Skip to content
bs-bd-intro
Real-Time Statistics

Phishing Insights Center

At Bolster, we leverage data from our CheckPhish phishing community of security researchers worldwide to provide valuable insights into the ever-evolving threat landscape of phishing and scam attacks. By analyzing billions of data points collected from thousands of active security researchers, we equip organizations with knowledge to understand the state of phishing.

Phishing Insights Center
Crowdsourced Intelligence

Daily Phishing Highlights

We collect a vast amount of data, including the total number of scans conducted daily, the number of total users, and the active organizations within our research community. These statistics help us gauge the scale and impact of phishing attacks worldwide and how the security community is responding.

Search

Total Scans Daily

2696209
User

Total CheckPhish Users

58679
People

Total CheckPhish Organizations

9737
Last scan updated on 2026/08/15 12:00:00
Uncover Phishing Campaigns

In-Depth Phishing and Scam Analysis

In addition to the phishing highlights, our analysis dives deeper into the specific characteristics of these scans of phishing attacks. We review and report on various aspects, including :

Count

Total Phishing and Scam Counts

Quantifying the number of detected phishing attempts and scams provides a clear picture of the prevalent threats faced by businesses and individuals.

Phish

766359

Scam

669115

Total Count

1435474
Last scan updated on 2026/08/09 23:59:59
Cloud
Top Hosting Providers

Identifying hosting providers that unknowingly host phishing websites aids in collaboration between security teams and hosting providers to combat malicious activities.

Clipboard
Top Registrars

Tracking the registrars associated with phishing attacks aids in detecting and shutting down illicit domains more effectively.

Route
Top Countries of Origin

Understanding the countries where phishing campaigns originate provides vital insight into the geographic distribution of threats.

Global
Top-Level Domains (TLDs) Used

Recognizing the TLDs that are frequently abused by phishers helps identify potential sources of fraudulent activity.

Global
Categories

Identifying the top categories that attacker leverage for phishing and scam campaigns can help organizations be more alert about the risk to their industry.

1.
streaming
82620
2.
gambling
80047
3.
app_store
28890
4.
online_store
27787
5.
error_page
14219
6.
crypto
8582
7.
banking
5239
8.
captcha
4938
9.
other_captcha
3672
10.
drug
2989
11.
tech_support
2768
12.
domain_parking
2616
13.
recaptcha
2135
14.
cloudflare
2061
15.
gift_card
2012
16.
warning
1443
17.
adult
1369
18.
hcaptcha
490
19.
domain_purchase
384
20.
promo_code
366
21.
crypto_giveaway
92
22.
directory_listing
41
23.
social_media
16
24.
yandex
5
25.
marketplace
3
Top IP Addresses

Analyzing IP addresses associated with phishing attacks assists in identifying potential sources of malicious activity and blocking them proactively.

185.199.108.153
24504
185.199.109.153
24503
185.199.111.153
24256
185.199.110.153
24069
199.36.158.100
8950
13.52.188.95
5790
52.52.192.191
5764
17.253.142.4
3904
64.29.17.67
3049
72.203.236.254
3047
216.198.79.195
3046
64.29.17.131
3042
216.198.79.131
3004
64.29.17.195
2989
64.29.17.3
2961
216.198.79.3
2928
216.198.79.67
2881
216.198.79.1
2703
38.180.232.55
2659
38.180.232.120
2374
13.33.164.209
2089
170.106.62.62
1970
23.176.40.163
1935
185.158.133.1
1826
45.154.183.183
1732
8.230.105.83
1682
51.77.54.94
1459
192.162.199.233
1285
91.239.146.130
1281
172.66.44.107
1269
3.169.163.64
1267
190.123.44.95
1243
167.172.241.66
1235
34.231.191.194
1222
172.66.47.149
1207
87.232.64.12
1204
62.122.170.171
1183
192.162.199.234
1183
69.165.75.129
1077
64.29.17.1
1026
64.29.17.65
1004
216.198.79.65
1001
142.250.73.65
993
142.250.73.97
972
54.219.129.247
944
34.150.228.203
944
161.111.227.10
937
104.18.54.45
921
104.18.50.34
887
209.74.72.97
875
76.76.21.21
868
79.127.221.146
829
Toolkit Analysis

Phishing Kit Metrics

In our continuous efforts to combat phishing, we closely monitor and assess phishing kits that are part of these phishing campaigns. These numbers provide important insights into the tools and techniques employed by hackers. Our analysis covers factors such as:

Search

Total Phishing Kits

Quantifying the number of phishing kits discovered allows us to gauge the proliferation of these malicious resources.

Email

Unique Drop Emails

Identifying the unique drop email addresses used for phishing attacks helps in tracking the infrastructure utilized by bad actors. A “drop email” refers to the email address that is used to collect users’ secret credentials from phishing websites.

Global Search

Domains with Victim Emails

Recognizing the domains where victim emails are being sent aids in the identification and mitigation of ongoing campaigns.

Protect Your Organization

Stop Phishing Campaigns From Targeting You

By comprehensively analyzing these scans of phishing campaigns, we gain a deeper understanding of the latest techniques and trends of hackers. This knowledge enables us to develop effective risk mitigation and phishing countermeasures to help organizations protect themselves from the growing threat of phishing and scam attacks.

Need to take down phishing and scam sites and contents?
Image of Mid Year Report Cover
Report

2026 Fraud Trends & Prediction Report

buyers-guide
Buyer’s Guide

Buyer’s Guide: Purchasing a Brand Security Solution

Image of June Webinar
Webinar

How Fraud Became a Cybersecurity Problem

Image of Takedown
One-Pager

Impersonation Takedown Website Guide