Should also consider .top. It's along with .science as the biggest offenders for...

dredmorbius · on June 25, 2017

That's on Bluecoat's list.

My set (dnsmasq format):

     # Shady TLDs (see BlueCoat)
     address=/.accountant/0.0.0.0
     address=/.christmas/0.0.0.0
     address=/.click/0.0.0.0
     address=/.country/0.0.0.0
     address=/.cricket/0.0.0.0
     address=/.date/0.0.0.0
     address=/.download/0.0.0.0
     address=/.faith/0.0.0.0
     address=/.gdn/0.0.0.0
     address=/.gq/0.0.0.0
     address=/.kim/0.0.0.0
     address=/.link/0.0.0.0
     address=/.loan/0.0.0.0
     address=/.mom/0.0.0.0
     address=/.ninja/0.0.0.0
     address=/.online/0.0.0.0
     address=/.racing/0.0.0.0
     address=/.rocks/0.0.0.0
     address=/.science/0.0.0.0
     address=/.space/0.0.0.0
     address=/.stream/0.0.0.0
     address=/.top/0.0.0.0
     address=/.win/0.0.0.0
     address=/.work/0.0.0.0
     address=/.xin/0.0.0.0
     address=/.xyz/0.0.0.0
     address=/.zip/0.0.0.0

Checking:

    $ host i.am.the.top
    i.am.the.top has address 0.0.0.0

flashmob · on June 25, 2017

.XYZ is used by Google's parent company Alphabet inc. I thought that gave .XYZ a bit more street cred, I guess not.

https://abc.xyz