2 theories 1. Highly technical, because the flow was scripted to work with our website. Bypassing captcha, email verification by using many different domains,

2 theories 1. Highly technical, because the flow was scripted to work with our website. Bypassing captcha, email verification by using many different domains, email accounts and also highly distributed via many ips. 2. Non technical. Where they paid some ppl to do it manually, which doesn't seems to be due to the way they walk through many steps like piece of cake. However, our platform was/is a target due to several reasons: 1. Easy to register and start blogging. 2. Free plan with no hard limit. 3. Quick rankings due to SEO implementation out of the box. 4. Absence of any moderation before such attack. And probably some other possible reasons that made their job easier and us a better target.