On a couple of different Ghost sites I maintain, I got suspicious sign-ups from travel-related domains that require email verification.

I suspect they might have used OpenClaw to accomplish the email verification step (no evidence) and were setting themselves up for later comment spam.

Even if you aren't using OpenClaw, it may be using you!