Anon's. amid this questionable DNS fuckery lately, he's some food for thought, another layer of protection, set up a separate burner computer, a virtual "guest" computer running within your main "host" computer, https://www.virtualbox.org/
Here's how I use it, I installed the virtualbox, created a new clean VM (virtual machine) from scratch (using Win 7 & old Win 7 key). Before using it for any internet use, I installed all my favorite software I would require for net browsing, installed all updates and had it ready to go but new and unused. I have all settings in the virtualbox options so that there is no file sharing, no connections between my main "host" machine and the virtual "guest" machine, if someone hacks into this virtual machine there is nothing they can gain about me personally other then the past browsing history and I NEVER use the virtual machine for anything like banking, paying bills, accessing emails, ect, they will never mine any useful info on me, just like a burner phone.
Once I had the new fresh machine set up the way I wanted it and before using it for any internet use, I then, using the virtualbox software, made a clone of this fresh new unused machine for a pure clean backup copy and stashed it.
Now if I ever suspect something is amiss, I can just delete this VM (virtual machine), pull up that fresh unused cloned copy I made, clone that clone and be back up and running in less then ten minuets. Some food for thought anon's, for what it's worth.
And I always use a good VPN service, in fact I leave my VPN running 24/7 or as long as the desktop in on which 99.9% of the time.