Phishing Activity: Key Statistics
Quarter over Quarter comparison: May 1, 2023 - July 31, 2023

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods February 1, 2023 - April 30, 2023 and May 1, 2023 - July 31, 2023 appears in the table below.

Measurement February to April 2023 May to July 2023 Change
in
Measurement
Total number of phishing reports collected from feeds (per quarter) 766,720 873,801 107,081
Phishing attacks reported 382,422 462,293 79,871
Unique domain names reported for phishing 208,031 176,012 -32,019
Maliciously registered domains reported for phishing 140,041 97,050 -42,991
Top-level Domains (TLDs) where we observed phishing 534 527 -7
gTLD Registrars that had domains under management reported for phishing 713 822 109
All Registrars that had domains under management reported for phishing 1,320 1,436 116
Hosting Networks (ASNs) where phishing web sites were reported 2,167 2,540 373
Brands targeted in phishing attacks 2,813 1,595 -1,218
Number of phishing attacks using a subdomain reseller 102,775 189,714 86,939