[bXVsbGVy]

Thanks for pointing this out. I looked for the domain of fetched resources, and assumed they weren't. It seems they are using, but from their own domain.