Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 977600
2: info 733990
3: top 617203
4: cn 135186
5: cc 102180
6: co 100655
7: vip 92604
8: shop 84390
9: pro 78238
10: click 76709
11: ru 75655
12: help 72740
13: sbs 51477
14: cfd 50035
n/a: (com.cn) 41252
15: net 39460
16: org 33885
17: dev 32528
n/a: (pages.dev) 27902
18: garden 26688
19: biz 25029
20: app 24545
21: today 22953
22: life 21956
23: my 21182
n/a: (hl.cn) 17314
24: me 16202
25: wiki 13740
26: xyz 12785
27: rest 12065
28: uk 10304
29: cyou 9976
30: loan 9586
31: one 9445
n/a: (vercel.app) 8888
n/a: (duckdns.org) 8666
32: icu 8582
n/a: (filesusr.com) 8452
33: live 8438
34: de 8035
35: io 7512
n/a: (netlify.app) 7387
36: club 6971
37: us 6910
38: digital 6734
n/a: (github.io) 5857
39: world 5339
n/a: (sa.com) 5016
n/a: (ru.com) 4949
40: link 4744

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. cutt.ly
4. is.gd
5. t.co
6. x.gd
7. wa.me
8. bit.ly
9. search.app
10. lin.ee

The total domains in each of our datasets:
 
ABUSE: 3666587 - CRACKED: 816 - CLICKTRACKERS: 22919
DISPOSABLE: 36519 - MALWARE: 3322 - PHISH: 535852
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 18558677
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 331655

Last update: 2026-07-15 20:54 UTC (updated every hour)