I give equal likelihood to it being malware related, to somebody moving just disabling a settings on some server that can potentially connect to the server host

I give equal likelihood to it being malware related, to somebody moving just disabling a settings on some server that can potentially connect to the server hosting the key. I don't think it's somebody just posting it online, or moving it.