Rethinking IPID-Based Fragment Detection: An Empirical Study of POPS Rℓ2 for DNS Cache Poisoning