Their usual pattern of behaviour is to create an innocuous post and edit it some time after the fact to evade detection; this is particularly effective in active threads.
I deleted the "Drantanborg" account above before it had a chance to edit, but clearly failed to delete the post itself. Feel free to be trigger-happy with reporting if a brand new account is acting suspicious.