Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: top 652733
2: com 547843
3: info 431285
4: cc 124800
5: cn 111329
6: vip 103781
7: app 93323
8: pro 82484
9: dev 78674
n/a: (pages.dev) 74902
10: ru 71614
n/a: (vercel.app) 66820
11: shop 66709
12: click 53020
13: net 43310
14: sbs 42752
15: co 34800
16: cfd 34105
17: life 32201
18: help 30368
19: org 27615
n/a: (filesusr.com) 25202
20: biz 25075
21: today 21130
22: xyz 20153
n/a: (netlify.app) 19235
n/a: (com.cn) 16889
23: my 16250
24: me 15186
25: wiki 15023
n/a: (ru.com) 13851
26: icu 13001
27: club 11814
28: loan 11807
29: rest 11101
30: io 10936
31: cyou 10677
32: us 9104
n/a: (github.io) 9011
n/a: (duckdns.org) 8866
n/a: (sa.com) 8020
n/a: (weebly.com) 7877
33: uk 7522
n/a: (blogspot.com) 6810
34: live 6621
35: qpon 6216
36: bond 6145
37: de 5686
38: world 5655
39: ink 5646
n/a: (za.com) 5089
40: link 4851

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tinyurl.com
3. t.co
4. cutt.ly
5. is.gd
6. rebrand.ly
7. bit.ly
8. x.gd
9. wa.me
10. lin.ee

The total domains in each of our datasets:
 
ABUSE: 2928614 - CRACKED: 867 - CLICKTRACKERS: 17749
DISPOSABLE: 36645 - MALWARE: 2595 - PHISH: 606254
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 15699794
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 333911

Last update: 2026-04-07 09:54 UTC (updated every hour)