Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1232548
2: info 668301
3: top 485688
4: co 172030
5: cn 144222
6: cc 101453
7: vip 84034
8: click 75868
9: help 73942
10: shop 72551
11: pro 72139
12: ru 67849
13: dev 66402
n/a: (pages.dev) 56754
n/a: (com.cn) 47130
14: org 46759
15: net 44592
16: cfd 39733
17: sbs 39479
18: biz 35349
19: garden 30503
20: app 29409
21: my 24781
n/a: (hl.cn) 20766
22: today 20398
23: life 17361
24: xyz 16725
25: me 16696
26: lol 15669
27: de 14750
28: uk 14626
29: digital 14395
n/a: (vercel.app) 14373
30: rest 13208
31: loan 9394
n/a: (netlify.app) 8771
32: wiki 8228
33: io 8200
34: one 8050
n/a: (workers.dev) 7906
n/a: (blogspot.com) 7794
n/a: (duckdns.org) 7618
35: live 7231
n/a: (co.uk) 6945
36: us 6928
37: online 6790
38: cyou 6779
39: icu 6709
n/a: (github.io) 6323
40: world 5177

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. tu3ph.app.goo.gl
2. xek99.app.goo.gl
3. cutt.ly
4. m3z8m.app.goo.gl
5. rcw3r.app.goo.gl
6. yhv6e.app.goo.gl
7. x.gd
8. wa.me
9. shorturl.at
10. rebrand.ly

The total domains in each of our datasets:
 
ABUSE: 3868428 - CRACKED: 723 - CLICKTRACKERS: 20874
DISPOSABLE: 35300 - MALWARE: 4220 - PHISH: 549481
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19586155
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 402279

Last update: 2026-10-03 23:55 UTC (updated every hour)