Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1227443
2: info 674531
3: top 490421
4: co 168314
5: cn 144008
6: cc 101204
7: vip 84117
8: click 77699
9: shop 75818
10: help 74334
11: pro 72252
12: ru 67661
13: dev 64759
n/a: (pages.dev) 55216
n/a: (com.cn) 47112
14: org 46697
15: net 43248
16: sbs 41341
17: cfd 40670
18: biz 33454
19: garden 30516
20: app 29287
21: my 24775
n/a: (hl.cn) 20689
22: today 20401
23: lol 20303
24: life 17459
25: xyz 16988
26: me 16692
27: de 14603
28: digital 14586
29: uk 14409
n/a: (vercel.app) 14331
30: rest 13200
31: wiki 9566
32: loan 9400
n/a: (netlify.app) 8667
33: io 8139
34: one 8044
n/a: (blogspot.com) 7825
n/a: (workers.dev) 7776
35: live 7571
n/a: (duckdns.org) 7480
36: cyou 7363
37: online 7075
38: icu 6835
n/a: (co.uk) 6785
39: us 6768
n/a: (github.io) 6253
40: world 5188

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. x.gd
8. wa.me
9. shorturl.at
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3867790 - CRACKED: 725 - CLICKTRACKERS: 21361
DISPOSABLE: 35212 - MALWARE: 3730 - PHISH: 561722
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19266818
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 401943

Last update: 2026-09-30 08:55 UTC (updated every hour)