From plain-text crypto links to LLM-powered neurocommenting — a technical breakdown of Telegram spam evolution and why most moderation bots only detect the first two levels.