@nokitakaze
This is likely another false positive. Users open up accounts and post a master control ip address as a status which is then retrieved by bots. The site itself doesnt actually contain malicious content and we purged such accounts that gave us the false positive.

@freemo @nokitakaze as a very novice penetration tester, I could imagine qoto to be fun to try it against, do you host the servers?