Didn't get to collect evidence because I didn't want to expose, but after going through a demo sign up flow from an end customer point, the meta title and link redirected to boomerangme domain. Huge read flag, and not sure why these kinds of things are still happening.