About reports

This report discusses recent trends in domain abuse in phishing site URLs through the results of research conducted in collaboration with Fujitsu Defense & National Security Ltd.

Traditional phishing attacks have been devised by combining strings of characters imitating major brand names in phishing URLs. However, after analyzing five years of phishurl-list (a database of URLs used in phishing) provided by JPCERT/CC, it was found that the techniques have changed to phishing URLs that do not contain brand names and to the misuse of subdomains. This suggests that it is becoming more difficult to detect phishing sites using traditional phishing URL detection technology.

＜Figure 3 Number of URLs by phishurl-list format and percentage of subdomain types in the total