Bots With Impact: Exposing Coordinated Scraping, PII Harvesting, and Rapid Video Recycling Syndicates | Project: Bullyish by Lillee Jean
In digital forensics and real network security, the escalation from passive narrative-running by bad actors to active cybercrime almost always traverses into automation. When bad-faith networks target an entertainer, filmmaker, or public figure, they don't always rely on manual internet searches or real research. Instead, they deploy automated bot networks, programmed exactly to execute high-frequency server probes, harvest Personally Identifiable Information (PII), scrape copyrighted digital assets, and attempt access to sealed or confidential judicial records.
Understanding how these bot networks operate, and how stolen data is funneled into synchronized video production pipelines within weeks, exposes the criminal infrastructure behind monetized harassment.
I highly recommend reading my article on the $70K Digital Racketeering Shakedown, as it pertains to a more in-depth study on how bad-faith actors use bots and conduct DARVO on any person who speaks up.
1. The Anatomy of Automated Scraping Operations
BOTS FROM THEIR NETWORKS 
FALSE PROPAGANDA - AI DEEPFAKE 
TCP IP LOGS, HIGH PROBE/DDOS 
RESULT OF THE BOT SCRAPING
Syndicates that are in the hate-for-profit business utilize automated scripts and rotating proxy networks to bypass web security protocols. They pay big money, or are part of the marketing agency, and it's all packaged, where the "commentator" is the "talent". Above are four screen captures. The first, my blocker showing 10,759 total bot block requests from this syndicate; the second,, how they use stolen federal assets HD scraped to make deepfakes, after A.I. deepfake; the third, showing BAT (Baidu, Alibaba, Tencent), known aggressive scrapers; and the fourth, the outcome of scraped data: magnetization.
This is vital to note: Server telemetry across domain infrastructures reveals a distinct, three-stage automated pipeline. The first stage begins when automated scrapers continuously crawl, and high-probe web directories, contact forms, and asset libraries to extract personal identification, physical addresses, email headers, and metadata. These bot networks execute targeted requests against private server directories, attempting to locate confidential documents, sealed judicial filings, or unreleased media assets. The last step includes high-resolution, copyrighted photography and registered video stills being automatically and illegally downloaded en masse, ignoring robots.txt exclusions and copyright notice headers. That is the "anatomy" in simple terms.
As an example of where my knowledge comes from, this bad-faith actor bot probing began for me in October 2025; by December 2025 my assets were monetized in hate-for-profit non-consensual sponsored videos. Deepfakes were syndicated and explicit by January 2026, and by January-February 2026 SEALED judicial records were scraped and monetized. All has been reported to the FTC, FBI, and my local precinct. To date, subpoenas have been sent out, with one acted upon.
DARVO Inversion: How Black-Hat Marketing Agencies Deflect
The most horrifying psychological tactic of these syndicates occurs when legitimate researchers, journalists, or even victims themselves trace the network connections back to black-hat marketing agencies operating behind the scenes.
When exposed, the syndicate immediately executes DARVO (Deny, Attack, and Reverse Victim and Offender)! The agencies deploy their automated sock-puppet networks to flood feeds and forums, falsely claiming that anyone who speaks against them is a "fake account" or a "bot". This, while seemingly obvious, still creates a chilling effect, intimidating observers so they fear speaking out or presenting verified facts. It's a classical projection: falsely accusing working entertainers of "operating bots" to serve as an artificial shield, to distract search engines and platforms from the agency's own illegal scraping infrastructure and automated upvote farms.
2. Rapid Content Production: From Scraped Telemetry to Synchronized Video
REALITY VS HOAX 
PII MONETIZED 
SUBPOENAS
This leads to how these bad-faith actors use the scraped data, to make VIDEOS. The most revealing metric of a coordinated network is velocity. In observed cases, a sample above, materials scraped during unauthorized server probes appear in monetized and sponsored videos across platforms such as YouTube and Twitch within weeks or even days of the initial probe.
This rapid turnaround exposes a pre-arranged pipeline:
Automated Scraping: Bot networks scrape stolen PII, private records, and copyrighted images.
Syndicate Asset: The scraped assets are uploaded to private dark-forum groups or shared cloud drives.
Synchronized Videos: Multiple "commentary" channels, which I have found to be linked ALL to public corporations and marketing agencies, simultaneously publish videos featuring identical scraped images, recycled media, and manufactured narratives, creating an artificial wave of outrage designed to manipulate search engine algorithms.
3. Statutory Violations & Federal Criminal Frameworks
Deploying bot networks to scrape private web infrastructure, harvest Personally Identifiable Information (PII), and exploit federally copyrighted works for commercial gain is not protected speech, but actionable cybercrime under strict state and federal statutory laws. It's provable harm - so entertainers, if you're reading this, if you have server logs, save the logs, and screen capture them for law enforcement, and federal court.
Bypassing technical IP blocks and security restrictions to harvest data constitutes federal computer trespass under the Computer Fraud and Abuse Act (18 U.S.C. § 1030), while utilizing automated electronic channels to track locations and execute continuous harassment is prosecuted as federal cyberstalking under 18 U.S.C. § 2261A.
Incorporating scraped, registered copyright assets (VA0002499352, PA0002583099) into monetized video broadcasts without authorization constitutes willful copyright infringement (17 U.S.C. § 501), and operating black-hat marketing networks to inflate engagement, upvote forum posts, or commercialize scraped PII violates Federal Trade Commission rules against deceptive trade practices (15 U.S.C. § 45).
Although illicit entities use proxy rotations and altered User-Agent signatures to conceal their identity, automated traffic leaves immutable digital footprints, including raw server logs, timestamped TCP/IP handshakes, and headless browser signatures, that law enforcement agencies like the FBI IC3, FTC, USPIS, and NYPD Cyber Crimes Unit utilize via cross-border subpoenas to trace bot networks back to physical operators.
By preserving unedited forensic telemetry and deploying structured JSON-LD schema markup, independent filmmakers and artists ensure that empirical, real-world legal accountability supersedes automated harassment. In the real world, political-like propaganda is nothing more than a mirage or a party-trick for children for quick money. Real officials, use REAL facts not .io servers, with a lack of backbone.
Lillee Jean Trueman
Please visit the official Site:
Reporting and Evidence: All original, unredacted logs, timestamped data, and TCP handshake records referenced in this study have been preserved and submitted to the FBI’s Internet Crime Complaint Center (IC3) and the NYPD Cyber Crimes Unit as part of an active, ongoing criminal investigation.
© 2026 Lillee Jean Trueman. All rights reserved.