Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 725486
2: top 647229
3: info 481789
4: cn 131489
5: pro 96885
6: cc 85507
7: shop 82006
8: vip 80562
9: app 72305
10: ru 60910
n/a: (vercel.app) 56076
11: co 45503
12: sbs 43547
13: net 40023
14: dev 33565
15: org 30384
n/a: (pages.dev) 29866
16: biz 26832
17: life 26163
18: icu 23789
19: click 22885
20: cfd 22144
21: us 20006
22: club 18326
23: today 17609
n/a: (ru.com) 16762
24: loan 16080
25: wiki 15205
26: xyz 14374
27: cyou 13946
28: gdn 13754
29: me 13271
30: mobi 13012
31: my 12655
32: qpon 11277
n/a: (sa.com) 11169
n/a: (weebly.com) 9691
33: ink 8939
n/a: (duckdns.org) 8872
34: io 8646
n/a: (netlify.app) 8248
35: pizza 7667
36: one 7347
37: live 7220
38: bid 6659
n/a: (za.com) 6352
n/a: (com.cn) 5978
n/a: (github.io) 5912
39: uk 5677
40: link 5102

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. is.gd
3. bit.ly
4. t.co
5. tinyurl.com
6. x.gd
7. wa.me
8. rcw3r.app.goo.gl
9. xek99.app.goo.gl
10. yhv6e.app.goo.gl

The total domains in each of our datasets:
 
ABUSE: 3045172 - CRACKED: 952 - CLICKTRACKERS: 19999
DISPOSABLE: 30858 - MALWARE: 3323 - PHISH: 533491
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 17082372
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 288499

Last update: 2025-11-20 12:54 UTC (updated every hour)