Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1193527
2: info 676083
3: top 496101
4: co 163212
5: cn 143748
6: cc 100962
7: vip 84400
8: click 78036
9: shop 76323
10: help 74307
11: pro 72463
12: ru 66955
13: dev 63400
n/a: (pages.dev) 53674
n/a: (com.cn) 47087
14: org 46713
15: net 42197
16: sbs 42140
17: cfd 41344
18: biz 32313
19: garden 30513
20: lol 28965
21: app 28751
22: my 24762
n/a: (hl.cn) 20648
23: today 20306
24: life 17728
25: xyz 16816
26: me 16669
27: de 15074
28: digital 14559
29: uk 14266
n/a: (vercel.app) 13837
30: rest 13139
31: wiki 9581
32: loan 9400
n/a: (netlify.app) 8542
33: cyou 8099
34: one 8088
35: io 8025
n/a: (blogspot.com) 7793
n/a: (workers.dev) 7652
36: live 7495
n/a: (duckdns.org) 7426
37: online 7067
38: icu 7005
39: us 6736
n/a: (co.uk) 6640
n/a: (github.io) 6140
40: world 5232

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. shorturl.at
8. x.gd
9. wa.me
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3842918 - CRACKED: 726 - CLICKTRACKERS: 21371
DISPOSABLE: 35133 - MALWARE: 3469 - PHISH: 560995
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19227327
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 398194

Last update: 2026-09-26 06:55 UTC (updated every hour)