> They even know to actually select the 'HTML' content type, which is an extra select input. It's not surprising because spammers write scripts for all sorts o

> They even know to actually select the 'HTML' content type, which is an extra select input. It's not surprising because spammers write scripts for all sorts of platforms (WordPress, vBulletin, etc.). There's probably no custom code written to attack your site. They detect your platform and use a script from their pre-existing library to post their spam. For realistic usernames, they can just reuse names they've seen on other platforms. Goes the same for emails. Any existing email list could be a source for genuine sounding names. Just throw a couple of numbers at the end of the name and you've got a unique name that a human already came up with.