The tk, gq, cf, ml and ga TLDs offer free registration, so they're widely used in scams and fraud.

In most cases you can safely block all traffic to/from them, as well as email addresses using them.