Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: info 716333
2: com 709762
3: top 624551
4: cn 135960
5: cc 102893
6: vip 93199
7: pro 76792
8: shop 73125
9: ru 72985
10: help 72269
11: click 69835
12: co 55502
13: sbs 49516
14: cfd 48732
15: net 41864
n/a: (com.cn) 40767
16: org 27732
17: garden 26689
18: dev 25562
19: app 23961
20: today 22753
21: life 22509
n/a: (pages.dev) 21349
22: my 21138
23: biz 20921
n/a: (hl.cn) 16976
24: me 16098
25: wiki 14583
26: xyz 13708
27: rest 11876
28: cyou 9701
29: loan 9615
30: one 9461
n/a: (duckdns.org) 9151
n/a: (vercel.app) 8894
31: uk 8725
32: icu 8564
33: club 7979
34: io 7500
n/a: (netlify.app) 7177
35: live 6893
n/a: (ru.com) 6143
36: de 6085
n/a: (github.io) 6064
37: digital 5714
38: world 5554
n/a: (sa.com) 5545
n/a: (filesusr.com) 5184
39: us 5128
40: qpon 4950

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. cutt.ly
4. is.gd
5. t.co
6. x.gd
7. bit.ly
8. wa.me
9. search.app
10. lin.ee

The total domains in each of our datasets:
 
ABUSE: 3286777 - CRACKED: 816 - CLICKTRACKERS: 22740
DISPOSABLE: 37456 - MALWARE: 3358 - PHISH: 536356
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 18179928
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 316362

Last update: 2026-07-02 06:54 UTC (updated every hour)