We've looked at a variety of Twitter accounts being sold on dodgy sites, but @Online_agine holds the record for most followers with a whopping 712056.

(content warning: every single account described in this thread pretty much tweets nothing but porn videos)

cc: @ZellaQuixote
Although porn account @Online_agine has been around since December 2009, its massive follower growth does not appear to have started until September 2020. (A dataset we captured in March 2020 in which it showed up confirms that it only had 34 followers at that point.)
As it turns out, @Online_agine (permanent ID 97295448) wasn't always named @Online_agine. It appears to have been originally named @Allanymsantos, which was changed to @Mayaunmoor sometime prior to its massive follower growth, and then finally to its current name.
Most of @Online_agine's older tweets have been deleted, but replies to its old tweets are still visible. The oldest replies (from 2010 and 2011) are nearly all in Portuguese, followed by an 8 year gap, after which it received a much larger volume of replies in multiple languages.
We didn't find evidence that @Online_agine's massive following was the result of bulk creation or automation to any significant degree. We did, however, discover that its 60th follower is another large porn account: @angelica2077, with 379279 followers of its own.
By exploring the set of accounts followed by the two accounts already mentioned (@angelica2077, @Online_agine), we found a network of 278 large porn accounts (at least 50K followers) that have follow relationships with at least 10 other members of the network.
The majority of these accounts were created within the last two years (mostly 2020). Almost all of the accounts appear to be retweeters or aggregators rather than sources of original content. (At least) 275 of 278 have retweeted or been retweeted by other members of the network.
The high degree of mutual retweeting leads to a possible explanation of how the newer porn accounts are gaining followers so quickly: they're being promoted by established members of the network that already have hundreds of thousands of followers.
One more thing: @Online_agine, the account that originally led us to this network is not the only one of these large porn accounts currently up for sale. At least four are listed on shady social media account sales site accs-market(dot)com, and others may be being sold elsewhere.
As always, be wary of clicking links to dodgy websites, whether they be social media account sales, porn sites, or whatever.

• • •

Missing some Tweet in this thread? You can try to force a refresh
 

Keep Current with Conspirador Norteño

Conspirador Norteño Profile picture

Stay in touch and get notified when new unrolls are available from this author!

Read all threads

This Thread may be Removed Anytime!

PDF

Twitter may remove this content at anytime! Save it as PDF for later use!

Try unrolling a thread yourself!

how to unroll video
  1. Follow @ThreadReaderApp to mention us!

  2. From a Twitter thread mention us with a keyword "unroll"
@threadreaderapp unroll

Practice here first or read more on our help page!

More from @conspirator0

6 Mar
It's a great day to look at a small botnet that retweets Spanish followback hashtag #SigueMeYTeSigo. #FridayFeeling

cc: @ZellaQuixote Image
This botnet consists of 13 accounts created between 2017 and 2020. Each account is active 24/7 and ends most of its tweets via a unique custom app, most of which have names like "dfghji876". Judging by their follower/following ratios, the bots don't actually follow back. ImageImageImage
The vast majority of this botnet's content (99.4% of recent tweets) consists of retweets of tweets containing #SigueMeYTeSigo (or stylized variants such as #𝙎𝙞𝙜𝙪𝙚𝙢𝙚𝙔𝙏𝙚𝙎𝙞𝙜𝙤 and #𝕊𝕀𝔾𝕌𝔼𝕄𝔼𝕐𝕋𝔼𝕊𝕀𝔾𝕆) sent via the custom apps mentioned earlier in this thread. ImageImage
Read 5 tweets
3 Mar
What's up with these identical tweets sent via TweetDeck?

(Note: duplicate tweets embedding YouTube videos are sometimes the result of the title of the YouTube video being copied into the tweet text, but that's not the case here.)

cc: @ZellaQuixote Image
Answer: the duplicate TweetDeck tweets are the work of a Spanish-language botnet, consisting of 10 accounts created in 11 minutes on August 22nd, 2020. All ten accounts have virtually identical schedules. ImageImage
At present, all of these accounts tweet exclusively via TweetDeck, although prior to mid-January they also used Twitter for Android. While they could be human-operated given the software used, we suspect automation due to the identical schedules (and repetition, as we'll see). Image
Read 5 tweets
2 Mar
What's up with all these accounts created in May 2012 with "legit check" as their pinned tweet? #SeemsLegit

cc: @ZellaQuixote
Answer: they're part of a botnet that retweets and replies to giveaway tweets. This network consists of 271 accounts created on May 1st, 2012 that have no tweets prior to December 2020. (Not all have the "legit check" pinned tweet, but they have other things in common...)
At present, the 271 accounts in this network all (allegedly) tweet via the Twitter Web App. They've gone through a variety of custom apps, however, many of which seem to be named to give the incorrect impression that they are official Twitter products ("Tɯitter for Samsung" etc).
Read 7 tweets
27 Feb
We started looking at who the accounts in the astroturf network documented in this thread from Feb 9th follow, and discovered a whole bunch more accounts that we believe to be part of the network. #SaturdayShenaniGANs

cc: @ZellaQuixote
We found 64848 accounts that we believe to be part of the network (although we may still have missed some). With rare exceptions, they have few tweets and follow far more accounts than they have followers. They're mostly older accounts, almost all created 2018 or earlier.
Who do the accounts in this network follow? It's an eclectic mix that includes government officials from multiple countries, tech entrepreneurs, cryptocurrency accounts, and a "coronavirus news" account, among others.
Read 11 tweets
25 Feb
Despite having tweeted #FollowMeJP daily for almost a decade (via automation tool twittbot(dot)net), none of these accounts has managed to pick up more than 100 followers. #WednesdayWisdom

cc: @ZellaQuixote
These accounts are part of a botnet consisting of 125 Japanese-language accounts created on December 11th and 12th, 2011. Each account name consists of a lowercase English word with one or two random characters added to both the beginning and the end of the name.
These accounts behave in an extremely predictable fashion, posting exactly one tweet per day, resulting in 125 total tweets per day from the network (with rare exceptions). All tweets are sent via automation service twittbot(dot)net, and all 125 bots have default profile pics.
Read 5 tweets
24 Feb
In an interesting twist, @TwitterSafety's latest takedown announcement was greeted with a barrage of replies and quote tweets containing the hashtag #ArmenianGovernmentTrolls (and frequently no other text).

cc: @ZellaQuixote
We downloaded tweets (excluding retweets) containing #ArmenianGovernmentTrolls, yielding 310 tweets from 204 accounts. The hashtag appears to have been started today by @FasliNabiyev shortly after @TwitterSafety's announcement.
The accounts tweeting #ArmenianGovernmentTrolls are disproportionately new accounts, with more than half of them having been created in July 2020 or later. 184 of 204 are accounts that previously spammed another hashtag we studied, #DontBelieveArmenia.
Read 6 tweets

Did Thread Reader help you today?

Support us! We are indie developers!


This site is made by just two indie developers on a laptop doing marketing, support and development! Read more about the story.

Become a Premium Member ($3/month or $30/year) and get exclusive features!

Become Premium

Too expensive? Make a small donation by buying us coffee ($5) or help with server cost ($10)

Donate via Paypal Become our Patreon

Thank you for your support!

Follow Us on Twitter!