Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1224678
2: info 675696
3: top 493555
4: co 165586
5: cn 143774
6: cc 101007
7: vip 84208
8: click 77708
9: shop 75782
10: help 74257
11: pro 72006
12: ru 67083
13: dev 63999
n/a: (pages.dev) 54378
n/a: (com.cn) 47095
14: org 46709
15: net 42418
16: sbs 41526
17: cfd 40793
18: biz 32647
19: garden 30513
20: app 29029
21: lol 28844
22: my 24762
n/a: (hl.cn) 20671
23: today 20404
24: life 17606
25: xyz 16874
26: me 16674
27: digital 14557
28: uk 14307
n/a: (vercel.app) 14155
29: de 13777
30: rest 13174
31: wiki 9567
32: loan 9400
n/a: (netlify.app) 8575
33: io 8222
34: one 8089
n/a: (blogspot.com) 7812
n/a: (workers.dev) 7705
35: cyou 7669
36: live 7459
n/a: (duckdns.org) 7430
37: online 7113
38: icu 6882
39: us 6734
n/a: (co.uk) 6682
n/a: (github.io) 6317
40: world 5195

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. x.gd
8. wa.me
9. shorturl.at
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3872318 - CRACKED: 726 - CLICKTRACKERS: 22028
DISPOSABLE: 35167 - MALWARE: 3524 - PHISH: 559924
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19242516
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 402417

Last update: 2026-09-28 05:55 UTC (updated every hour)