Statistics

About these statistics

The vspam.org statistics dashboard provides real-time visibility into global phishing activity. All charts and counters update live from the platform API, refreshing every 60 seconds without a page reload.

What we track

• Daily report volume — new IOC submissions per day, with 30-day trend sparklines showing submission velocity.
• Confirmation rate — percentage of submitted reports that reach confirmed status through community consensus voting.
• IOC type distribution — breakdown by URLs, domains, IP addresses, and email addresses, showing which threat vectors are most active.
• Threat categories — top categories including credential harvest, brand impersonation, BEC, smishing, malware, and botnet C2.
• Top contributors — weekly and all-time leaderboards ranked by points earned from submissions, votes, and confirmed report bonuses.
• DNSBL coverage — count of active domains and IPs in the DNS blocklist zone, with listing/delisting trends.

Data freshness

Statistics are computed from the live production database. The leaderboard materialized view refreshes every 5 minutes. Trend charts show the most recent 30 days of activity. All timestamps are UTC.

API access

All statistics are available programmatically via the REST API. The /api/v1/stats endpoint returns platform-wide counters, while /api/v1/stats/trends provides time-series data for charting. Want to explore individual reports? Browse all submissions.