My ISP seems to be hijacking all DNS requests, regardless of server, so that they can blackhole facebook traffic (facebook.com is being routed to 127.0.0.1). I can run DNS queries against example.com and still get results: