Lists

There are a variety of named lists that can be accessed via MQL. List names are always prepended with $. Today, lists are only created and updated by the Sublime team. In the future, we'll enable arbitrary list creation, updating, and sharing.

📘

How to use lists in rules

See the lists syntax for usage instructions.

Available Lists

Alexa Top 1 Million Domains

$alexa_1m

The top 1 million domains, as ranked by Alexa.

Disposable Email Providers

$disposable_email_providers

Domains of disposable (or temporary) email providers that generate short-lived email addresses not owned by or attributable to any single user.

Free Email Providers

$free_email_providers

Domains of free email ("freemail") providers that allow anyone to create an email address. This is important to ensure the email address does not inherit the reputation of the freemail provider's domain. This list also includes the contents of $disposable_email_providers.

Free File Hosts

$free_file_hosts

Domains of free file hosting sites that allow anyone to upload and serve arbitrary files.

Free Subdomain Hosts

$free_subdomain_hosts

Free subdomain sites that allow anyone to create their own subdomain and host arbitrary content. This is important to ensure the subdomains do not inherit the reputation of the root domain.

Majestic Million Domains

$majestic_million

The Majestic Million is a collection of 1 million domains that have the most referring subnets.

Suspicious TLDs

$suspicious_tlds

Top-level domains that are either frequently abused, free to register, or otherwise not generally used in the normal course of business or email communication.

Tranco Top 1 Million Domains

$tranco_1m

The top 1 million domains found by Tranco ranking, a research-oriented top sites ranking hardened against manipulation.

Cisco Umbrella Top 1 Million Domains

$umbrella_1m

Top 1 million most popular domains as ranked by Cisco Umbrella (based on passive DNS data).

Umbrella Top TLDs

$umbrella_1m_tld

The TLDs found in $umbrella_1m.

URL Shorteners

$url_shorteners

Known URL shorteners that allow anyone to host arbitrary content.