Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 967642
2: info 733437
3: top 617953
4: cn 135179
5: cc 102180
6: co 96602
7: vip 92695
8: shop 85139
9: pro 77978
10: click 76555
11: ru 75387
12: help 72601
13: sbs 51935
14: cfd 50091
n/a: (com.cn) 41164
15: net 39795
16: org 32846
17: dev 31474
18: garden 26688
n/a: (pages.dev) 26423
19: biz 24901
20: app 24406
21: today 22852
22: life 22097
23: my 21178
n/a: (hl.cn) 17293
24: me 16175
25: wiki 14001
26: xyz 12743
27: rest 12025
28: uk 10201
29: cyou 10021
30: loan 9584
31: one 9465
n/a: (vercel.app) 8811
32: icu 8746
n/a: (duckdns.org) 8649
33: live 8431
n/a: (filesusr.com) 8026
34: de 7857
35: io 7476
n/a: (netlify.app) 7294
36: club 7108
37: us 6936
38: digital 6704
n/a: (github.io) 5809
39: world 5386
n/a: (sa.com) 5073
n/a: (ru.com) 4981
40: qpon 4769

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. cutt.ly
4. is.gd
5. t.co
6. x.gd
7. wa.me
8. bit.ly
9. search.app
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3650574 - CRACKED: 816 - CLICKTRACKERS: 22773
DISPOSABLE: 37573 - MALWARE: 3317 - PHISH: 533755
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 18493346
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 329213

Last update: 2026-07-13 20:55 UTC (updated every hour)