Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: top 678647
2: com 541273
3: info 438207
4: cc 127469
5: cn 112358
6: vip 102945
7: app 97648
8: pro 80050
9: dev 78322
n/a: (pages.dev) 74343
10: ru 74008
n/a: (vercel.app) 68923
11: shop 68638
12: click 58799
13: sbs 51815
14: net 44391
15: cfd 38827
16: co 38689
17: life 34272
18: help 32994
19: org 28567
20: biz 25172
21: my 21933
22: today 21326
n/a: (netlify.app) 20532
23: xyz 19461
n/a: (com.cn) 18125
24: me 16300
25: wiki 14788
26: loan 12510
27: icu 12264
n/a: (ru.com) 11822
28: club 11194
29: rest 11083
30: cyou 10880
31: io 9715
n/a: (duckdns.org) 8938
32: uk 8606
33: us 8551
n/a: (filesusr.com) 8203
n/a: (github.io) 8010
n/a: (sa.com) 7680
34: one 7007
n/a: (blogspot.com) 6927
35: qpon 6686
36: live 6658
37: garden 6605
38: ink 6304
n/a: (weebly.com) 6148
39: de 5966
40: world 5842

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. t.co
4. cutt.ly
5. is.gd
6. rebrand.ly
7. bit.ly
8. x.gd
9. wa.me
10. lin.ee

The total domains in each of our datasets:
 
ABUSE: 3031659 - CRACKED: 862 - CLICKTRACKERS: 18928
DISPOSABLE: 37114 - MALWARE: 2718 - PHISH: 678073
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 16273657
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 345117

Last update: 2026-04-24 13:54 UTC (updated every hour)