Advanced Blocking – blocking domains – bug or limitation

Hello,

I am using WordFence Advanced Blocking to block Referrer Spam

since Spamers are changing domains constantly, it’s a never ending game of cat and mouse, so instead of trying to find new Referrer Spam in Google Analytics, I have decided to block whole domain endings

I don’t want Referral traffic from these domains: *.tk,*.cf,*.gq,*.ga,*.ml,*.xyz

spamers are using free domains .tk , .cf, .gq, .ga, .ml
and cheap domains .xyz

so I have tried to create a rule

Referer (website visitor arrived from) that matches: *.tk,*.cf,*.gq,*.ga,*.ml,*.xyz

Enter a reason you're blocking this visitor pattern: Referrer Spam

but it doesn’t work

however, if I create separate rules for each domain ending, it works

Referer (website visitor arrived from) that matches: *.tk
Enter a reason you're blocking this visitor pattern: Referrer Spam .tk

Referer (website visitor arrived from) that matches: *.ml
Enter a reason you're blocking this visitor pattern: Referrer Spam .ml

and so on…

could you please look up, why is it so ?
you can register some free domain on freenom.com for testing purposes

https://wordpress.org/plugins/wordfence/