Android protects these lookups through a protocol called DNS-over-TLS, which encrypts them before any content begins to load.