when the origin is properly secured (which we encourage all customers to do) even passive DNS won't help: https://dnstrails.com/domain/canhazip.com