Install SimpleDNScrypt.
Set DNS settings to loopback 127.0.0.1
Now sends all your DNS (53) queries through HTTPS (443), and encrypts them.
Prevents all ISP attacks/blocks.
Remember, every time you access an TLS site, it sends request in plain text, so
Use Epic browser, has inbuilt encrypted VPN with exit nodes in 7 countries.
Now you are DARK.
I authored the original "edit Hosts file"