Phishing Landscape 202
Year over Year Comparison, Key Statistics:
May 1, 2024 - April 30, 2025

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods May 1, 2023 - April 30, 2024 and May 1, 2024 - April 30, 2025 appears in the table below.

Measurement May to April 2024 May to April 2025 Change
in
Measurement
Total number of phishing reports collected from feeds (per year) 3,893,908 3,916,242 22,334
Phishing attacks reported 1,897,952 1,963,390 65,438
Unique domain names reported for phishing 1,117,570 1,542,922 425,352
Maliciously registered domains reported for phishing 878,111 1,192,794 314,683
Top-level Domains (TLDs) where we observed phishing 720 790 70
gTLD Registrars that had domains under management reported for phishing 1,951 2,033 82
All Registrars that had domains under management reported for phishing 3,047 3,125 78
Hosting Networks (ASNs) where phishing web sites were reported 4,384 4,065 -319
Brands targeted in phishing attacks 3,226 2,694 -532
Number of phishing attacks using a subdomain reseller 454,948 256,026 -198,922

Yearly Update:
Key Statistics
Year over Year:
Key Statistics		 Year over Year:
Top Level Domains		 Year over Year:
Registrars		 Year over Year:
Hosting Networks