Skip to content
bs-bd-intro
Real-Time Statistics

Phishing Insights Center

At Bolster, we leverage data from our CheckPhish phishing community of security researchers worldwide to provide valuable insights into the ever-evolving threat landscape of phishing and scam attacks. By analyzing billions of data points collected from thousands of active security researchers, we equip organizations with knowledge to understand the state of phishing.

Phishing Insights Center
Crowdsourced Intelligence

Daily Phishing Highlights

We collect a vast amount of data, including the total number of scans conducted daily, the number of total users, and the active organizations within our research community. These statistics help us gauge the scale and impact of phishing attacks worldwide and how the security community is responding.

Search

Total Scans Daily

4253919
User

Total CheckPhish Users

59254
People

Total CheckPhish Organizations

9816
Last scan updated on 2026/09/04 14:00:00
Uncover Phishing Campaigns

In-Depth Phishing and Scam Analysis

In addition to the phishing highlights, our analysis dives deeper into the specific characteristics of these scans of phishing attacks. We review and report on various aspects, including :

Count

Total Phishing and Scam Counts

Quantifying the number of detected phishing attempts and scams provides a clear picture of the prevalent threats faced by businesses and individuals.

Phish

575940

Scam

919598

Total Count

1495538
Last scan updated on 2026/08/30 23:59:59
Cloud
Top Hosting Providers

Identifying hosting providers that unknowingly host phishing websites aids in collaboration between security teams and hosting providers to combat malicious activities.

Clipboard
Top Registrars

Tracking the registrars associated with phishing attacks aids in detecting and shutting down illicit domains more effectively.

Route
Top Countries of Origin

Understanding the countries where phishing campaigns originate provides vital insight into the geographic distribution of threats.

Global
Top-Level Domains (TLDs) Used

Recognizing the TLDs that are frequently abused by phishers helps identify potential sources of fraudulent activity.

Global
Categories

Identifying the top categories that attacker leverage for phishing and scam campaigns can help organizations be more alert about the risk to their industry.

1.
gambling
95541
2.
streaming
79113
3.
online_store
38370
4.
error_page
18710
5.
app_store
12197
6.
crypto
6327
7.
banking
4670
8.
captcha
4235
9.
tech_support
3253
10.
recaptcha
3010
11.
drug
2501
12.
domain_parking
2226
13.
gift_card
1940
14.
other_captcha
1619
15.
warning
1465
16.
adult
1262
17.
promo_code
703
18.
domain_purchase
637
19.
cloudflare
270
20.
hcaptcha
137
21.
crypto_giveaway
73
22.
directory_listing
64
23.
traffic_stealer
15
24.
marketplace
10
25.
social_media
9
Top IP Addresses

Analyzing IP addresses associated with phishing attacks assists in identifying potential sources of malicious activity and blocking them proactively.

185.199.108.153
25183
185.199.109.153
24779
185.199.110.153
24731
185.199.111.153
24504
199.36.158.100
9036
38.180.232.55
4824
13.33.164.209
4068
13.52.188.95
3626
52.52.192.191
3498
64.29.17.3
3089
64.29.17.67
3054
64.29.17.131
3030
64.29.17.195
2971
216.198.79.131
2945
216.198.79.195
2915
216.198.79.3
2912
216.198.79.67
2908
216.198.79.1
2761
3.169.163.64
2379
38.180.232.120
2251
161.111.227.10
2087
146.75.42.152
1982
151.101.22.152
1959
185.158.133.1
1849
8.230.105.83
1711
46.202.161.228
1648
45.154.183.183
1609
142.250.73.129
1459
142.250.73.65
1341
142.250.69.161
1324
142.251.46.65
1298
142.251.34.193
1295
167.172.241.66
1257
142.251.33.193
1243
84.75.40.17
1232
62.122.170.171
1209
43.174.247.29
1186
142.251.45.129
1184
43.174.246.29
1171
142.250.73.97
1146
172.66.47.149
1085
172.66.44.107
1035
170.106.62.62
1023
72.203.236.254
1018
64.29.17.1
936
216.198.79.65
914
69.165.75.129
902
64.29.17.65
897
76.76.21.21
863
104.18.50.34
863
104.18.54.45
841
198.202.211.1
815
Toolkit Analysis

Phishing Kit Metrics

In our continuous efforts to combat phishing, we closely monitor and assess phishing kits that are part of these phishing campaigns. These numbers provide important insights into the tools and techniques employed by hackers. Our analysis covers factors such as:

Search

Total Phishing Kits

Quantifying the number of phishing kits discovered allows us to gauge the proliferation of these malicious resources.

Email

Unique Drop Emails

Identifying the unique drop email addresses used for phishing attacks helps in tracking the infrastructure utilized by bad actors. A “drop email” refers to the email address that is used to collect users’ secret credentials from phishing websites.

Global Search

Domains with Victim Emails

Recognizing the domains where victim emails are being sent aids in the identification and mitigation of ongoing campaigns.

Protect Your Organization

Stop Phishing Campaigns From Targeting You

By comprehensively analyzing these scans of phishing campaigns, we gain a deeper understanding of the latest techniques and trends of hackers. This knowledge enables us to develop effective risk mitigation and phishing countermeasures to help organizations protect themselves from the growing threat of phishing and scam attacks.

Need to take down phishing and scam sites and contents?
Image of Mid Year Report Cover
Report

2026 Fraud Trends & Prediction Report

buyers-guide
Buyer’s Guide

Buyer’s Guide: Purchasing a Brand Security Solution

Image of June Webinar
Webinar

How Fraud Became a Cybersecurity Problem

Image of Takedown
One-Pager

Impersonation Takedown Website Guide