Suspicious.
This account shares the same external domain (famiki.timx.co) across multiple subreddits and has been cross-reported with 5 other accounts (u/freedomsaver, u/richhard, u/ok-environment8730, u/skoon, u/senrew) all posting github.com links in prior reports, suggesting coordinated promotion by a single operator. The 0% upvote ratio and zero comments on a 2.4-hour-old post, combined with the domain appearing in 5 previous reports under different accounts, indicate manufactured amplification infrastructure.
Hugin marked this suspicious because at least one meaningful risk signal appeared, but the scan did not reach the stronger likely-scam threshold.
- The final verdict text came from the AI verdict engine using the stored structural signal block.
- The stored scan did not capture a public commenter sample: 0 comments and 0 unique commenter accounts are available to this checklist.
- Signal count: 1 high, 1 medium, 0 low flags; 6 coordination-class signals.
Posting the exact same link in 2+ different subreddits is the textbook fingerprint of an affiliate or marketing operator — not someone organically sharing a discovery.
Full evidence trailSources, public checklist, values lens, network map, account coverage, archive, and sharing tools.
Review before sharing.
Hugin reports are evidence packets, not accusations. Use the rating as a prompt to inspect sources, limitations, and archived material before quoting a claim elsewhere.
Built a family tree web application for my family
Source checks
0 public comments loaded for r/SaaS.
1 public author record checked; 1 oldest-archived-activity lower bound.
1 selected author history checked; 1 archive fallback.
0 reply edges mapped.
Stylometry did not run for this scan, usually because no key/budget or too few samples were available.
4 unique external identifiers extracted.
5 prior archive matches returned.
1 linked repo screened.
Show your work
Deterministic explanation of the stored scan inputs behind the verdict. This is not hidden model reasoning; it is the evidence checklist Hugin can show publicly.
Hugin marked this suspicious because at least one meaningful risk signal appeared, but the scan did not reach the stronger likely-scam threshold.
- The final verdict text came from the AI verdict engine using the stored structural signal block.
- The stored scan did not capture a public commenter sample: 0 comments and 0 unique commenter accounts are available to this checklist.
- Signal count: 1 high, 1 medium, 0 low flags; 6 coordination-class signals.
- The scan crossed the caution threshold, but did not show enough stacked proof for likely scam.
What pushed risk up
Posting the exact same link in 2+ different subreddits is the textbook fingerprint of an affiliate or marketing operator — not someone organically sharing a discovery.
- u/timx88 dropped famiki.timx.co in r/familysearch, r/SideProject
"github.com" was previously logged by Hugin under u/freedomsaver, u/richhard, u/ok-environment8730, u/skoon, u/senrew. Same external identifier surfacing under multiple Reddit accounts across separate threads is a coordinated-operation pattern.
- u/freedomsaver (report 6rb-gf6-rc8)
- u/richhard (report abr-tx8-4s3)
- u/ok-environment8730 (report m58-dkz-bqs)
- u/skoon (report ua7-bnx-zju)
- u/senrew (report 5rp-hf2-ygd)
5 identifier appearances matched older Hugin reports under different usernames.
- ext_domain "github.com" previously appeared under u/freedomsaver
- ext_domain "github.com" previously appeared under u/richhard
- ext_domain "github.com" previously appeared under u/ok-environment8730
- ext_domain "github.com" previously appeared under u/skoon
- ext_domain "github.com" previously appeared under u/senrew
1 author history showed drop-in, dormant, or cross-promotion behavior.
- u/timx88: famiki.timx.co repeated across 2 subs
What limited confidence
The stored scan did not capture public comments, so reply-graph, commenter-age, praise-swarm, and same-thread coordination checks have limited value.
- 1 author age value is a lower-bound estimate from oldest archived public activity, not an official Reddit account-created timestamp.
- Stylometry did not run, usually because no API key/budget was available or too few useful samples existed.
- Username shape alone is never treated as a finding; it is only context when stronger public signals also appear.
- Likely scam: multiple high-severity signals, prior identifier reuse, or several coordination signals stacking together.
- Suspicious: one high-severity signal, multiple medium signals, or one concrete coordination signal that deserves review.
- Inconclusive: weak, conflicting, or partial signals where the scan cannot justify either trust or a stronger warning.
