Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1232565
2: info 671945
3: top 487789
4: co 170483
5: cn 144198
6: cc 101336
7: vip 84050
8: click 77491
9: shop 75408
10: help 73899
11: pro 72210
12: ru 67804
13: dev 65655
n/a: (pages.dev) 56049
n/a: (com.cn) 47124
14: org 46741
15: net 43944
16: sbs 41051
17: cfd 40693
18: biz 34715
19: garden 30517
20: app 29379
21: my 24784
n/a: (hl.cn) 20755
22: today 20399
23: lol 18904
24: life 17353
25: xyz 17105
26: me 16697
27: de 14568
28: digital 14549
29: uk 14520
n/a: (vercel.app) 14360
30: rest 13241
31: loan 9394
n/a: (netlify.app) 8738
32: wiki 8648
33: io 8186
34: one 8053
n/a: (workers.dev) 7848
n/a: (blogspot.com) 7825
35: live 7518
n/a: (duckdns.org) 7517
36: cyou 7233
37: us 6879
n/a: (co.uk) 6860
38: icu 6812
39: online 6792
n/a: (github.io) 6295
40: world 5182

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. x.gd
8. shorturl.at
9. wa.me
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3869474 - CRACKED: 723 - CLICKTRACKERS: 20131
DISPOSABLE: 35255 - MALWARE: 4233 - PHISH: 563190
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19525899
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 402167

Last update: 2026-10-02 09:55 UTC (updated every hour)