Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: top 598497
2: com 543703
3: info 432020
4: cc 124349
5: cn 111608
6: vip 103938
7: app 92719
8: pro 83156
9: dev 78778
n/a: (pages.dev) 75070
10: ru 71010
n/a: (vercel.app) 66457
11: shop 66334
12: click 52694
13: net 42064
14: sbs 41046
15: co 34668
16: cfd 32329
17: life 32169
18: help 30334
19: org 27700
20: biz 25084
n/a: (filesusr.com) 21668
21: today 20649
22: xyz 19799
n/a: (netlify.app) 18974
n/a: (com.cn) 16736
23: my 16206
24: me 15077
25: wiki 15076
n/a: (ru.com) 13813
26: icu 12928
27: club 12054
28: loan 11868
29: rest 11097
30: io 10912
31: cyou 10635
32: us 9005
n/a: (github.io) 8929
n/a: (duckdns.org) 8830
n/a: (sa.com) 8022
n/a: (weebly.com) 7848
33: uk 7416
n/a: (blogspot.com) 6774
34: live 6642
35: qpon 6084
36: ink 5727
37: world 5707
38: de 5686
39: bond 5270
n/a: (za.com) 5179
40: link 4858

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. t.co
4. cutt.ly
5. is.gd
6. rebrand.ly
7. bit.ly
8. x.gd
9. wa.me
10. lin.ee

The total domains in each of our datasets:
 
ABUSE: 2878525 - CRACKED: 868 - CLICKTRACKERS: 20067
DISPOSABLE: 36472 - MALWARE: 2560 - PHISH: 574789
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 15864345
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 330252

Last update: 2026-04-03 16:54 UTC (updated every hour)