Deny List not working

While on macOS 11.4, I had added the following to my Deny List:

*.docker.com
*.desktop.docker.com

And yet for some reason in the last few days, I can now query it:

; <<>> DiG 9.10.6 <<>> desktop.docker.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10186
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;desktop.docker.com.        IN    A

;; ANSWER SECTION:
desktop.docker.com.    300    IN    A    204.246.191.122
desktop.docker.com.    300    IN    A    204.246.191.105
desktop.docker.com.    300    IN    A    204.246.191.77
desktop.docker.com.    300    IN    A    204.246.191.113

;; Query time: 37 msec
;; SERVER: 192.0.2.42#53(192.0.2.42)
;; WHEN: Thu Jul 15 14:13:01 MDT 2021
;; MSG SIZE  rcvd: 111

No entries in the Deny List are working now. Has anyone else experienced this? My privacy block lists are working, and my custom rewrites are working, but everything in Deny List is now resolving.