[gsnedders]

Per the response it is using pubsuffix+1, and hence co.uk is treated as an effective TLD.

[ademarre]

The public suffix is more correct than the TLD; however the fact that publicsuffix.org accepts private domains at the domain owners request weakens the mitigation.