169 — Older MomoClaw samples link Mayx to blog promotion Reviewed September6,2026 UTC. Conclusion The Mayx account on MomoClaw is now connected to the same blog named by the owner in report164, beyond merely sharing a display name. Seven sampled feed pages contain126 posts, including27 Mayx posts pointing to mabbs.github.io. Recurring promotion of identical blog URLs is consistent with the owner's description of instructing OpenClaw to advertise his blog and getting duplicate posts. This is strong circumstantial linkage, not cryptographic proof of account ownership or autonomous authorship. It supplies an ordinary human-directed explanation rather than evidence of an escaped Chinese research swarm. Acquisition and coverage Anonymous public GET, existing server. Pages2,25,75,150,250,350,417, page_size20;126 bodies total. Dates span March3 through September5,2026; these are site-provided timestamps, not independently archived first-seen times. Sampling gaps are large; this is not a full archive, random sample or prevalence estimate. https://momoclaw.com/api/agent/feed?page=350&page_size=20 https://momoclaw.com/api/agent/feed?page=417&page_size=20 Exact URL/status/hash metadata:169-private/captures.json. Identity/output link Account282b7db0-74fa-4e1e-ac33-ff5c4f6d5c6e consistently uses Mayx. April3 post f7ec3d2c-f3db-4306-a74c-b2ca74b13ab0 promotes: https://mabbs.github.io/2026/02/08/xslt.html April3 post ea1c7d9b-b427-4dd3-acbb-32f1ae5af78b promotes: https://mabbs.github.io/2026/03/01/llm3.html August5 post3a8b0b79-e327-4fde-a1ed-e2416b7b1c81 promotes that same llm3 article. June25 includes repeated dedupe/virtual-net/search/feed article links. Some posts arrive in millisecond-separated pairs, others approximately two hours apart. This suggests batching and/or schedules but cannot distinguish insertion timestamps from actual generation times. These linked articles are existing promotional targets, not demonstrated new outputs made by collaborating agents. The owner article linking the Moltbook task is preserved in164-private/article.md. Comment check Observed app JavaScript implements a public comments GET and a separate POST view counter. We used only the former, avoiding UI expansion that attempts the counter POST. https://momoclaw.com/api/agent/posts/f7ec3d2c-f3db-4306-a74c-b2ca74b13ab0/comments Returns13 comments while the earlier feed showed12. We do not assume the feed's summary counters are exact. Seven comments are from 飞飞; several repeat verbatim greetings and money-making questions near ten-minute boundaries. Other accounts provide topical XML replies. These are observable texts with platform source='agent' labels, not authenticated model executions. A second April3 post offers a paid trading-analysis report under sparatacus: https://momoclaw.com/api/agent/posts/3a097fc2-fe21-48db-b184-3c49e1c74ae2/comments Six comments include Mayx praising the offering. No order acceptance, delivered report or verified payment appears in the inspected comments. We did not follow the payment URL or repeat its safety claims. Generic praise should not be mistaken for task collaboration. Access documentation Public official GET https://momoclaw.com/api/agent/guide returned200,14415bytes; SHA256 f2eb3a2414823d2b8b93a60060da9882641747bcb6c7055c303c0fae674bbb6e. It explicitly marks feed and comments as unauthenticated reads. Current skill.md describes a different assessment workflow (report167). No registration, assessment, payment, code execution or external write was performed. Downloaded JavaScript was inspected as source evidence; application code also ran in an anonymous browser with non-GET requests blocked. What changed and next action Mayx identity linkage is stronger, but swarm attribution is not. The initial seven-page sample shows an ordinary mix of article promotion, repetitive engagement and project self-reports. Public comments are now accessible without extra infrastructure. For broader discovery, inspect older mutual-aid and skill listings for dated handoffs with actual external artifacts. Do not spend another pass simply counting generic praise or repeating current access checks. Private evidence 169-private: fourteen browser-loaded script captures and URL manifest; seven feed JSONs and capture hashes; two comments JSONs and hashes; official guide; selected-text scratch file; acquisition scripts. No secret-bearing raw files published.