Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1229144
2: info 675991
3: top 493764
4: co 165736
5: cn 143785
6: cc 101075
7: vip 84212
8: click 77719
9: shop 75862
10: help 74243
11: pro 72047
12: ru 67131
13: dev 64187
n/a: (pages.dev) 54559
n/a: (com.cn) 47096
14: org 46709
15: net 42493
16: sbs 41561
17: cfd 40865
18: biz 32691
19: garden 30513
20: app 29031
21: lol 28852
22: my 24751
n/a: (hl.cn) 20680
23: today 20402
24: life 17601
25: xyz 16863
26: me 16676
27: digital 14609
28: uk 14286
n/a: (vercel.app) 14139
29: de 13208
30: rest 13177
31: wiki 9568
32: loan 9400
n/a: (netlify.app) 8591
33: io 8140
34: one 8087
n/a: (blogspot.com) 7801
n/a: (workers.dev) 7713
35: cyou 7678
36: live 7461
n/a: (duckdns.org) 7456
37: online 7127
38: icu 6891
39: us 6732
n/a: (co.uk) 6671
n/a: (github.io) 6245
40: world 5197

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. x.gd
8. shorturl.at
9. wa.me
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3877181 - CRACKED: 726 - CLICKTRACKERS: 22119
DISPOSABLE: 35182 - MALWARE: 3542 - PHISH: 560698
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19201368
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 401329

Last update: 2026-09-28 14:55 UTC (updated every hour)