I'm hoping someone more technically educated (or equipped) or that has more time will trace it and expose what's happening somewhere, either here or on Reddit or on some infosec website like Krebs on Security (he'd love knowing how and why this is happening).