DNS hijacking - problem
Certain domains resolve to the wrong IP anywhere in China
Got two packets when querying foriegn DNS server from China
Got two packets when querying Chinese DNS server from US
Identify the engine with TTL trick