Found this in our webserver logs, from a CCC IP address:

(We’re far from the only one, it’s going around…)