Yes. That makes it less likely IMO that it was a GAW source, as they wouldn't have incentive to reveal that. Maybe it was someone unrelated to the whole story, who did it for lulz? Or, as everything seems to be tied to the website's email, maybe they could ransom it back to coinfire or use it to get into bank accounts/other ways of making money? It just doesn't seem likely that someone would do this with the intention of propping up xpy.