Author

Topic: Beware of the new type of spam, hidden in the bounty proof of registration. (Read 281 times)

legendary
Activity: 3290
Merit: 16489
Thick-Skinned Gang Leader and Golden Feather 2021
There's an easy way to find those: 10 Brand new users on top of Active users and top posters in the past 24 hours stand out:
Image loading...

However, the bot does not nuke the accounts, just in case it was an innocent newbie. Most of the time the spam accounts are used between 1 and 3 times, so it's not too bad.
I'd still prefer to see the spammers Nuked, so at least they can't do it again later. Creating new accounts is for sure more of a hassle than using existing ones.
copper member
Activity: 3948
Merit: 2201
Verified awesomeness ✔
The weird thing is that they post the links and afterwards they remove the posts in just a matter of 2,3 minutes. I don't think the mods are deleting the post otherwise the accounts should have been banned long ago.
There's a high probability that these posts are deleted by Mitchell's bot, MindlessElectron.
If you search for the user ID of any of these accounts in modlog, you will find deleted posts.

I just searched for the user ID of the account you referred to in OP (using CTRL+F) in modlog and found 55 posts.
loyce.club shows only 28 posts. (All these accounts have been created recently and loyce.club should have all of their posts)
Some posts are deleted so fast that even loyce.club cannot scrap them.

Also, if I'm not wrong, users cannot delete posts made in bounties before 24 hours.
That sounds like my bot, yes. It scrapes the Patrol page every minute or two (IIRC), so most of these spam posts are removed pretty quickly, as long as the bot knows what to look out for.
However, the bot does not nuke the accounts, just in case it was an innocent newbie. Most of the time the spam accounts are used between 1 and 3 times, so it's not too bad.



EDIT 06-01-2021: The bot now does nuke accounts for certain triggers. Smiley
legendary
Activity: 2380
Merit: 5213
The weird thing is that they post the links and afterwards they remove the posts in just a matter of 2,3 minutes. I don't think the mods are deleting the post otherwise the accounts should have been banned long ago.
There's a high probability that these posts are deleted by Mitchell's bot, MindlessElectron.
If you search for the user ID of any of these accounts in modlog, you will find deleted posts.

I just searched for the user ID of the account you referred to in OP (using CTRL+F) in modlog and found 55 posts.
loyce.club shows only 28 posts. (All these accounts have been created recently and loyce.club should have all of their posts)
Some posts are deleted so fast that even loyce.club cannot scrap them.

Also, if I'm not wrong, users cannot delete posts made in bounties before 24 hours.
legendary
Activity: 2240
Merit: 3150
₿uy / $ell ..oeleo ;(
Good find.

The weird thing is that they post the links and afterwards they remove the posts in just a matter of 2,3 minutes. I don't think the mods are deleting the post otherwise the accounts should have been banned long ago.
legendary
Activity: 2380
Merit: 5213
I could find some more accounts.
You can click on links below to see their post history on loyce.club.

rillgosinmo
isrecdine
blabtasenen
ativorpun
licherpiebur
hundrivibel
kompcrosmisti
matchtercglocnai
sparsuareho

Although each of these accounts has more than 30 deleted posts, none of them have been banned and they are still active.
legendary
Activity: 2240
Merit: 3150
₿uy / $ell ..oeleo ;(
In the patrol found this guy > comdihydsimp

Posting just a random bounty proof post.
But I noticed that the link to the twitter account lead to the same post and when I moved my mouse over the Twitter PostID found that every digit has a different link hidden behind it. See the underlined 0 on the retweet link in the picture below.

Pay attention to the bounty reports. I hope the account will be banned, I've tagged it, I know it's not worthy but, nothing else can be done.


Archive of the post on TryNinja's website : https://ninjastic.space/post/55792026

Edit>
He's been doing this for a while (the past 120 days):

Jump to: