Block .co TLD

I have a FortiGate 61E, and have a bunch of SPAM coming in from various .co domains.  I want to block the entire TLD.

In Security Profiles - Anti-Spam, I've added Email wildcard *@co, and these are still coming through.  What's the correct syntax for this?