To your point, they are collecting contributions for URLs that are not signed up on the platform. When I heard this I checked a few of my publishing URLs and sure enough they are accumulating ETH/BAT without me doing anything.