instead of letting the browser grab the dns abstractly all the way down through the os, use your ISP's standard DNS for the exact address in the address bar and/or a white list, and their DNS for implicit requests. Still leaks a picture of you, but a far muddier one.