Do you have an affiliate plan, or likely to have one? Maybe they plan to redirect with their affiliate ID at some point?
We're a small bot security/captcha company and pretty regularly get various attacks thrown at us - figuring out if somebody is up to something more along those lines was my main concern.