Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 729274
2: top 644784
3: info 480566
4: cn 129103
5: pro 96881
6: cc 85716
7: shop 82199
8: vip 80179
9: app 71994
10: ru 60637
n/a: (vercel.app) 55902
11: co 45517
12: sbs 44138
13: net 39693
14: dev 32733
15: org 30488
n/a: (pages.dev) 28918
16: biz 26935
17: life 26186
18: icu 23819
19: click 22666
20: cfd 22387
21: us 20116
22: club 18546
n/a: (ru.com) 18201
23: today 17602
24: loan 16098
25: wiki 15221
26: xyz 14191
27: gdn 13753
28: cyou 13667
29: me 13234
30: mobi 13113
31: my 12704
32: qpon 11265
n/a: (sa.com) 11173
n/a: (weebly.com) 9689
33: ink 9133
n/a: (duckdns.org) 8872
34: io 8561
n/a: (netlify.app) 8144
35: pizza 7755
36: one 7425
37: live 7280
38: bid 6835
n/a: (za.com) 6362
39: link 6093
n/a: (github.io) 5896
40: uk 5386

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. is.gd
3. bit.ly
4. t.co
5. tinyurl.com
6. x.gd
7. wa.me
8. rcw3r.app.goo.gl
9. xek99.app.goo.gl
10. yhv6e.app.goo.gl

The total domains in each of our datasets:
 
ABUSE: 3037357 - CRACKED: 951 - CLICKTRACKERS: 19455
DISPOSABLE: 30838 - MALWARE: 3330 - PHISH: 536390
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 17031673
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 289407

Last update: 2025-11-17 18:54 UTC (updated every hour)