First time visits without 'www.' show as blocked

You can whilelist the bare domain for that site. How do I whitelist or blacklist a domain?