Phishing Activity: Key Statistics Year over Year comparison: May 1, 2025 - April 30, 2026

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods May 1, 2024 - April 30, 2025 and May 1, 2025 - April 30, 2026 appears in the table below.

Measurement May to April 2025 May to April 2026 Change
in
Measurement
Total number of phishing reports collected from feeds (per year) 3,916,242 7,332,093 3,415,851
Phishing attacks reported 1,963,390 4,251,720 2,288,330
Unique domain names reported for phishing 1,542,922 3,103,438 1,560,516
Maliciously registered domains reported for phishing 1,192,794 2,295,824 1,103,030
Top-level Domains (TLDs) where we observed phishing 790 854 64
gTLD Registrars that had domains under management reported for phishing 2,033 2,459 426
All Registrars that had domains under management reported for phishing 3,125 3,729 604
Hosting Networks (ASNs) where phishing web sites were reported 4,065 4,278 213
Brands targeted in phishing attacks 2,694 3,375 681
Number of phishing attacks using a subdomain reseller 202,585 432,990 230,405

Yearly Update:
Key Statistics
Year over Year:
Key Statistics		 Year over Year:
Top Level Domains		 Year over Year:
Registrars		 Year over Year:
Hosting Networks
=