I'd be more wondering how many were/are used for phishing campaigns.