Wikileaks attack fake?

I was curious to how bad the DDOS of Wikileaks was, so I pulled down the A records for the domain. I noticed that there were two records. One of them never loads, and the other IP returns an empty response. I decided I would use curl to specify the Host: header, and I suddenly saw wikileaks again. Nothing there though, so it leads me to believe maybe something fake is going on? Either that or the DDOSers are quite naive (to leave one IP protected). You can even browse the site, just put 46.51.186.222 wikileaks.org in your hosts file.