I guess the proxy IP is the same. They must just run a single tunnel per hostname with multiple upstreams.

Nice find ;)