a very easy metric to identify spam as a relay operator is “is this user messaging lots of people a link on the same domain?” Because no real person does this. That plus use of “airdrop” should be instant tarpit.