Hacker News Reader

It could be DNS over https, which Mozilla have been experimenting with.

It wasn't on by default, but yeah, once I turned it on, it entirely bypassed hosts for everything, not just Facebook owned domains.