Summary of post = TLD blacklist: io && TLD whitelist: mkdocs.github.io does not work. WAI?

pfsense: 2.4.5-RELEASE, pfblockerng: pfBlockerNG-devel 2.2.5_30
DSNBL: enable
TLD: enable
All IP and DSNBL lists disabled
TLD blacklist: io
TLD whitelist: tried both github.io and mkdocs.github.io

Expected result: I thought mkdocs.github.io/mkdocs/ would work for one of the whitelist combinations. It does not.

Workaround = If I add github.io to the blocklist with io it works.
Workaround 2 = I could add pi-hole which supports regex based exclude and include patterns.

• Question 1 - is this working as intended? Note, github.io and mkdocs.github.io resolve to the same addresses
• Question 2 - is there a way to block an entire domain while permitting a wildcarded subdomain like *.github.io and ..github.io. Is there a different way that doesn't require force reload for every whitelist change.

Thank you for your help.