A coworker sysadmin once told me that when he was inspecting the web server access logs (for an unrelated reason) he noticed that many requests to a resource on our website have a strange referer URL that was never present in requests to pages. He inspected that site and found that they were using our resource. We didn't really care about it, but that was really interesting.

Maybe it's the same with these sites?