Statistics

About these statistics

The vspam.org statistics dashboard provides real-time visibility into global phishing activity. The top of the page now focuses on canonical domains, IPv6 infrastructure, and ASN context, while lower sections retain the supporting raw IOC and workflow telemetry. All charts and counters update live from the platform API, refreshing every 60 seconds without a page reload.

What we track

• Daily report volume — new IOC submissions per day, with 30-day trend sparklines showing submission velocity.
• Domain-first phishing volume — canonical phishing domains tracked over time, including URL submissions normalized to domains.
• IPv6 host and prefix activity — exact IPv6 hosts plus aggregate /64, /56, and /48 prefix activity for watch and triage workflows.
• ASN reputation context — distinct ASNs observed over time and the providers most associated with recent phishing infrastructure.
• Confirmation rate — percentage of submitted reports that reach confirmed status through community consensus voting.
• IOC type distribution — breakdown by URLs, domains, IP addresses, and email addresses, showing which threat vectors are most active.
• Threat categories — top categories including credential harvest, brand impersonation, BEC, smishing, malware, and botnet C2.
• Top contributors — weekly and all-time leaderboards ranked by points earned from submissions, votes, and confirmed report bonuses.
• DNSBL coverage — count of active domains and IPs in the DNS blocklist zone, with listing/delisting trends.
• Correction quality — false positive volume, pending delists, approved appeals, and review turnaround so operators can judge how quickly incorrect listings are corrected.

Data freshness

Statistics are computed from the live production database. The leaderboard materialized view refreshes every 5 minutes. Trend charts show the most recent 30 days of activity. All timestamps are UTC.

API access

All statistics are available programmatically via the REST API. The /api/v1/stats endpoint returns platform-wide counters and correction-quality metrics, while /api/v1/stats/trends provides time-series data for charting, including false-positive and delist trends. Want to explore individual reports? Browse all submissions.