Yeah, false alarm, sorry :) … dug into it when I had some time, and it looks like the spammer pingbacked a wrapper I forgot I wrote. Not webmention.io, but does the same thing, so it was received as a webmention but wasn’t originally sent as one. cc/ @aaronpk