Skip to content

Statistics

Real-time visibility into global phishing activity — canonical domains, IPv6 infrastructure and ASN context up top, supporting IOC and workflow telemetry below.

About these statistics

The vspam.org statistics dashboard provides visibility into global phishing activity. The top of the page focuses on canonical domains, IPv6 infrastructure, and ASN context, while lower sections retain the supporting raw IOC and workflow telemetry. Charts and counters read from the platform API.

What we track

  • Daily report volume — new IOC submissions per day, with trend sparklines showing submission velocity.
  • Domain-first phishing volume — canonical phishing domains tracked over time, including URL submissions normalized to domains.
  • IPv6 host and prefix activity — exact IPv6 hosts plus aggregate watch-prefix activity for triage workflows.
  • ASN reputation context — distinct ASNs observed over time and the providers most associated with recent phishing infrastructure.
  • IOC type distribution — breakdown by URLs, domains, IP addresses, and email addresses, showing which threat vectors are most active.
  • Threat categories — top categories including credential harvest, brand impersonation, BEC, smishing, malware, and botnet C2.
  • Top reporters — ranked by report volume in the selected window.
  • DNSBL coverage — count of active domains and IPs in the DNS blocklist zone.
  • Correction quality — false positive volume, pending delists, approved delists, and review turnaround so operators can judge how quickly incorrect listings are corrected.

Data freshness

Statistics are computed from the live production database. Trend charts show the selected time range. Timestamps follow the source data.

API access

All statistics are available programmatically via the REST API. The /api/v1/stats endpoint returns platform-wide counters and correction-quality metrics, while /api/v1/stats/trends provides time-series data for charting, including false-positive and delist trends. Want to explore individual reports? Browse all submissions.