Phishing Activity: Key Statistics
Year over Year comparison: May 1, 2023 - April 30, 2024

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods May 1, 2022 - April 30, 2023 and May 1, 2023 - April 30, 2024 appears in the table below.

Measurement May to April 2023 May to April 2024 Change
in
Measurement
Total number of phishing reports collected from feeds (per year) 5,947,053 3,893,908 -2,053,145
Phishing attacks reported 1,850,392 1,897,952 47,560
Unique domain names reported for phishing 1,124,679 1,117,570 -7,109
Maliciously registered domains reported for phishing 725,520 878,111 152,591
Top-level Domains (TLDs) where we observed phishing 699 720 21
gTLD Registrars that had domains under management reported for phishing 1,200 1,951 751
All Registrars that had domains under management reported for phishing 2,394 3,047 653
Hosting Networks (ASNs) where phishing web sites were reported 4,382 4,384 2
Brands targeted in phishing attacks 4,180 3,226 -954
Number of phishing attacks using a subdomain reseller 302,086 454,948 152,862

Yearly Update:
Key Statistics
Year over Year:
Key Statistics		 Year over Year:
Top Level Domains		 Year over Year:
Registrars		 Year over Year:
Hosting Networks