Scam and phishing statistics

Short answer: as of 2026-11-06, IsSiteLegit has checked 511 websites; 1% of them currently show high-risk signals or a blacklist listing. The public phishing feeds list 300 live phishing links, and 20% of them imitate a well-known brand, most often FedEx (25 links).

Numbers update automatically (feeds every 30 minutes, this page at most every 30 minutes). Last updated 2026-11-06 13:16 UTC. We publish counts only, never the dangerous links themselves.

Websites checked on IsSiteLegit

The latest verdict of every website someone checked on IsSiteLegit (plus popular sites we check ourselves). Most sites people ask about are fine; a check is most useful for the ones that are not.

In the last 30 days we ran 598 checks (including rechecks of sites checked before): 510likely legit, 74use caution, 13high risk, 1known malicious. See the recently checked websites and the recently flagged high-risk websites.

Phishing links in the public feeds

300 live phishing links are listed right now. 20% imitate a well-known brand in their web address, and 53% are hosted on free website builders or hosting platforms rather than on a domain the scammer registered.

Brands phishing links imitate most

A brand on this list is a victim of imitation, not a risk itself. Always check the exact address you were sent.

Domain endings used most by phishing links

Platforms hosting the most phishing pages

These platforms are legitimate services that scammers abuse; most pages on them are honest.

Malware in the public feeds

108,543 live malware download links and 29,170 malware servers (botnet control and malware delivery) are listed right now.

Domain endings used most by malware links

Services most abused to host malware

Only services with many listed links are named. They are mostly file-sharing services whose users uploaded the files.

Sources and how fresh they are

Brands are matched against our list of commonly imitated brands, using the same look-alike rules as our website checks. Domain endings and platforms come from the public suffix list. Our own checks are described on the methodology page.

Using these numbers

You may quote these statistics. Please name the source and the date, for example: “IsSiteLegit (issitelegit.com/data), 2026-11-06”. For questions, see the press page.

To protect yourself, read our guides (start with how to check if a website is legit) and our blog about scams going around right now.