Getting Flooded with Spam Comments Notifications on a Page with No Comment Form

Are they definitely comments and not pingbacks?

As far as email notifications go turn them off for starters. You don’t need notification that your blog is being spammed, it happens to everyone regardless. Are you using askimet or something else?

If that’s not it and it is comments, and you also want to remove comments from all pages rather than just ticking the “hide comments” checkbox when creating a page.
Also have a look at the source code of the page template. page.php and make sure there’s no comment form in there. If there is delete it, take note this will remove comment forms from all pages (not posts).
Appearance -> editor -> page.php (if you have Jetpack)
or just ftp and have a look

I saw that it was awaiting moderation and assumed that meant it was a comment, but on further review:

A new trackback on the post “Terms of Use” is waiting for your approval
https://mydomain.com/terms-of-use

Website : Louis Vuitton (IP: 110.89.26.95 , 110.89.26.95)
URL : https://www.billigposerbutikken.com/
Trackback excerpt:
Louis Vuitton

https://www.priorkain.com

Approve it: https://mydomain.com/wp-admin/comment.php?action=approve&c=245
Trash it: https://mydomain.com/wp-admin/comment.php?action=trash&c=245
Spam it: https://mydomain.com/wp-admin/comment.php?action=spam&c=245
Currently 17 comments are waiting for approval. Please visit the moderation panel:
https://mydomain.com/wp-admin/edit-comments.php?comment_status=moderated

Looks like they’re spamming via “trackback”.

Good tips though, in Discussion settings, I was able to turn off email notification for “Anyone posts a comment” and “A comment is held for moderation” although I hope these spammers burn in hell because they’re still hogging bandwidth and storage with their spam.

I know it’s probably bad practise to recommend commercial plugins here, but this is what I use:

Askimet (free) – block spam
Bullet Proof Security (free) – blocks malicious hack attempts and “known” bots. You WILL want to research how to install this properly and include the tweaks from the forums.
Better WP Security (free) – I use this to change my author ID and database prefix on new blogs, I then disable and delete the plugin.

Spyder Spanker (paid classic $49 + pro $49) – blocks spiders and IP’s you blacklist. It allows you to block most bots and just allow Google/Bing/Yahoo

TBH it’s not that great a plugin (and the developer is a bit of a dic IMO), you could do this if you just research how to write .htaccess. However I’m pretty lazy and the pro version of this allows you to auto-update all other installations you have as well. If people still fake Googlebot User Agent they are able to get in (assuming their not on a country block list).

I went from getting over 1000-2000 spam comments on a blog down to about 10 per day, additionally all whois, SEO analytics bots are now mostly blocked so competitors have a hard time analysing your site and getting data about your meta and back-links. It saves on bandwidth that’s for sure.

This works quite well also:

https://pioneervalleywebdesign.com/using-wordpress-to-block-comment-spam/