Questions for both you and OP:

Have you ever sent any email using this as a return address?

Have you ever received any non-spam HN mail at this address?

If yes, it seems like it might have been grabbed from a server in the middle. If not, then it does sound like HN has to be the direct source.