Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 971198
2: info 733675
3: top 617759
4: cn 135222
5: cc 102116
6: co 97603
7: vip 92623
8: shop 85096
9: pro 78010
10: click 76572
11: ru 75404
12: help 72592
13: sbs 51934
14: cfd 50123
n/a: (com.cn) 41243
15: net 39808
16: org 32904
17: dev 31936
n/a: (pages.dev) 26855
18: garden 26688
19: biz 24911
20: app 24381
21: today 22851
22: life 22097
23: my 21170
n/a: (hl.cn) 17309
24: me 16180
25: wiki 13996
26: xyz 12671
27: rest 12028
28: uk 10207
29: cyou 10082
30: loan 9584
31: one 9452
n/a: (vercel.app) 8828
32: icu 8717
n/a: (duckdns.org) 8654
33: live 8426
n/a: (filesusr.com) 8071
34: de 7982
35: io 7489
n/a: (netlify.app) 7331
36: club 7110
37: us 6907
38: digital 6708
n/a: (github.io) 5832
39: world 5380
n/a: (sa.com) 5084
n/a: (ru.com) 4984
40: qpon 4757

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. cutt.ly
4. is.gd
5. t.co
6. x.gd
7. wa.me
8. bit.ly
9. search.app
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3655488 - CRACKED: 816 - CLICKTRACKERS: 21467
DISPOSABLE: 37578 - MALWARE: 3329 - PHISH: 534223
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 18385610
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 329464

Last update: 2026-07-14 08:54 UTC (updated every hour)