You have the following regex whitelist entry applied to groups 0,1,2,5,6.
(\.|^)kicker\.de$
Whitelist entries override any blackist entries, so your domains are not blocked by your blacklist entries:
pihole-FTL regex-test b0.w.kicker.de "(\.|^)kicker\.de$"
[i] Compiling regex filter...
Compiled regex filter in 0.244 msec
Checking domain...
(\.|^)kicker\.de$ matches
Time: 0.119 msec
pihole-FTL regex-test ssl.3.damoh.kicker.de "(\.|^)kicker\.de$"
[i] Compiling regex filter...
Compiled regex filter in 0.238 msec
Checking domain...
(\.|^)kicker\.de$ matches
Time: 0.221 msec
The priority is:
- Exact Whitelist
- Regex Whitelist
- Exact Blacklist
- Blocklist domains (AKA
gravity) - Regex Blacklist
If a domain is found anywhere from top to bottom, FTL skips the rest of the tests.