Technically correct -- the best kind of correct. Though obviously if you've got your own DNS server in front of the ISP's then you could just configure that to

Technically correct -- the best kind of correct. Though obviously if you've got your own DNS server in front of the ISP's then you could just configure that to resolve names however you like. Which would then typically cause it to accurately resolve the canary domain by default and thereby cause the application to not use it. Hmm.