fair enough.

But had you posted it while logged in, which would have attached your name, rather than posting as an annonymous monk, the suspicion might have been somewhat allayed.

SOMEWHAT!
... your commercial site might have been hacked (one of mine was recently, albeit only defaced *); your commericial site might even have been malign -- read up on some of the phishing tricks in use now.

* hosted on shared server. when we got to the bottom of things, it turned out another client had inadvertently opened the door with an insecure script. Hard on my client, tho, particularly since she can't afford a dedicated server.

...and all that said, I may now check out the product... with a debugger!

...and if that passes, well, either good for you, or shame on my debugging