Anti-spam TLD measures are absolutely necessary

Unfortunately we are being hit by a spammer using proxies and hacked sites and obviously spam domain names. All they do is register accounts… endlessly. While I have the anti-spam module where we can blacklist domains, it doesn’t help. They continue to hack sites and use other people’s domain names to set up accounts among other wasteful acts. (would love a collection of anti-spam modules that work and aren’t too aggressive.)

What we’d like to block most are all these spammy top level domains which no one we will ever consider registering will use, such as .xyz among many others. Am curious if anyone has done this or expanded the existing domain registrations module.

Drupal version: