Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1234705
2: info 670052
3: top 486053
4: co 171118
5: cn 144210
6: cc 101406
7: vip 84008
8: click 77481
9: shop 75244
10: help 73963
11: pro 72138
12: ru 67820
13: dev 65917
n/a: (pages.dev) 56284
n/a: (com.cn) 47125
14: org 46830
15: net 44217
16: sbs 40982
17: cfd 40667
18: biz 35012
19: garden 30517
20: app 29410
21: my 24790
n/a: (hl.cn) 20760
22: today 20402
23: life 17361
24: xyz 17144
25: lol 17021
26: me 16703
27: de 14706
28: uk 14598
29: digital 14534
n/a: (vercel.app) 14378
30: rest 13233
31: loan 9394
n/a: (netlify.app) 8744
32: wiki 8232
33: io 8193
34: one 8053
n/a: (workers.dev) 7867
n/a: (blogspot.com) 7785
n/a: (duckdns.org) 7602
35: live 7520
36: cyou 6979
n/a: (co.uk) 6931
37: us 6923
38: online 6808
39: icu 6805
n/a: (github.io) 6301
40: world 5183

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. x.gd
8. wa.me
9. shorturl.at
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3867302 - CRACKED: 723 - CLICKTRACKERS: 22076
DISPOSABLE: 35287 - MALWARE: 4236 - PHISH: 563288
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19645743
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 402931

Last update: 2026-10-02 21:55 UTC (updated every hour)