Attackers abuse Google DNS over HTTPS to download malware

While Google DNS is being used to resolve the suspicious domain, the response returned via Google DNS contains the malicious payload in an encoded form, as verified by BleepingComputer.