d6991.com traffic

[Christopher Hunt]

Beginning about 0900UTC we began seeing about 50x our usual DNS traffic.
 75% of the traffic is for d6991.com.  Does anyone else see this?  Who are
these folks (WEBNIC.CC)?

-chris