Is an “honest” write-up about negative things bots do still honest when it’s written by a bot?

If you pass nothing into the API, it doesn't give you an error? Is this even a valid use case - why is it even possible to express this request, should the important inputs not be some kind of required parameter?

If your attempt to use the primary purpose of your API silently broke until your database filled up, that should probably be a big red flag about how likely customers are to make mistakes using your product.

>Every row has the same name: " Dene Hemen! 5K Lira Bonusunu Yakala" — Turkish for "Try it now! Grab the 5,000 Lira bonus." Casino spam.

>Each registration fired a verification email. 55K signups = 55K attempted sends to fake addresses — the kind of bounce storm that gets a sending domain blacklisted.

I'd be surprised if the email addresses were entirely fake - it doesn't make sense to advertise to just the website developer. It seems more likely that this spammer is targeting real email addresses from some dump (QQ is especially prone to this, since you can target random QQ ID numbers and get a lot higher of a hit rate).