Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 796678
2: top 634091
3: info 471476
4: cn 125426
5: pro 97213
6: cc 85224
7: shop 81912
8: vip 79443
9: ru 59824
10: co 45444
11: sbs 43427
12: net 38634
13: org 31003
14: dev 29453
15: app 28235
16: biz 26715
17: life 25903
n/a: (pages.dev) 25417
18: icu 23036
19: click 22732
20: cfd 21777
21: us 20120
22: club 18672
n/a: (ru.com) 18143
23: today 17077
24: loan 16338
25: wiki 15261
26: gdn 13752
27: cyou 13642
28: mobi 13378
29: xyz 13353
30: me 13124
31: my 12759
n/a: (vercel.app) 12111
n/a: (sa.com) 11336
32: qpon 11183
n/a: (weebly.com) 9587
33: ink 9466
34: io 8875
n/a: (duckdns.org) 8870
n/a: (netlify.app) 7980
35: pizza 7925
36: bid 7202
37: live 7160
38: one 7145
39: link 6542
n/a: (za.com) 6490
n/a: (github.io) 5974
40: uk 5055

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. is.gd
3. bit.ly
4. t.co
5. tinyurl.com
6. x.gd
7. wa.me
8. rcw3r.app.goo.gl
9. xek99.app.goo.gl
10. yhv6e.app.goo.gl

The total domains in each of our datasets:
 
ABUSE: 3024649 - CRACKED: 951 - CLICKTRACKERS: 18687
DISPOSABLE: 35556 - MALWARE: 3456 - PHISH: 486159
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 16894008
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 286583

Last update: 2025-11-10 15:54 UTC (updated every hour)