Hacker News Reader

Do they also check by CNAME? If I buy a domain and connect DuckDNS via CNAME, would filters trip on this as well?

I don't think they do. I've been using DuckDNS against my own domain CNAMEs for years.