Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1228674
2: info 667038
3: top 481400
4: co 173326
5: cn 144266
6: cc 101576
7: vip 83882
8: click 76218
9: help 74043
10: pro 71684
11: shop 71434
12: ru 67868
13: dev 66695
n/a: (pages.dev) 57020
n/a: (com.cn) 47143
14: org 46872
15: net 45566
16: cfd 40008
17: sbs 39331
18: biz 35790
19: garden 30505
20: app 29674
21: my 24768
n/a: (hl.cn) 20772
22: today 20459
23: life 17290
24: xyz 16753
25: me 16708
n/a: (vercel.app) 14610
26: uk 14606
27: digital 14395
28: lol 14354
29: de 14329
30: rest 13255
31: loan 9394
n/a: (netlify.app) 8861
32: wiki 8220
33: io 8059
n/a: (workers.dev) 8058
34: one 8039
n/a: (blogspot.com) 7804
n/a: (duckdns.org) 7634
35: live 7170
36: us 7000
n/a: (co.uk) 6966
37: online 6784
38: icu 6670
39: cyou 6474
n/a: (github.io) 6206
40: world 5174

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. wa.me
8. x.gd
9. shorturl.at
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3858829 - CRACKED: 723 - CLICKTRACKERS: 21378
DISPOSABLE: 35690 - MALWARE: 4132 - PHISH: 551822
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19347045
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 405469

Last update: 2026-10-06 13:55 UTC (updated every hour)