cross-posted from: https://lemmy.dbzer0.com/post/25287498
cross-posted from: https://lemmy.zip/post/19638259
There are about 6 pages.dev domains spamming lemmy.world communities
The volume is definitely inorganic, and is across a wide range of communities
pages.dev is Cloudflare’s site hosting which can be used for free - there are likely many legitimate sites that use that domain, but the current flood is suspicious
chronicleresolve.pages.dev
thefreedomproject.pages.dev
versarch.pages.dev
dailypulse.pages.dev
newssphere-6fu.pages.dev
iniko.pages.dev
miniza.pages.dev
orino.pages.dev
I’m cross posting because @lenny_marlane@lemmy.ml seems to be doing the same thing.
It might be an attack vector or something idk but better safe than sorry.
Not sure about this one but seems to be following same pattern.
@marvelous_coyote@lemm.ee
I have no idea about the why, but I’ve seen the same thing. All new accounts spamming content to all of those (and at least one known-good user posting links there; maybe thought they were legit?). I’ve banned/removed them all locally on my instance, and I think some other admins are doing similarly.
All of those, if you go to their base URL, seem to be part of the same campaign (spampaign?): The Freedom Project / The Freedom Estate Project
I may just start blanket-banning
*.pages.devfor now and deal with any false positives case-by-case.
