Blacklist question

You don’t have to, and I wouldn’t recommend it. A blacklist entry of domain.com would catch BOTH https://www.domain.com and domain.com, where as an entry of https://www.domain.com would catch ONLY https://www.domain.com. So, leave the www off. If the domain seems rather unique, eg. v1agr4.com, then just block the word v1agr4. That will catch every possible domain variation that includes that word.