diff --git a/src/dnsmasq_interface.c b/src/dnsmasq_interface.c
index dc7ae777..b8257208 100644
--- a/src/dnsmasq_interface.c
+++ b/src/dnsmasq_interface.c
@@ -1154,6 +1154,11 @@ static bool check_domain_blocked(const char *domain, const int clientID,
 		// ...
 		dns_cache->list_id = -1 * (list_id + 2);
 
+		// Mark query as allowed to prevent further checks such as CNAME
+		// inspection. This ensures antigravity matches have similar effects
+		// than explicitly allowed domains.
+		query->flags.allowed = true;
+
 		return false;
 	}