QubesOS and use fresh “untrusted” browsers every time. You can use Whonix and TOR with QubesOS as well.
OpenBSD + Firefox. You can use something like IceWeasel if it makes you feel better.
Privacy Badger and Privacy Possum are a must if you care about this thing. You can use Ghostery but I find that those two do as good if not a better job. Ublock Origin is a must, as well, if you’re not doing it at the DNS layer.