It wasn't obtained from randomly trading on the GTS, it was a GTS distribution. That means somebody stored several pokes on a gts server and set it to a certain DNS address, so then once the DNS address is entered into wireless connection settings, you are able to retrieve the stored pokemon. However, if this still seems risky to you, I'm fine by your decision. Would a hack check clear any doubts?