How would one go about blocking something like *keyword*.*

I'm hoping to block some vpns/dns servers that I'm seeing show up in the logs, one example is hola. However, since they come in to a number of domains I was hoping to be able to block them as the subject notes ( *keyword*.* ). Is there a way to achieve this or do we have no other choice than to put in each and every domain?

Is there a way to get a notification when a domain is hit with a keyword in it?