Now I'm wondering if Heimdal really sent the extra '@', or if '@' was just 
the garbage after the memory buffer on the reporter's platform.

Unfortunately, I don't think there's any good way to know at this point.