Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 809940
2: top 642477
3: info 479105
4: cn 128133
5: pro 97448
6: cc 85592
7: shop 82073
8: vip 80015
9: ru 60422
10: co 45633
11: sbs 44002
12: net 39665
13: dev 31600
14: org 31022
15: app 28748
n/a: (pages.dev) 27537
16: biz 26819
17: life 26147
18: icu 23447
19: click 22721
20: cfd 22482
21: us 20162
22: club 18647
n/a: (ru.com) 18133
23: today 17535
24: loan 16233
25: wiki 15254
26: xyz 14601
27: gdn 13754
28: cyou 13603
29: me 13213
30: mobi 13198
31: my 12752
n/a: (vercel.app) 12287
n/a: (sa.com) 11334
32: qpon 11230
n/a: (weebly.com) 9659
33: ink 9278
34: io 9068
n/a: (duckdns.org) 8972
n/a: (netlify.app) 8290
35: pizza 7768
36: one 7447
37: live 7299
38: bid 7019
n/a: (za.com) 6464
n/a: (github.io) 6145
39: link 6106
40: uk 5157

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. is.gd
3. bit.ly
4. t.co
5. tinyurl.com
6. x.gd
7. wa.me
8. rcw3r.app.goo.gl
9. xek99.app.goo.gl
10. yhv6e.app.goo.gl

The total domains in each of our datasets:
 
ABUSE: 3064819 - CRACKED: 951 - CLICKTRACKERS: 20025
DISPOSABLE: 33370 - MALWARE: 3457 - PHISH: 495794
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 17195197
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 287878

Last update: 2025-11-14 16:54 UTC (updated every hour)