On Amethyst if you add 'randomuser.me' in your security settings--> hidden words, it's stopped them for me.
Discussion
If you go to randomuser.me you can see that's where they're all coming from too. Its an open source project
I like this idea, this is because they using its API for their profile picture. I added "randomuser.me/api" and they are all disappeared. #nostr