[troyb]

That's probably a good guess which if true makes it difficult for us to to fix. I'm not sure storing a spoofed originating url would be a very nice thing to do.