[peanut-walrus]

If your VPN provider offers a socks5 instance you can do this entire thing with a socat oneliner + the dns hijack of course.