...but the API call was coming from inside the server!!! 👻