I think this is zerobytes.monster, one of the reddit mirror instances.

the post count fits and it also matches with the user count not significantly dropping.

that instance has been using rather strict waf blocking rules from time to time that likely also affect the crawler for fediverse.observer.

looks pretty standard android

the token is completely tied to your account.

you can access part of your account info/settings with that as well, a while back they added an extra password prompt to some of that.

truly anonymous searches are simply impossible unfortunately. while they claim they’re not logging any searches it’s impossible to verify.

just this week I’ve had multiple random matrix accounts start a chat with me to post an Imgur link with some Hitler bs. I assume they just chose random members of one or more fediverse related public matrix rooms to send that to. they probably just do this with random public rooms and the fediverse relation didn’t matter.

if you’re not community banned you might still be instance banned on the community instance, which wouldn’t show up in your local instances modlog if the ban happened on a <0.19.4 instance. if the methods pointed out by other comments here fail I suggest you visit the instance of the community and check the site modlog there, searching for your user.

i suspect you’re referring to your post to a lemmy.ml community and you have indeed been instance banned there for a limited amount of time.

reporting absolutely helps. it increases visibility for content that slipped through automated moderation and having more reports for content indicates urgency.

at that point you’ll just discourage any new users if they have to gamble on whether or not their content is actually seen by anyone. account age really isn’t a good indicator of anything other than soemone being dedicated enough to spam. considering this isn’t the first wave of csam attacks, i can assure you that whoever is targeting lemmy with this is determined enough that account age won’t deter them for long, they’ll just have to slightly adjust their playbook.

that doesn’t do anything, they’ll just register accounts in advance and wait some days.

we’ve even had spam recently from accounts that had been dormant for months, although it was a different kind of spam.

account deletion does not federate in general, only banning (+ content removal) does

that’s not entirely accurate.

the main problem for non-kbin users, as @ono@lemmy.ca is using lemmy, is that kbin moderation actions, such as a moderator or admin removing spam will not federate to lemmy, as this is not implemented yet.
for a lemmy user, it appears that kbin doesn’t have any moderation at all, while spam is being removed for kbin(.social) users at least.

for this reason, several lemmy instances have already either defederated from kbin or removed kbin communities from their instance.