[w3ll_w3ll_w3ll]

Not if the resolver is validating the tls certificate. That's the point of doh, make impossible to intercept dns query.