Blacklist entry with wildcard doesn't block subdomains

Added *.trackingfirm.com to my blacklist and the root domain gets blocked but ads.trackingfirm.com still comes through. Wildcard blacklisting isn't matching subdomains as I'd expect.