Skip to content
bs-bd-intro
Real-Time Statistics

Phishing Insights Center

At Bolster, we leverage data from our CheckPhish phishing community of security researchers worldwide to provide valuable insights into the ever-evolving threat landscape of phishing and scam attacks. By analyzing billions of data points collected from thousands of active security researchers, we equip organizations with knowledge to understand the state of phishing.

Phishing Insights Center
Crowdsourced Intelligence

Daily Phishing Highlights

We collect a vast amount of data, including the total number of scans conducted daily, the number of total users, and the active organizations within our research community. These statistics help us gauge the scale and impact of phishing attacks worldwide and how the security community is responding.

Search

Total Scans Daily

5913072
User

Total CheckPhish Users

60303
People

Total CheckPhish Organizations

9953
Last scan updated on 2026/10/15 16:00:00
Uncover Phishing Campaigns

In-Depth Phishing and Scam Analysis

In addition to the phishing highlights, our analysis dives deeper into the specific characteristics of these scans of phishing attacks. We review and report on various aspects, including :

Count

Total Phishing and Scam Counts

Quantifying the number of detected phishing attempts and scams provides a clear picture of the prevalent threats faced by businesses and individuals.

Phish

456833

Scam

1547750

Total Count

2004583
Last scan updated on 2026/10/11 23:59:59
Cloud
Top Hosting Providers

Identifying hosting providers that unknowingly host phishing websites aids in collaboration between security teams and hosting providers to combat malicious activities.

Clipboard
Top Registrars

Tracking the registrars associated with phishing attacks aids in detecting and shutting down illicit domains more effectively.

Route
Top Countries of Origin

Understanding the countries where phishing campaigns originate provides vital insight into the geographic distribution of threats.

Global
Top-Level Domains (TLDs) Used

Recognizing the TLDs that are frequently abused by phishers helps identify potential sources of fraudulent activity.

Global
Categories

Identifying the top categories that attacker leverage for phishing and scam campaigns can help organizations be more alert about the risk to their industry.

1.
gambling
155481
2.
error_page
34393
3.
online_store
26416
4.
app_store
11071
5.
streaming
7079
6.
crypto
6764
7.
banking
5264
8.
tech_support
4539
9.
captcha
3784
10.
other_captcha
2902
11.
drug
2354
12.
recaptcha
1707
13.
promo_code
1476
14.
domain_parking
1452
15.
adult
1346
16.
warning
1245
17.
gift_card
1102
18.
domain_purchase
584
19.
cloudflare
286
20.
hcaptcha
137
21.
social_media
100
22.
yandex
33
23.
directory_listing
23
24.
crypto_giveaway
15
25.
traffic_stealer
1
Top IP Addresses

Analyzing IP addresses associated with phishing attacks assists in identifying potential sources of malicious activity and blocking them proactively.

172.67.134.234
29889
104.21.25.239
29889
199.36.158.100
9178
172.66.46.234
7452
172.66.45.22
7439
185.199.111.153
5612
185.199.110.153
5554
185.199.109.153
5420
185.199.108.153
5394
72.203.236.254
3615
202.228.215.58
3308
185.151.30.222
2996
142.250.73.78
2957
142.251.33.206
2945
38.180.232.120
2939
38.180.232.55
2913
142.251.45.142
2907
142.251.46.78
2793
52.52.192.191
2631
13.52.188.95
2614
142.251.34.206
2478
142.250.73.110
2463
142.250.73.142
2405
2.27.14.58
2394
142.250.69.174
2394
185.158.133.1
2208
216.198.79.1
1927
104.21.34.42
1827
158.94.209.28
1775
23.227.38.65
1707
172.67.196.250
1693
8.230.105.83
1604
46.202.161.228
1594
45.154.183.183
1566
172.67.148.45
1456
45.77.240.20
1396
5.9.139.146
1367
104.21.55.129
1363
161.69.192.105
1319
161.69.192.154
1270
23.227.38.74
1192
95.182.81.29
1123
142.251.45.129
1110
172.67.139.101
1070
104.21.65.22
1045
23.46.228.177
1037
23.59.88.228
992
51.255.209.90
978
23.46.228.175
971
76.76.21.21
957
23.59.88.230
950
142.251.46.65
868
Toolkit Analysis

Phishing Kit Metrics

In our continuous efforts to combat phishing, we closely monitor and assess phishing kits that are part of these phishing campaigns. These numbers provide important insights into the tools and techniques employed by hackers. Our analysis covers factors such as:

Search

Total Phishing Kits

Quantifying the number of phishing kits discovered allows us to gauge the proliferation of these malicious resources.

Email

Unique Drop Emails

Identifying the unique drop email addresses used for phishing attacks helps in tracking the infrastructure utilized by bad actors. A “drop email” refers to the email address that is used to collect users’ secret credentials from phishing websites.

Global Search

Domains with Victim Emails

Recognizing the domains where victim emails are being sent aids in the identification and mitigation of ongoing campaigns.

Protect Your Organization

Stop Phishing Campaigns From Targeting You

By comprehensively analyzing these scans of phishing campaigns, we gain a deeper understanding of the latest techniques and trends of hackers. This knowledge enables us to develop effective risk mitigation and phishing countermeasures to help organizations protect themselves from the growing threat of phishing and scam attacks.

Need to take down phishing and scam sites and contents?
Image of Mid Year Report Cover
Report

2026 Fraud Trends & Prediction Report

buyers-guide
Buyer’s Guide

Buyer’s Guide: Purchasing a Brand Security Solution

Image of June Webinar
Webinar

How Fraud Became a Cybersecurity Problem

Image of Takedown
One-Pager

Impersonation Takedown Website Guide