These are the top-level domains threat actors like the most

According to a new analysis by Unit 42 researchers, out of over a thousand top-level domain choices, threat actors prefer a small set of 25, which accounts for 90% of all malicious sites.