We had somebody signing up to a website with Russian email addresses. What they did though was set the the Personal name to something like the following in Russ

We had somebody signing up to a website with Russian email addresses. What they did though was set the the Personal name to something like the following in Russian: "Click here to see a translation http://whatever.r/?username" http://whatever.r/?username" So when we sent out the email to verify the signup the receiver saw some English text they couldn't read and the above instructions in Russian telling them to click on the link. This was a Magento site so I assume it was a standard bot.