Phishing Activity: Key Statistics
Quarter over Quarter comparison: February 1, 2024 - April 30, 2024

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods November 1, 2023 - January 31, 2024 and February 1, 2024 - April 30, 2024 appears in the table below.

Measurement November to January 2024 February to April 2024 Change
in
Measurement
Total number of phishing reports collected from feeds (per quarter) 997,377 1,182,534 185,157
Phishing attacks reported 505,078 693,542 188,464
Unique domain names reported for phishing 322,047 539,363 217,316
Maliciously registered domains reported for phishing 247,072 444,669 197,597
Top-level Domains (TLDs) where we observed phishing 573 638 65
gTLD Registrars that had domains under management reported for phishing 1,030 1,506 476
All Registrars that had domains under management reported for phishing 1,648 2,162 514
Hosting Networks (ASNs) where phishing web sites were reported 2,455 2,451 -4
Brands targeted in phishing attacks 1,455 1,098 -357
Number of phishing attacks using a subdomain reseller 82,833 99,457 16,624