Phishing Activity: Key Statistics Quarter over Quarter comparison: August 1, 2023 - October 31, 2023

Each reporting period, we analyze URLs, domain names, and IP addresses reported for phishing. We use these and other metadata — domain and IP address registration data, ICANN registry and registrar monthly reports, routing data, attack type, and other indicators — to report key statistics for each reporting period.

A comparison of key statistics for the periods May 1, 2023 - July 31, 2023 and August 1, 2023 - October 31, 2023 appears in the table below.

Measurement May to July 2023 August to October 2023 Change
in
Measurement
Total number of phishing reports collected from feeds (per quarter) 873,801 840,196 -33,605
Phishing attacks reported 462,293 368,377 -93,916
Unique domain names reported for phishing 176,012 173,657 -2,355
Maliciously registered domains reported for phishing 97,050 118,241 21,191
Top-level Domains (TLDs) where we observed phishing 527 500 -27
gTLD Registrars that had domains under management reported for phishing 822 619 -203
All Registrars that had domains under management reported for phishing 1,436 1,204 -232
Hosting Networks (ASNs) where phishing web sites were reported 2,540 2,465 -75
Brands targeted in phishing attacks 1,595 1,662 67
Number of phishing attacks using a subdomain reseller 189,714 108,176 -81,538