Phishing Activity: Key Statistics
Quarter over Quarter comparison: November 1, 2022 - January 31, 2023

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods August 1, 2022 - October 31, 2022 and November 1, 2022 - January 31, 2023 appears in the table below.

Measurement August to October 2022 November to January 2023 Change
in
Measurement
Total number of phishing reports collected from feeds (per quarter) 1,978,307 1,677,226 -301,081
Phishing attacks reported 568,856 564,592 -4,264
Unique domain names reported for phishing 296,540 426,364 129,824
Maliciously registered domains reported for phishing 207,889 308,467 100,578
Top-level Domains (TLDs) where we observed phishing 567 567 0
gTLD Registrars that had domains under management reported for phishing 576 661 85
All Registrars that had domains under management reported for phishing 1,309 1,302 -7
Hosting Networks (ASNs) where phishing web sites were reported 2,675 2,666 -9
Brands targeted in phishing attacks 1,368 1,238 -130
Number of phishing attacks using a subdomain reseller 84,951 60,794 -24,157