting Networks