> They are hosting a website at a static IP, so a mapping of public IP -> secret IP must be stored somewhere. Not necessarily. The stored mapping could also be

> They are hosting a website at a static IP, so a mapping of public IP -> secret IP must be stored somewhere. Not necessarily. The stored mapping could also be public IP -> username, plus a separate mapping username -> password or username -> key; with a mapping public IP -> TCP connection or public IP -> UDP connection existing only in memory and only while the connection is active. And from what I understood from the article, and from an earlier article linked to by the first link in this article, the connection has last been active in June.