Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 787386
2: top 633937
3: info 469089
4: cn 125121
5: pro 97267
6: cc 85094
7: shop 81810
8: vip 79088
9: ru 59768
10: co 45428
11: sbs 43385
12: net 38081
13: org 30966
14: dev 29021
15: app 27897
16: biz 26703
17: life 25900
n/a: (pages.dev) 24963
18: icu 23044
19: click 22700
20: cfd 21752
21: us 20112
22: club 18677
n/a: (ru.com) 18105
23: today 17074
24: loan 16358
25: wiki 15070
26: gdn 13751
27: cyou 13716
28: mobi 13414
29: xyz 13148
30: me 13096
31: my 12755
n/a: (vercel.app) 12024
n/a: (sa.com) 11282
32: qpon 11181
n/a: (weebly.com) 9576
33: ink 9551
n/a: (duckdns.org) 8877
34: io 8756
35: pizza 7928
n/a: (netlify.app) 7834
36: bid 7201
37: live 7162
38: one 7087
39: link 6542
n/a: (za.com) 6453
n/a: (github.io) 5937
40: xin 5033

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. is.gd
3. bit.ly
4. t.co
5. tinyurl.com
6. x.gd
7. wa.me
8. rcw3r.app.goo.gl
9. yhv6e.app.goo.gl
10. xek99.app.goo.gl

The total domains in each of our datasets:
 
ABUSE: 3011392 - CRACKED: 952 - CLICKTRACKERS: 18167
DISPOSABLE: 35520 - MALWARE: 3426 - PHISH: 482610
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 16971417
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 284290

Last update: 2025-11-09 09:54 UTC (updated every hour)