Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1213749
2: info 675562
3: top 494689
4: co 164287
5: cn 143763
6: cc 100992
7: vip 84390
8: click 77778
9: shop 75981
10: help 74225
11: pro 72323
12: ru 66967
13: dev 63855
n/a: (pages.dev) 54100
n/a: (com.cn) 47092
14: org 46703
15: net 42454
16: sbs 41941
17: cfd 40982
18: biz 32551
19: garden 30513
20: lol 28828
21: app 28771
22: my 24763
n/a: (hl.cn) 20657
23: today 20309
24: life 17730
25: xyz 16903
26: me 16671
27: de 15163
28: digital 14557
29: uk 14286
n/a: (vercel.app) 13860
30: rest 13116
31: wiki 9570
32: loan 9400
n/a: (netlify.app) 8555
33: io 8213
34: one 8092
n/a: (blogspot.com) 7812
n/a: (workers.dev) 7682
35: cyou 7623
36: live 7496
n/a: (duckdns.org) 7426
37: online 7117
38: icu 6917
39: us 6743
n/a: (co.uk) 6661
n/a: (github.io) 6313
40: world 5212

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. shorturl.at
8. x.gd
9. wa.me
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3863353 - CRACKED: 726 - CLICKTRACKERS: 22180
DISPOSABLE: 35166 - MALWARE: 3548 - PHISH: 560101
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19330633
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 400716

Last update: 2026-09-27 03:55 UTC (updated every hour)