- Looks legitimate: no structural red flags, available metadata, and clean coordination passes.
Values lens
Use scans to slow down, inspect public signals, and keep uncertainty visible. Never use them to harass, shame, or flatten people into a verdict.
Fair-use checks
- What was observed, and what is interpretation?
- What data is missing, blocked, or confidence-limiting?
- Would the wording feel fair if it were about someone you care about?
What the post is doing
- Same external domain (famiki.timx.co) promoted across r/SaaS, r/SideProject, r/ProductivityApps by u/timx88 (2 posts in 7 days)
- Cross-report identifier reuse: github.com posted by u/timx88 AND u/freedomsaver AND u/richhard AND u/ok-environment8730 AND u/skoon AND u/senrew in separate prior reports
- Domain famiki.timx.co appeared in 5 previous reports under different account usernames, indicating same-operator reuse
- Post has 0% upvote ratio and 0 comments after 2.4 hours in active subreddit, inconsistent with organic 'family project' narrative
- Repeated pattern: founder-story titles in r/SaaS + r/SideProject + r/ShowYourApp (4 posts) suggests systematic cross-community shilling
Automated flags
Posting the exact same link in 2+ different subreddits is the textbook fingerprint of an affiliate or marketing operator — not someone organically sharing a discovery.
- u/timx88 dropped famiki.timx.co in r/familysearch, r/SideProject
"github.com" was previously logged by Hugin under u/freedomsaver, u/richhard, u/ok-environment8730, u/skoon, u/senrew. Same external identifier surfacing under multiple Reddit accounts across separate threads is a coordinated-operation pattern.
- u/freedomsaver (report 6rb-gf6-rc8)
- u/richhard (report abr-tx8-4s3)
- u/ok-environment8730 (report m58-dkz-bqs)
- u/skoon (report ua7-bnx-zju)
- u/senrew (report 5rp-hf2-ygd)
Linked code repositories
GitHub repos linked in this thread were fetched and screened for malware-disguised-as-OSS patterns (postinstall scripts, fresh maintainer + thin commits, hardcoded wallets/tokens, drainer / sniper / checker naming, Telegram-routed READMEs).
This is a legitimate open-source family-tree application built by an established maintainer. While the repo is newly created, the maintainer's 12-year account history with 59 public repos and normal project structure (proper auth, database, deployment config) rules out malware-disguised-as-OSS patterns. No credential-stealing, obfuscation, or grift indicators present.
- Repo is very new (26 days old), but maintainer account is established (12+ years, 59 public repos, 11 followers)
- No postinstall/preinstall scripts in package.json
- No typosquat dependencies or suspicious remote code execution
- Legitimate tech stack (Next.js, React, TypeScript, Drizzle ORM, better-auth) with normal versions
- README describes actual feature set matching a real family-tree app, not overpromised vaporware
- MIT License present and valid
Shared signals
External identifiers (wallets, Telegram/Discord, referral links, promo codes, external URLs, emails) extracted from the post body and comments. Different accounts pointing at the same identifier — inside one thread or across separate reports — is the strongest coordination signal Hugin can show, sourced entirely from public post content.
Also appeared in prior reports under different accounts
Commenter patterns
Recent public Reddit activity for the OP and selected accounts, plus same-hand writing checks when the stylometry pass runs. These are coverage-limited evidence summaries, not identity or availability claims.
- r/iosapps (12)
- r/ShowYourApp (4)
- r/ProductivityGuide (3)
- r/iosdev (3)
- i.redd.it (2)
- famiki.timx.co (2)
- famiki.timx.co (2x across 2 subs)
Account age coverage
OP and scanned commenters are shown when Hugin recovered profile metadata or an oldest-public-activity age floor. Lower-bound ages are labeled as estimates; unknown age remains missing coverage, not a finding about the account.
Archived evidence
Snapshot of the post and comments at scan time. Preserved here so the evidence survives even if it gets deleted on Reddit.
No comments survived the scan filter.
Original on Reddit: https://old.reddit.com/r/SaaS/comments/1vjfln8/built_a_family_tree_web_application_for_my_family/ — “Built a family tree web application for my family”
Share this report
Share this link in a Reddit reply when the thread needs supporting evidence. The report stays public so anyone reading the thread can review the data themselves.
Reports like this stay free for everyone. Keep Hugin free →