I eventually put some code in class-http.php to email myself a stack trace every time a request was made by WP.
I soon discovered that the origin of the request was the RSS widget which had been configured with my own site’s URL.
A nice loop of death! But problem solved finally.