Did you try with a different browser/system? Your browser may have your ISP DNS cached/pulled from system config and is probably doing DNS over TLS or DNS over HTTPS, which won't trigger your 'Intercept-DNS' redirection.
I believe that on Windows with DNS servers manually set and a Chromium-based browser, they still try to make DNS over HTTPS to those addresses.