If the target site is controlled by the same party, it could easily include logic for loading the auto-scrolling script when opened from the player, and pretend

If the target site is controlled by the same party, it could easily include logic for loading the auto-scrolling script when opened from the player, and pretending to be a regular site otherwise.