sqlite3 /etc/pihole/pihole-FTL.db "SELECT DOMAIN, count(DOMAIN) FROM queries WHERE (STATUS == 2 OR STATUS == 3) GROUP BY DOMAIN ORDER BY count(DOMAIN) DESC LIMIT 15"

returns:

discourse.pi-hole.net|183355
connectivitycheck.gstatic.com|164736
community.svc.ui.com|114657
www.msftncsi.com|86716
www.varia-store.com|81430
scontent.fgci1-1.fna.fbcdn.net|62595
dualstack.guardian.map.fastly.net|62480
192-168-1-5.c005b4ada9924bb388ab65319c17279c.plex.direct|60773
x2m8rwtfjg4j.statuspage.io|60064
nrdp.prod.ftl.netflix.com|54254
www.expressapisv2.net|51076
api-global.netflix.com|48877
fonts.gstatic.com.localdomain|43968
dmv2chczz9u6u.cloudfront.net|43510
star-mini.c10r.facebook.com|38378

sqlite3 /etc/pihole/pihole-FTL.db "SELECT DOMAIN, count(DOMAIN) FROM queries WHERE (STATUS == 1 OR STATUS == 4 OR STATUS == 5 OR STATUS == 6 OR STATUS == 7 OR STATUS = 8) GROUP BY DOMAIN ORDER BY count(DOMAIN) DESC LIMIT 15"

returns:

ichnaea.netflix.com|267968
ted.dailymail.co.uk|79297
t.dailymail.co.uk|79125
widget-mediator.zopim.com|73379
data.cnn.com|69864
prebid.adnxs.com|47370
ib.adnxs.com|47275
reports.crashlytics.com|35903
ads.adaptv.advertising.com|34109
fls-eu.amazon.co.uk|25136
tlu.dl.delivery.mp.microsoft.com|23841
status.geotrust.com|21949
analytics.plex.tv|21379
search.spotxchange.com|20253
mailonline-uk-d.openx.net|18358

https://docs.pi-hole.net/database/ftl/