Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1235165
2: info 673600
3: top 489185
4: co 170076
5: cn 144185
6: cc 101301
7: vip 84137
8: click 77497
9: shop 75567
10: help 73934
11: pro 72175
12: ru 67799
13: dev 65268
n/a: (pages.dev) 55668
n/a: (com.cn) 47119
14: org 46803
15: net 43584
16: sbs 41258
17: cfd 40684
18: biz 34428
19: garden 30519
20: app 29410
21: my 24788
n/a: (hl.cn) 20754
22: today 20402
23: lol 19776
24: life 17358
25: xyz 17093
26: me 16700
27: de 14695
28: digital 14562
29: uk 14540
n/a: (vercel.app) 14355
30: rest 13213
31: loan 9394
n/a: (netlify.app) 8725
32: wiki 8647
33: io 8180
34: one 8059
n/a: (workers.dev) 7836
n/a: (blogspot.com) 7825
35: live 7531
n/a: (duckdns.org) 7497
36: cyou 7218
n/a: (co.uk) 6887
37: us 6873
38: online 6832
39: icu 6820
n/a: (github.io) 6291
40: world 5187

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. x.gd
8. wa.me
9. shorturl.at
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3876084 - CRACKED: 723 - CLICKTRACKERS: 21686
DISPOSABLE: 35254 - MALWARE: 3813 - PHISH: 562176
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19501218
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 402295

Last update: 2026-10-01 20:55 UTC (updated every hour)