Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 810933
2: top 643892
3: info 478816
4: cn 128443
5: pro 97359
6: cc 85674
7: shop 82161
8: vip 79987
9: app 71566
10: ru 60576
n/a: (vercel.app) 55050
11: co 45625
12: sbs 44233
13: net 39789
14: dev 32275
15: org 30992
n/a: (pages.dev) 28235
16: biz 26967
17: life 26220
18: icu 23494
19: click 22637
20: cfd 22545
21: us 20149
22: club 18633
n/a: (ru.com) 18325
23: today 17537
24: loan 16229
25: wiki 15238
26: xyz 14695
27: gdn 13754
28: cyou 13711
29: me 13247
30: mobi 13175
31: my 12753
n/a: (sa.com) 11313
32: qpon 11251
n/a: (weebly.com) 9723
33: ink 9232
34: io 9176
n/a: (duckdns.org) 8973
n/a: (netlify.app) 8326
35: pizza 7766
36: one 7443
37: live 7306
38: bid 6970
n/a: (za.com) 6451
n/a: (github.io) 6161
39: link 6087
40: uk 5182

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. is.gd
3. bit.ly
4. t.co
5. tinyurl.com
6. x.gd
7. wa.me
8. rcw3r.app.goo.gl
9. xek99.app.goo.gl
10. yhv6e.app.goo.gl

The total domains in each of our datasets:
 
ABUSE: 3111532 - CRACKED: 951 - CLICKTRACKERS: 19382
DISPOSABLE: 33625 - MALWARE: 3490 - PHISH: 539656
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 17151654
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 287748

Last update: 2025-11-15 18:54 UTC (updated every hour)