Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 1193930
2: info 676530
3: top 495841
4: co 160733
5: cn 143741
6: cc 100991
7: vip 84375
8: click 78076
9: shop 76343
10: help 74267
11: pro 72448
12: ru 66959
13: dev 63318
n/a: (pages.dev) 53608
n/a: (com.cn) 47084
14: org 46753
15: sbs 42251
16: net 42021
17: cfd 41327
18: biz 32344
19: garden 30518
20: lol 28975
21: app 28721
22: my 24762
n/a: (hl.cn) 20643
23: today 20302
24: life 17815
25: me 16664
26: xyz 16642
27: de 15864
28: digital 14554
29: uk 14265
n/a: (vercel.app) 13789
30: rest 13122
31: wiki 9582
32: loan 9400
n/a: (netlify.app) 8543
33: cyou 8105
34: one 8092
n/a: (blogspot.com) 7787
35: io 7724
n/a: (workers.dev) 7644
36: live 7521
n/a: (duckdns.org) 7429
37: online 7112
38: icu 7020
39: us 6743
n/a: (co.uk) 6637
n/a: (github.io) 5833
40: world 5247

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. shorturl.at
2. tu3ph.app.goo.gl
3. xek99.app.goo.gl
4. cutt.ly
5. m3z8m.app.goo.gl
6. rcw3r.app.goo.gl
7. yhv6e.app.goo.gl
8. t.co
9. wa.me
10. x.gd

The total domains in each of our datasets:
 
ABUSE: 3841735 - CRACKED: 726 - CLICKTRACKERS: 23276
DISPOSABLE: 35133 - MALWARE: 3528 - PHISH: 560934
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 19369243
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 398781

Last update: 2026-09-25 20:55 UTC (updated every hour)