Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 963322
2: info 732116
3: top 618969
4: cn 135018
5: cc 102147
6: vip 92787
7: co 90753
8: shop 80052
9: pro 76499
10: ru 75151
11: help 72487
12: click 71437
13: sbs 51843
14: cfd 50244
n/a: (com.cn) 41039
15: net 40242
16: org 32915
17: dev 30043
18: garden 26687
n/a: (pages.dev) 25110
19: biz 24903
20: app 24282
21: today 22853
22: life 22084
23: my 21180
n/a: (hl.cn) 17277
24: me 16158
25: wiki 14022
26: xyz 13039
27: rest 12012
28: cyou 10126
29: uk 10112
30: loan 9584
31: one 9498
32: icu 8828
n/a: (vercel.app) 8775
n/a: (duckdns.org) 8633
33: live 8424
n/a: (filesusr.com) 7940
34: de 7704
35: io 7418
n/a: (netlify.app) 7214
36: club 7171
37: us 6926
38: digital 6671
n/a: (github.io) 5790
39: world 5390
n/a: (sa.com) 5133
n/a: (ru.com) 4977
40: qpon 4802

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. cutt.ly
4. is.gd
5. t.co
6. x.gd
7. wa.me
8. bit.ly
9. search.app
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3626906 - CRACKED: 816 - CLICKTRACKERS: 21307
DISPOSABLE: 37558 - MALWARE: 3273 - PHISH: 532117
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 18448218
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 326759

Last update: 2026-07-12 07:55 UTC (updated every hour)