Extend blacklisting to subdomains, and test it.