Interesting. thanks for sharing. you try a DNS block on it?  you're sure that the DNS call is coming from that app? what tool are you using?