boltTLDR
Google's Search Console sometimes designates spammy sites as the canonical URL for legitimate domains, though Google says the selection typically resolves within weeks.
SERoundtable reports on a case where Google's Search Console URL inspection tool displayed a spammy site as the 'Google-selected canonical' for a new client's blog. John Mueller from Google confirmed the issue can occur, explaining that reused interstitial or parked pages sometimes lead to this misidentification, and advised waiting a few weeks for Google to update the canonical selection.