As is generally the case, really. Once we were alerted to it, the rest was confirmed through our usual methods (logged information, etc.), and the group in question was blatant enough to make it easy.

valguarnera@carrionfields.com