If you opt-in to the Cloudflare DNS scanning option, image domains (but not image content) are checked against Cloudflare before downloading. See Cloudflare's blog post on their DNS service here: https://blog.cloudflare.com/introducing-1-1-1-1-for-families/