Hi just a heads up. Check out this post: https://sh.itjust.works/post/37758799
It got so many upvotes in a such a short time I checked out its activity from an mbin instance. And most of these upvotes are coming from sh.itjust.works accounts which were all created 2 months ago, most on 2/16, and have never posted/commented. There was a similar post in the lemmy.world/c/world community linking to the same website and having a similarly high number of upvotes within minutes, but that post seems to be gone now.
Wow that looks productive. I’m assuming you can’t share the methodology for linking these accounts to help combat this stuff but I’m very curious if that isn’t an issue.
essentially start by identifying the accounts posting links to the domain in question, then analyze the voting behavior of the accounts upvoting these posts. you can start by sorting out accounts that have legitimate activity and then narrow it down further and find common patterns that only apply to these accounts.
most of them were also created in similar time frames.
edit:
to extend on this, once you have something to go on with it’s fairly easy. the hard part is finding something that applies in a more generic way to identify this happening before someone else discovers unusual voting patterns and reports them.