My guess is there's a script somehow deployed on error events