DNSSEC would reveal that it's happening straight away, but that doesn't get you the IP address. Of course, as mentioned putting your recursive DNS server on a

DNSSEC would reveal that it's happening straight away, but that doesn't get you the IP address. Of course, as mentioned putting your recursive DNS server on a cheap VPS somewhere that doesn't hack your connection would.