Under 692ad897a15978e7cfd099ace86a56bf there are a bunch of PHP scripts, including sape.php, which has a bunch of crap in it linking to db.linkfeed.ru.
So anyway, rather than investigate fully right now I’m scrapping the WooTheme altogether. So the site is going to look more boring, but oh well.