Phishing Activity: Key Statistics
Quarter over Quarter comparison: August 1, 2022 - October 31, 2022

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods May 1 – July 31, 2022 and August 1, 2022 – October 31, 2022 appears in the table below.

Measurement May to July 2022 August to October 2022 Change
in
Measurement
Total number of phishing reports collected from feeds (per quarter) 1,524,800 1,978,307 453,507
Phishing attacks reported 404,914 568,856 163,942
Unique domain names reported for phishing 248,414 296,540 48,126
Maliciously registered domains reported for phishing 163,157 207,889 44,732
Top-level Domains (TLDs) where we observed phishing 561 567 6
gTLD Registrars that had domains under management reported for phishing 502 575 73
All Registrars that had domains under management reported for phishing 1,191 1,309 118
Hosting Networks (ASNs) where phishing web sites were reported 2,483 2,675 192
Brands targeted in phishing attacks 1,414 1,368 -46