Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: top 684562
2: com 539293
3: info 439946
4: cc 128232
5: cn 112799
6: vip 102393
7: app 97792
8: pro 80885
9: dev 78705
n/a: (pages.dev) 74297
10: ru 73640
n/a: (vercel.app) 69130
11: shop 68968
12: click 58475
13: sbs 51701
14: net 44881
15: co 39263
16: cfd 38660
17: life 34303
18: help 32704
19: org 29179
20: biz 25328
21: my 21882
22: today 21309
n/a: (netlify.app) 20307
23: xyz 19798
n/a: (com.cn) 17878
24: me 16434
25: wiki 14848
26: loan 12928
27: icu 12371
n/a: (ru.com) 11824
28: cyou 11277
29: club 11269
30: io 11159
31: rest 11090
n/a: (github.io) 9297
32: uk 8956
n/a: (duckdns.org) 8942
33: us 8644
n/a: (weebly.com) 8205
n/a: (sa.com) 7810
n/a: (filesusr.com) 7549
n/a: (blogspot.com) 6928
34: one 6893
35: live 6760
36: qpon 6708
37: ink 5992
38: de 5902
39: world 5863
40: blog 5293

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. t.co
4. cutt.ly
5. rebrand.ly
6. is.gd
7. bit.ly
8. x.gd
9. wa.me
10. lin.ee

The total domains in each of our datasets:
 
ABUSE: 3035579 - CRACKED: 863 - CLICKTRACKERS: 18806
DISPOSABLE: 36917 - MALWARE: 2753 - PHISH: 681321
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 16091017
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 338955

Last update: 2026-04-21 17:54 UTC (updated every hour)