See: http://urlquery.net/report.php?id=638938
See the IDS alert explained here: https://lists.emergingthreats.net/pipermail/emerging-sigs/2011-September/015925.html
and here: http://www.cloudshield.com/blog/dns-security-expert-series/blocking-dns-covert-channel-attacks/
link article author = ROBERT WHITTENBERG
Status: failure: <urlopen error [Errno -2] Name or service not known
polonus