PhishTank is operated by Cisco Talos Intelligence Group.

Stats › November 2014

The statistics on this page are for November 1, 2014 through November 30, 2014.

Total Submissions: 69,979

The total number of suspected phishes submitted by the PhishTank community.

Valid Phishes: 30,960

The total number of submissions verified as valid by the PhishTank community.

Invalid Phishes: 400

The total number of submissions verified as invalid by the PhishTank community.

Note: Many phishing emails were offline at the time of submission to PhishTank. Offline phishes cannot be voted on, and therefore cannot be verified.

Total Votes: 215,344

The total number of "is a phish," "is not a phish," and "I don't know" votes made by the PhishTank community.

Median Time To Verify: 23 hours, 46 minutes

The median time it took the PhishTank community to verify submissions as valid or invalid.



Most Active Users

Out of the more than 20,000 members of the PhishTank community, these members were the most active in November 2014.

Note: One member account (PhishReporter) represents an organization, not an individual.

Top 10 Submitters (submissions)
1     cleanmx (43,827)
2     PhishReporter (11,047)
3     cyscon (1,552)
4     DefesaDigital (1,155)
5     billwake (942)
6     prebytes (900)
7     knack (875)
8     cepheus (827)
9     n0x6fb0x6fdy (613)
10     jkrieger (405)
Top 10 Verifiers (votes)
1     knack (63,893)
2     paulch (39,012)
3     buaya (32,965)
4     phishphucker (26,151)
5     Pluto67 (17,090)
6     Dareks (5,402)
7     heymoe (5,221)
8     sueskaPT (3,436)
9     csdk (2,596)
10     phxcz (2,389)

Phishing URLs

In November, 1,083 phishes (3% of valid phishes that month) used an IP address (i.e. http://12.34.56.78) and 29,923 (or 97%) used a domain name (i.e. http://example.com).

Top 10 Domains (valid phishes)
1     kolkidrewniane.pl (896)
2     berjma.com (309)
3     incekozmetik.com (218)
4     altervista.org (207)
5     theluxurybox.com (155)
6     villasublime.com (136)
7     chartered-tci.com (132)
8     us.to (124)
9     cloudaustraliebackup1.com (115)
10     live-sensiv.com (100)
Top 10 IPs (valid phishes)
1     142.234.223.140 (1,007)
2     188.128.175.35 (896)
3     192.185.15.141 (816)
4     198.57.247.153 (586)
5     142.234.125.217 (571)
6     188.132.231.154 (464)
7     65.255.60.242 (348)
8     104.152.70.64 (309)
9     192.163.201.249 (188)
10     82.102.6.169 (183)

Networks That Host Phishes

The servers hosting verified phishes are under the responsibility of these networks. PhishTank knows this because it traces phishing Web sites to an IP address. These are the organizations responsible for those IP addresses.

Top 10 NetworksValid Phishes
1     CyrusOne LLC,US 4,035
2     Unified Layer,US 3,152
3     OVH OVH SAS,FR 1,885
4     Nobis Technology Group, LLC,US 1,134
5     SoftLayer Technologies Inc.,US 1,007
6     HOMEPL-AS home.pl sp. z o.o.,PL 997
7     GoDaddy.com, LLC,US 657
8     SADECEHOSTING-COM Hosting Internet Hizmetleri Sanayi ve Ticaret Anonim Sirketi,TR 552
9     HOSTINGER-AS Hostinger International Limited,LT 526
10     HostDime.com, Inc.,US 457

Popular Targets

These are the brands that were fraudulently represented in phishing emails. Targets are identified by the submitter at the time of submission, or determined by PhishTank's software to the best of its ability. The majority of phishes are not categorized with a target.

Top 10 Identified TargetsValid Phishes
1     PayPal 11,142
2     eBay, Inc. 909
3     AOL 784
4     Apple 510
5     Google 318
6     Bradesco 260
7     Cielo 215
8     Yahoo 206
9     JPMorgan Chase and Co. 204
10     WalMart 173