These are the top-level domains threat actors like the most

[silversurfer]

Content source

https://www.bleepingcomputer.com/news/security/these-are-the-top-level-domains-threat-actors-like-the-most/

Out of over a thousand top-level domain choices, cyber-criminals and threat actors prefer a small set of 25, which accounts for 90% of all malicious sites.
Six out of the top 10 of these 25 top-level domains (TLD) are handled by authorities in developing countries, hosting a disproportionately large number of risky sites compared to their populations.
These stats are revealed in an in-depth analysis from researchers at Palo Alto Networks, who took a deep dive into the TLDs commonly used by threat actors and why they are being chosen. The categories picked for analysis are malware, phishing, command and control (C2), and grayware (adware, 'joke malware,' spyware).

Table 1: TLDs with the highest volumes of malicious content distribution
Source: Unit42​

These are the top-level domains threat actors like the most

Out of over a thousand top-level domain choices, cyber-criminals and threat actors prefer a small set of 25, which accounts for 90% of all malicious sites.

www.bleepingcomputer.com