edit: nevermind, i'm a paranoid burnout
Ok, I'm an idiot.
I tried using the anonymous feature to send some BTC to myself, but I ended up apparently sending to the address
[derp]
which I have absolutely no clue where it came from. I thought I copied my desktop wallet's address from bitcoin-qt, but I noticed I never got them, and then I realized this rogue address was in my clipboard, and it's where they got sent to. None of my address books have this address, google doesn't have this address, and forum search turned up nothing, and it has no previous transactions.
..and now it has a confirmation.

any ideas what the heck happened?