Phishing Activity: Key Statistics Quarter over Quarter comparison: February 1, 2025 - April 30, 2025
Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.
A comparison of key statistics for the periods November 1, 2024 - January 31, 2025 and February 1, 2025 - April 30, 2025 appears in the table below.
| Measurement | November to January 2025 | February to April 2025 | ChangeinMeasurement |
|---|---|---|---|
| Total number of phishing reports collected from feeds (per quarter) | 1,079,131 | 958,855 | -120,276 |
| Phishing attacks reported | 704,508 | 661,783 | -42,725 |
| Unique domain names reported for phishing | 597,777 | 553,345 | -44,432 |
| Maliciously registered domains reported for phishing | 433,899 | 389,988 | -43,911 |
| Top-level Domains (TLDs) where we observed phishing | 605 | 614 | 9 |
| gTLD Registrars that had domains under management reported for phishing | 1,478 | 1,089 | -389 |
| All Registrars that had domains under management reported for phishing | 2,112 | 1,735 | -377 |
| Hosting Networks (ASNs) where phishing web sites were reported | 2,421 | 2,470 | 49 |
| Brands targeted in phishing attacks | 1,358 | 1,308 | -50 |
| Number of phishing attacks using a subdomain reseller | 49,698 | 48,126 | -1,572 |
| Quarterly Update: Key Statistics |
|||
| Quarter over Quarter: Key Statistics |
Quarter over Quarter: Top Level Domains |
Quarter over Quarter: Registrars |
Quarter over Quarter: Hosting Networks |