[ti_ranger]

> Is this because ISP's can see DNS traffic? as it's in the clear over UDP...

Not necessarily.

It could very easily be done via IP address matching (think BGP communities that advertise specific subnets between one part of a network and another, as are typically used for optimal CDN routing etc.).