Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 971902
2: info 733530
3: top 617601
4: cn 135246
5: cc 102161
6: co 97707
7: vip 92647
8: shop 85083
9: pro 78090
10: click 76619
11: ru 75586
12: help 72662
13: sbs 51908
14: cfd 50091
n/a: (com.cn) 41245
15: net 39823
16: org 32923
17: dev 32350
n/a: (pages.dev) 27197
18: garden 26688
19: biz 24922
20: app 24475
21: today 22953
22: life 22110
23: my 21177
n/a: (hl.cn) 17311
24: me 16189
25: wiki 13998
26: xyz 12736
27: rest 12029
28: uk 10232
29: cyou 10002
30: loan 9584
31: one 9453
n/a: (vercel.app) 8856
32: icu 8705
n/a: (duckdns.org) 8652
33: live 8429
n/a: (filesusr.com) 8111
34: de 8018
35: io 7505
n/a: (netlify.app) 7362
36: club 7139
37: us 6907
38: digital 6708
n/a: (github.io) 5835
39: world 5387
n/a: (sa.com) 5070
n/a: (ru.com) 4991
40: qpon 4758

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. cutt.ly
4. is.gd
5. t.co
6. x.gd
7. wa.me
8. bit.ly
9. search.app
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3657207 - CRACKED: 816 - CLICKTRACKERS: 22957
DISPOSABLE: 36512 - MALWARE: 3331 - PHISH: 535109
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 18483349
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 330534

Last update: 2026-07-14 18:55 UTC (updated every hour)