Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 739891
2: info 720625
3: top 623315
4: cn 135886
5: cc 102864
6: vip 93175
7: pro 76666
8: shop 73222
9: ru 73175
10: help 72222
11: click 70129
12: co 55759
13: sbs 49919
14: cfd 48739
15: net 41404
n/a: (com.cn) 40796
16: org 27938
17: garden 26689
18: dev 26037
19: app 23952
20: today 22750
21: life 22496
n/a: (pages.dev) 21783
22: my 21136
23: biz 20929
n/a: (hl.cn) 17001
24: me 16097
25: wiki 14123
26: xyz 13692
27: rest 11875
28: cyou 9708
29: loan 9614
30: one 9446
n/a: (duckdns.org) 9323
n/a: (vercel.app) 8869
31: uk 8735
32: icu 8536
33: club 7904
34: io 7538
n/a: (netlify.app) 7213
35: live 6889
n/a: (ru.com) 6113
36: de 6109
n/a: (github.io) 6093
37: digital 5696
38: world 5539
n/a: (sa.com) 5492
n/a: (filesusr.com) 5234
39: us 5118
40: qpon 4901

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. cutt.ly
4. is.gd
5. t.co
6. x.gd
7. bit.ly
8. wa.me
9. search.app
10. lin.ee

The total domains in each of our datasets:
 
ABUSE: 3320912 - CRACKED: 816 - CLICKTRACKERS: 22717
DISPOSABLE: 37461 - MALWARE: 3429 - PHISH: 536723
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 18456817
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 317269

Last update: 2026-07-03 08:54 UTC (updated every hour)