Skip to content
bs-bd-intro
Real-Time Statistics

Phishing Insights Center

At Bolster, we leverage data from our CheckPhish phishing community of security researchers worldwide to provide valuable insights into the ever-evolving threat landscape of phishing and scam attacks. By analyzing billions of data points collected from thousands of active security researchers, we equip organizations with knowledge to understand the state of phishing.

Phishing Insights Center
Crowdsourced Intelligence

Daily Phishing Highlights

We collect a vast amount of data, including the total number of scans conducted daily, the number of total users, and the active organizations within our research community. These statistics help us gauge the scale and impact of phishing attacks worldwide and how the security community is responding.

Search

Total Scans Daily

4284803
User

Total CheckPhish Users

59698
People

Total CheckPhish Organizations

9874
Last scan updated on 2026/09/24 17:00:00
Uncover Phishing Campaigns

In-Depth Phishing and Scam Analysis

In addition to the phishing highlights, our analysis dives deeper into the specific characteristics of these scans of phishing attacks. We review and report on various aspects, including :

Count

Total Phishing and Scam Counts

Quantifying the number of detected phishing attempts and scams provides a clear picture of the prevalent threats faced by businesses and individuals.

Phish

617877

Scam

1287122

Total Count

1904999
Last scan updated on 2026/09/20 23:59:59
Cloud
Top Hosting Providers

Identifying hosting providers that unknowingly host phishing websites aids in collaboration between security teams and hosting providers to combat malicious activities.

Clipboard
Top Registrars

Tracking the registrars associated with phishing attacks aids in detecting and shutting down illicit domains more effectively.

Route
Top Countries of Origin

Understanding the countries where phishing campaigns originate provides vital insight into the geographic distribution of threats.

Global
Top-Level Domains (TLDs) Used

Recognizing the TLDs that are frequently abused by phishers helps identify potential sources of fraudulent activity.

Global
Categories

Identifying the top categories that attacker leverage for phishing and scam campaigns can help organizations be more alert about the risk to their industry.

1.
gambling
126446
2.
streaming
74967
3.
online_store
35698
4.
error_page
30958
5.
app_store
17432
6.
crypto
7527
7.
banking
7433
8.
other_captcha
6002
9.
captcha
4689
10.
tech_support
3309
11.
recaptcha
2902
12.
drug
2473
13.
gift_card
2466
14.
domain_parking
2426
15.
warning
2370
16.
adult
1337
17.
promo_code
891
18.
domain_purchase
524
19.
social_media
158
20.
cloudflare
122
21.
directory_listing
67
22.
crypto_giveaway
40
23.
yandex
36
24.
hcaptcha
21
25.
url_shortener
17
26.
traffic_stealer
9
27.
marketplace
1
Top IP Addresses

Analyzing IP addresses associated with phishing attacks assists in identifying potential sources of malicious activity and blocking them proactively.

185.199.111.153
27859
185.199.109.153
27844
185.199.108.153
27832
185.199.110.153
27627
199.36.158.100
8259
34.202.108.161
8072
172.66.45.22
5160
172.66.46.234
5148
23.227.38.65
4544
13.52.188.95
4537
52.52.192.191
4445
38.180.232.55
4035
38.180.232.120
3901
64.29.17.131
3565
64.29.17.195
3563
64.29.17.3
3556
72.203.236.254
3551
216.198.79.195
3532
216.198.79.3
3524
216.198.79.131
3508
216.198.79.67
3472
202.228.215.58
3464
64.29.17.67
3382
62.164.220.194
3040
161.69.192.154
2964
161.69.192.105
2962
104.18.10.219
2449
98.83.184.133
2403
104.18.11.219
2399
54.157.108.158
2368
100.28.104.175
2367
216.198.79.1
2095
185.158.133.1
1773
23.227.38.74
1690
45.154.183.183
1569
8.230.105.83
1529
46.202.161.228
1500
142.251.45.129
1292
5.9.139.146
1282
142.250.73.65
1152
142.251.46.65
1150
142.251.33.193
1138
142.250.69.161
1065
142.250.73.129
1040
185.224.129.149
1038
45.77.240.20
1015
142.251.34.193
1009
142.250.73.97
1004
91.224.92.125
985
34.111.179.208
957
172.67.179.53
953
104.21.91.200
950
Toolkit Analysis

Phishing Kit Metrics

In our continuous efforts to combat phishing, we closely monitor and assess phishing kits that are part of these phishing campaigns. These numbers provide important insights into the tools and techniques employed by hackers. Our analysis covers factors such as:

Search

Total Phishing Kits

Quantifying the number of phishing kits discovered allows us to gauge the proliferation of these malicious resources.

Email

Unique Drop Emails

Identifying the unique drop email addresses used for phishing attacks helps in tracking the infrastructure utilized by bad actors. A “drop email” refers to the email address that is used to collect users’ secret credentials from phishing websites.

Global Search

Domains with Victim Emails

Recognizing the domains where victim emails are being sent aids in the identification and mitigation of ongoing campaigns.

Protect Your Organization

Stop Phishing Campaigns From Targeting You

By comprehensively analyzing these scans of phishing campaigns, we gain a deeper understanding of the latest techniques and trends of hackers. This knowledge enables us to develop effective risk mitigation and phishing countermeasures to help organizations protect themselves from the growing threat of phishing and scam attacks.

Need to take down phishing and scam sites and contents?
Image of Mid Year Report Cover
Report

2026 Fraud Trends & Prediction Report

buyers-guide
Buyer’s Guide

Buyer’s Guide: Purchasing a Brand Security Solution

Image of June Webinar
Webinar

How Fraud Became a Cybersecurity Problem

Image of Takedown
One-Pager

Impersonation Takedown Website Guide