As more and more sites switch to HTTPS, the number of phishing sites hosted on HTTPS domains is also increasing.

“In the third quarter of 2017, we observed nearly a quarter of all phishing sites hosted on HTTPS domains, nearly double the percentage we saw in the second quarter. A year ago, less than three percent of phish were hosted on websites using SSL certificates. Two years ago, this figure was less than one percent,” PhishLabs’ threat intelligence manager Crane Hassold shared.