I bet someone like cloudflare could bounce them around traps across multiple domains under their DNS and make it harder to detect the trap.