Below are the top 40 TLDs listed in SURBL (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 202195
2: cn 39121
3: xyz 19564
4: top 18488
5: net 17494
n/a: (ru.com) 13026
6: org 9812
n/a: (sa.com) 9307
7: live 9062
n/a: (za.com) 7424
n/a: (duckdns.org) 7039
8: co 6723
9: me 6561
10: link 4577
11: tk 3819
12: biz 3344
13: info 3074
14: ru 2771
15: us 2655
16: in 2391
n/a: (page.link) 2326
17: cc 2084
18: jp 2033
19: icu 2010
20: app 1960
21: ml 1893
22: click 1832
23: de 1798
n/a: (blogspot.com) 1661
24: ga 1531
25: cf 1476
n/a: (web.app) 1458
n/a: (firebaseapp.com) 1448
26: fr 1442
27: club 1441
28: site 1322
29: uk 1318
30: br 1249
n/a: (com.br) 1166
n/a: (com.cn) 1133
31: shop 1094
32: gq 1085
33: rest 1084
n/a: (weebly.com) 1065
34: pw 1065
35: kr 1062
36: life 1050
n/a: (repl.co) 1040
n/a: (square.site) 995
37: ci 988
38: surf 973
n/a: (co.uk) 935
n/a: (co.kr) 912
39: email 859
n/a: (glitch.me) 854
n/a: (ne.pw) 798
40: cyou 785

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. bit.ly
2. 1drv.ms
3. is.gd
4. cutt.ly
5. tinyurl.com
6. bit.do
7. rebrand.ly
8. s.id
9. clck.ru
10. t.co

The total domains in each of the SURBL datasets:
 
SURBL ABUSE: 353666 - SURBL CRACKED: 7974
SURBL MALWARE: 5124 - SURBL PHISH: 84508
 
SURBL FRESH is a subscriber only dataset not publicly available
The total listed domains in the SURBL FRESH dataset: 11650918

Last update: Mon Sep 26 12:55:14 UTC 2022 (updated every hour)