PhishTank is operated by OpenDNS, a free service that makes your Internet safer, faster, and smarter. Get started today!
Read the Apr 2007 press release

Stats › April 2007

click map for a larger version

Published: May 1, 2007

The statistics on this page are for April 1, 2007 through April 30, 2007.

Total Submissions: 77,709

The total number of suspected phishes submitted by the PhishTank community.

Valid Phishes: 40,549

The total number of submissions verified as valid by the PhishTank community.

Invalid Phishes: 845

The total number of submissions verified as invalid by the PhishTank community.

Note: Many phishing emails were offline at the time of submission to PhishTank. Offline phishes cannot be voted on, and therefore cannot be verified.

Total Votes: 243,500

The total number of "is a phish," "is not a phish," and "I don't know" votes made by the PhishTank community.

Median Time To Verify: 30 hours, 28 minutes

The median time it took the PhishTank community to verify submissions as valid or invalid.



Most Active Users

Out of the more than 15,000 members of the PhishTank community, these members were the most active in April 2007.

Note: Two member accounts (antiphishing and PhishReporter) represent organizations, not individuals.

Top 10 Submitters (submissions)
1     antiphishing (65,014)
2     PhishReporter (4,226)
3     Micha (1,944)
4     cleanmx (1,823)
5     punkki (399)
6     spamfighter (342)
7     ruralnetcop (333)
8     stlpaul (221)
9     JustaPerson (184)
10     Gretchen (157)
Top 10 Verifiers (votes)
1     buaya (65,899)
2     miowpurr (59,635)
3     bowlby4 (39,874)
4     tetak (6,285)
5     XPilot (5,742)
6     DougieLawson (5,353)
7     Char (4,961)
8     JustaPerson (4,550)
9     Aquarius (4,413)
10     Astral (4,390)

Phishing URLs

In April, 1,520 phishes (4% of valid phishes that month) used an IP address (i.e. http://12.34.56.78) and 39,029 (or 96%) used a domain name (i.e. http://example.com).

Top 10 Domains (valid phishes)
1     trenkst.jp (883)
2     nsserver.ph (642)
3     ezgizmo.tk (532)
4     tooniht.tk (517)
5     istron.tk (513)
6     myvanna.tk (478)
7     denser.tk (455)
8     versa4i.tk (430)
9     timoff.hk (341)
10     lopop.hk (335)
Top 10 IPs (valid phishes)
1     85.105.190.151 (8,164)
2     62.129.131.38 (7,021)
3     209.172.59.193 (6,371)
4     81.64.102.104 (5,096)
5     195.20.32.104 (5,062)
6     217.119.57.19 (4,993)
7     221.10.110.67 (3,940)
8     200.120.67.245 (3,827)
9     211.43.204.122 (3,646)
10     211.20.171.111 (3,129)

Networks That Host Phishes

The servers hosting verified phishes are under the responsibility of these networks. PhishTank knows this because it traces phishing Web sites to an IP address. These are the organizations responsible for those IP addresses.

Top 10 NetworksValid Phishes
1     TTNET TTnet Autonomous System 13,142
2     CNCGROUP China169 Backbone 10,225
3     VirtualXS Internet BV, The Netherlands 7,288
4     HINET Data Communication Business Group 7,236
5     VTR BANDA ANCHA S.A. 7,217
6     Hanaro Telecom Inc. 6,769
7     Groupe iWeb Technologies inc. 6,575
8     PROXAD AS for Proxad ISP 6,383
9     DACOM Corporation 5,266

Popular Targets

These are the brands that were fraudulently represented in phishing emails. Targets are identified by the submitter at the time of submission, or determined by PhishTank's software to the best of its ability. The majority of phishes are not categorized with a target.

Top 10 Identified TargetsValid Phishes
1     PayPal 4,556
2     eBay, Inc. 2,002
3     Branch Banking and Trust Company 471
4     Bank of America Corporation 292
5     Barclays Bank PLC 227
6     Fifth Third Bank 91
7     Wells Fargo 88
8     JPMorgan Chase and Co. 84
9     Wachovia 47
10     US Bank 32

.

Server: pt7.phishtank.com