A domain block includes all subdomains so it's usually best to just block the main domain instead of trying to guess which subdomains they use.
About TLDs, I am not sure. I have tried asking about this on the github but didn't get a reply.
For what it's worth, I have blocked some obscure TLDs used by free domain providers as they tended to be spammers, trolls etc, and so far I haven't seen anyone from those TLDs, but that could just be coincidence.