Here's your answer:

    imageshack.com
    about.com
    ehow.com
    sparkstudios.com 
    yfrog.com
    liveinternet.ru
    pgmediaserve.com
    wikimedia.com
    adfly.com
    thefreedictionary.com
    amung.us
    btjunkie.com
    bluehost.com
    drtuber.com
    ero-advertising.com
    autohome.com.cn
    exblog.jp
    inetglobal.com
    milliyet.com.tr
    imagebam.com
    naukri.com
    bigpoint.com
    altervista.com
    hypergames.com
    gsmarena.com
    excite.co.jp
    admagnet.com
    macrumors.com
    linkbucks.com
    cracked.com
    traidnt.com
    radikal.ru
    paper.li
    eluniversal.com.mx
    wiktionary.org
    indianrail.gov.in
    docin.com
    123rf.com
    perezhilton.com
    mangafox.com
    hostmonster.com
    myfreecams.com
    giveawayoftheday.com
    ultimate-guitar.com
    itpro1.nikkeibp.co.jp
    pantip.com
    hawaaworld.com
    120ask.com

4.8%. That's more than I would have thought, but it's still a small number: 95.2% of the Alexa 1000 keep AXFR disabled. Also: someone should tell some of these people not to do this.