C++ Detect Honeypot / Sandboxes from Spam

[netix]

Once I start spam I get around 20k executions from honeypots, I tested all public methods to detect them, everything failed.

Anyone got some idea?

 

[int3]

Christmas gift. Not a public method, and it's portable to C/C++

ipconfig /displaydns | findstr "cdn safesearch"

Most of bots will not pass this check