On a corporate network, blocking lesser-used TLDs combined with an aggressive use of DNS and web reputation filters is recommended. I work for a company that provides both services. Makes sense to keep Internet traffic on a sensitive network limited to the sites most likely to have a business case.

For end-users, less so - stick to DNS blocklists and uBlock filters for malware domains which are freely available.