PhishPin / Brands Live Phishing Data

Brands Live Phishing Data

Who attackers are impersonating right now · 579 brands · 478,081 phishing hostnames analysed. Weekly summary & PDF →

Most impersonated brands

Rising this week

Browse by industry

How attackers build the fake hostnames

Across every brand, these are the patterns that show up most in the reported hostnames and in the newly registered lookalikes.

All brands

Pressure index: 0 to 100 score that blends reported phishing hosts (70%) and new lookalike registrations (30%) on a log scale, relative to the busiest brand in this index. It measures attacker interest, not how safe a brand is.

How these numbers are produced

PhishPin collects URLs from public phishing and malware feeds and indexes every hostname. A host counts toward a brand when the brand name appears in it as a distinct word or a distinctive string, and the host is not one of the brand's own domains. Separately, we read the daily list of newly registered domains and flag those that contain the brand name, differ by one character, or swap look-alike characters (such as rn for m or 0 for o).

Questions about brand phishing data

Check your own brand

Every company with customers who log in or pay gets copied. Tell us your domain and a PhishPin analyst checks your email-spoofing protection, finds registered lookalikes and cross-checks them against these same feeds. You get the results within 24 hours.

Talk to us about takedowns