the rule is that a '.' breaks a star, hence  *.funspace.notTLD does not cover things that are in *.red.funspace.notTLD, etc, etc, etc.
hence why there is a need to cover each level in a domain with it's own wildcard.