Enable/fix matching "*" as the destination

# Why
If the default setting is allow then the user can deny a destination of "*" for a specific site to block all requests. A whitelist for that site can then be created by adding specific allow rules. This avoids having to use a default setting of deny and creating a whitelist for every single website.

## Example
On webmail I don't want viewing an email to cause unexpected requests that may be a security issue so I deny the destination "*" for the webmail site and then allow the destinations required for the site to function. This is how RequestPolicy works in deny-by-default mode but then you are required to create allow rules for every website, which is much more time consuming. This patch provides the best of both worlds.

# How
Check for a value of "*" at the highest level DomainEntry instead of only checking a level below if the highest level matches the search domain TLD.

*This appears working for my purposes but needs to be tested and reviewed by someone who understands the matching system properly.*