Protecting your web traffic can be very easy: use HTTPS where you can, maybe install HTTPS everywhere to enforce that, use a VPN for an extra layer of security. Meanwhile DNS gets so little attention ...
Only the Win 7 machine (with the odd results) is running dnscrypt-proxy.exe and the service nscrypt-proxy from Simple DNSCrypt. Also, the results in the nslookup in the Win 7 machine start with This ...