The curious case of Mayson Burch
In which posts from an obvious fake account go viral yet again
Meet “Mayson Burch”, a pro-Trump X account with the handle @anticatlady, a StyleGAN-generated face, and over 21,000 followers as of August 1st, 2024. This account, which has authored viral political posts with some regularity, was created back in January 2012, yet curiously has no visible posts prior to June 2023. The account doesn’t get any less suspect when examined more closely; in addition to the artificially generated face and eleven year gap in activity, the account has been renamed, redecorated, and purged of content on at least one occasion. Additionally, Google and DuckDuckGo searches turn up evidence that the account was used to promote dodgy cryptocurrency projects under a previous handle.
The “Mayson Burch” account has sported a paid blue verification checkmark for much of its recent history, including various posts captured on archive sites. The verification checkmark is absent from posts made after July 25th, 2024, although it is unclear whether this is the result of a cancelled subscription, a recent handle change from @MaysonBurch to @anticatlady, or moderation actions taken against the account. Searching with the “filter:blue_verified” option confirms that the account was still verified at the time of its July 25th posts.
The “Mayson Burch” account primarily posts right-wing political content, and has been doing so on a regular basis since June 2023, prior to when the account has no visible posts. (We’ll come back to this aspect in a bit.) Many of the recent posts are related to the upcoming U.S. presidential election, and either express support for Republican candidate Donald Trump or opposition to Democratic candidate/current Vice President Kamala Harris and (prior to his departure from the race) President Joe Biden. The account’s posts have gone viral occasionally, with a post about the assassination attempt on Trump racking up over a thousand reposts, and a joke about the Baltimore bridge collapse receiving almost a million views.
As it turns out, the Mayson Burch account has been renamed, with the handle having been changed at least twice, and the display name at least once. The account, which has the permanent ID 457280183 and was created back in January 2012, appears to have started out with the handle @sergeyuf and the display name “Sergey” or “Sergey Mil”, and still had this name as recently as June 2022, when it appeared in a sample of followers of Joe Rogan’s official X account (@joerogan). At some point no later than June 2023, the handle was changed to @MaysonBurch, and the display name to “Mayson Burch”; this makeover was accompanied by a purge of older posts. The handle was changed again in late July 2024, to @anticatlady; the display name, at least presently, remains “Mayson Burch”.
Wayback Machine archives for the @sergeyuf era of the account are somewhat sparse, but include reposts of content related to Florida sports, right wing politics, and the musical “The Book of Mormon”. The Wayback Machine archives stop partway through 2017, but web searches for the account name turn up old Google Drive spreadsheets indicating that it was used for various cryptocurrency promotion schemes beginning in 2018. It is unclear how many ownership changes the account has gone through, but one plausible hypothesis is that the original owner lost the account to cryptocurrency scammers in 2017 or 2018, who in turn gave or sold it to whomever is currently using it to pose as “Mayson Burch”. (It’s also possible, of course, that the same person retained control of the account and purged and repurposed it repeatedly.)
What method do you use to find the old usernames of accounts like this whose old tweets have been deleted?
The spreadsheet in your screenshot says that the user NataDoka on the bitcointalk.org forum had the Twitter username sergeyuf.
I tried searching for posts by the user on the forum: https://bitcointalk.org/index.php?action=profile%3bu=1817936%3bsa=showPosts. None of the posts mentioned the username sergeyuf, but many posts mentioned the Twitter username dokadnepr75. One post said "Twitter username:@dokadnepr75" which was followed by the line "Twitter URL: https://twitter.com/Sergey15585539". It may have been a mistake, because the post was formatted using a similar formula as other posts but in other posts the field for the Twitter URL showed the URL of dokadnepr75. And the username Sergey15585539 was not mentioned in other posts.
Twitter says that the account Sergey15585539 is suspended, so it's not the same account as anticatlady. It wasn't archived by the Wayback Machine. Old replies to the account seem to be related to cryptocurrencies: https://x.com/search?q=%40Sergey15585539&f=live. But on the other hand old replies to sergeyuf seemed to be related to sports: https://x.com/search?q=%40sergeyuf&f=live. So I don't know if the account sergeyuf was actually used to promote cryptocurrencies, because none of the replies to the account seem to be related to cryptocurrencies.
The account dokadnepr75 still exists, and it has about 3,000 tweets but they mostly seem to promote cryptocurrencies or Web3 projects, and the newest tweet is from 2018. The display name of the account is "Наталья Доленко" and its location is set as Ukraine, and its profile picture is a photo of two ladies.
The user NataDoka on the bitcointalk.org forum also posted many links to their Facebook profile, which has the display name Наталья Доленко and a photo of the other lady who is featured in the profile picture of the Twitter user dokadnepr75: https://www.facebook.com/NataDoka. She has liked many pages related to cryptocurrencies on Facebook.
In 2022 she posted a photo of someone named Sergei in Ukrainian military gear and wrote this in Ukrainian: "Please help to find her!!!! Sergei Igorovich Grigorovich 10/24/1984 н. Lives in the m. Chernivtsi Military man. Last time I came in touch on 10.03.2022 at 6:00 am, was in the Kyiv region" (https://www.facebook.com/NataDoka/posts/pfbid02RDQXrjVDLCe3Q28J9ALZGqPFQk7QdbPfZwLCP1FVjx3n2V9upvUE9HtmPjFB9wbtl). I don't know if it's the same Sergei though.