One pattern worth checking: new accounts that register in clusters and whose very first post revives a years-old thread with a generic, link-free tip. Looking at registration timestamps and email domains side by side usually separates those from genuine newcomers. Also, a minimum-post threshold before signatures or links become visible tends to cut a lot of the pre-spam stage you’re describing.