The European Commission was blamed for not maintaining a full list of domain variations used by sanctioned entities.