a curious domain lookup

[#1]

[quote="windump"]18:29:16.888802 IP pth-cdns01.plus.net.53 > MyComputer.1028:  30371 5/9/9 A weevil.pwns.ms,[|domain]
(this isn't faked up by the way; it's the genuine output from a tcpdump tonight)

[#2]

Quote

PING weevil.pwns.ms (212.13.194.87) 56(84) bytes of data. 64 bytes from weevil.pwns.ms (212.13.194.87): icmp_seq=1 ttl=58 time=10.9 ms 64 bytes from weevil.pwns.ms (212.13.194.87): icmp_seq=2 ttl=58 time=11.8 ms 64 bytes from weevil.pwns.ms (212.13.194.87): icmp_seq=3 ttl=58 time=13.0 ms

Quote

Hostname: weevil.pwns.ms ISP: Jump Networks Ltd Organization: BitFolk Limited - Virtual Private Server Hosting Proxy: None detected Type: Unknown Country: United Kingdom State/Region: H9 City: London Latitude: 51.5 Longitude: -0.1167

Quote

jeremy@HECTOR:~$ nslookup -all weevil.pwns.ms Server: 192.168.1.1 Address: 192.168.1.1#53 Non-authoritative answer: Name: weevil.pwns.ms Address: 212.13.194.87