if the JSON shows a real ID then that ID is what is in the backend database for that resource/document (post). if that's the case, then "TOR posting" is just front end code masking your real backend ID with 000000. "on hover" is a front-end CSS property. if they're only masking it in the bread but aren't masking it on hover, that would explain the difference.
>I don't know where the ID actually comes from.
probably just a random hex function that then gets rendered into color for boards that have that option turned on