Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: top 622064
2: com 522658
3: info 415232
4: cn 125601
5: cc 118319
6: vip 99958
7: pro 88019
8: app 87482
9: dev 69801
10: ru 66968
n/a: (pages.dev) 66465
n/a: (vercel.app) 62614
11: shop 62122
12: click 42985
13: sbs 35216
14: net 33394
15: co 32465
16: life 28797
17: cfd 27570
18: org 26228
19: biz 24486
20: today 20021
21: us 18482
22: my 16827
n/a: (netlify.app) 16603
23: club 16236
24: wiki 15269
n/a: (com.cn) 15248
n/a: (ru.com) 14970
25: help 14820
26: icu 13272
27: me 13141
28: loan 12965
29: io 10993
n/a: (analyzemyreceipt.com) 10965
30: qpon 10462
31: xyz 9157
32: cyou 9008
n/a: (sa.com) 8515
n/a: (duckdns.org) 8355
n/a: (weebly.com) 8159
n/a: (github.io) 7936
33: rest 6581
34: ink 6392
n/a: (blogspot.com) 6366
35: uk 6230
36: world 5946
37: live 5889
n/a: (za.com) 5799
38: gdn 5212
39: xin 4834
40: blog 4647

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. cutt.ly
3. t.co
4. is.gd
5. shorturl.at
6. bit.ly
7. x.gd
8. tinyurl.com
9. wa.me
10. qrco.de

The total domains in each of our datasets:
 
ABUSE: 2789401 - CRACKED: 876 - CLICKTRACKERS: 32575
DISPOSABLE: 36899 - MALWARE: 2949 - PHISH: 555205
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 14102907
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 342255

Last update: 2026-02-21 16:54 UTC (updated every hour)