Below are the top 40 TLDs listed in MULTI (ranked by unique counts).
Numbers on the right are counts of the domains in the TLDs in the middle:

1: com 802358
2: top 638226
3: info 477447
4: cn 127057
5: pro 97426
6: cc 85415
7: shop 82036
8: vip 80259
9: ru 60201
10: co 45627
11: sbs 44005
12: net 39179
13: org 31055
14: dev 30640
15: app 28445
16: biz 26790
n/a: (pages.dev) 26574
17: life 26026
18: icu 23495
19: click 22798
20: cfd 22304
21: us 20159
22: club 18668
n/a: (ru.com) 18098
23: today 17166
24: loan 16233
25: wiki 15272
26: gdn 13752
27: xyz 13722
28: cyou 13565
29: mobi 13222
30: me 13175
31: my 12749
n/a: (vercel.app) 12175
n/a: (sa.com) 11334
32: qpon 11235
n/a: (weebly.com) 9633
33: ink 9369
34: io 8959
n/a: (duckdns.org) 8918
n/a: (netlify.app) 8168
35: pizza 7806
36: one 7434
37: live 7366
38: bid 7150
39: link 6603
n/a: (za.com) 6473
n/a: (github.io) 6018
40: uk 5070

Full list at https://www.surbl.org/static/tld-abuse-complete-rankings.txt

Below are the top 10 of abused redirectors (to our knowledge):

1. rebrand.ly
2. is.gd
3. bit.ly
4. t.co
5. tinyurl.com
6. x.gd
7. wa.me
8. rcw3r.app.goo.gl
9. xek99.app.goo.gl
10. yhv6e.app.goo.gl

The total domains in each of our datasets:
 
ABUSE: 3047761 - CRACKED: 951 - CLICKTRACKERS: 19796
DISPOSABLE: 33339 - MALWARE: 3473 - PHISH: 492462
 
FRESH is a subscriber only dataset not publicly available
The total listed domains in the FRESH dataset: 16973927
 
HASHBL is a subscriber only dataset not publicly available
The total listed domains in the HASHBL dataset: 288096

Last update: 2025-11-12 18:54 UTC (updated every hour)