FactsLens campaign report
Staged Spam / scam · confidence high · one campaign · recommended: human review
One coordinated campaign across 29 clusters and 12 Bluesky accounts, running from 2026-11-14 14:31 to 15:11 UTC (+0h00 to +0h39). The network posts near-identical donation appeals for an injured 5-year-old named Mohammed in Gaza, amplified by empty-text repost rings. All specific aid claims are untrusted evidence; news checks found no_coverage_found for the specific appeals, while the general Gaza context is real_event_distorted.
Strongest innocent explanation considered: A newsroom running several feed accounts, fans sharing a real fundraiser, or disclosed bots could explain repeated similar posts, but none fits: all accounts have empty bios [A1][A2][A3][A4][A5][A6][A7][A8][A9][A10][A11][A12], most have 0-10 followers [A1][A3][A4][A7][A8][A9][A10][A12], seven accounts were created only 9 days ago [A3][A4][A7][A8][A9][A10][A12], posts are verbatim copy-paste across unrelated-seeming profiles [C2][C3][C4][C5][C6][C7][C8][C9][C10][C11][C12][C13][C14][C15][C16][C17][C18][C19][C20][C21][C22][C23][C24][C25][C26][C27], and there is no disclosure of automation or affiliation [A1][A2][A3][A4][A5][A6][A7][A8][A9][A10][A11][A12].
- All clusters share accounts: A1 appears in 19 clusters [A1] and A2 in 18 [A2]; A3, A4, A8, A9, A10 also span many clusters [A3][A4][A8][A9][A10].
- Every cluster carries the same detector signals: copy_paste or repost_ring, cross_cluster, new_accounts, creation_burst, low_reach, empty_profiles [C1][C2][C3][C4][C5][C6][C7][C8][C9][C10][C11][C12][C13][C14][C15][C16][C17][C18][C19][C20][C21][C22][C23][C24][C25][C26][C27][C28][C29].
- All activity is compressed into a 40-minute burst on a single day [C1][C28][C29].
- The narrative theme is continuous: a mother in Gaza begging for empathy, donations, and shares for her injured son Mohammed, with a promised link on her page [C2][C3][C4][C5][C6][C7][C8][C9][C10][C11][C12][C13][C14][C15][C16][C17][C18][C19][C20][C21][C22][C23][C24][C25][C26][C27]. C1 adds a Chuffed crowdfunding appeal for Mohammad [C1]. C28 and C29 are empty-text repost rings sharing the same accounts and timing [C28][C29].
The campaign in 3D
The campaign hub, its clusters, the platforms and websites they use, and the accounts shared between clusters. Drag to rotate, scroll to zoom, hover for details.
state media Telegram independent outlet suspicious cluster red line: contradicts green line: agrees · full legend
Layers, top to bottom: sources · platforms & servers · clusters, stories, campaigns · accounts listed propaganda site website platform / server watch likely organic mentions the story, does not push it story campaign account Lines: pushes a version shared accounts same picture posts on links toLoading the 3D view…
Accounts to review first
| # | Account | Why |
|---|---|---|
| 1 | A1 name for reviewers only | Appears in the most clusters (19), including both narrative and repost clusters; 0 followers, created 260 days ago, empty bio; posted early narrative variants such as P35, P51, P58, P62, P68, P71, P74, P77. Likely a core operator or compromised account used across the campaign. |
| 2 | A2 name for reviewers only | Appears in 18 clusters, second only to A1; older account (788 days) but only 6 followers and empty bio; posted many template variants including P11, P14, P16, P19, P21, P24, P27, P30, P33, P41, P44, P46, P50, P54, P57, P61. |
| 3 | A9 name for reviewers only | Appears in 13 clusters including both C28 and C29 repost rings; created 9 days ago, 0 followers, 3 posts; posted the earliest repost-ring items P1, P4, P6 and emotional variants P13, P17, P20, P26, P28, P31, P34. |
| 4 | A8 name for reviewers only | Appears in 13 clusters; created 9 days ago, 0 followers; posted P10, the first visible text post at +0h13, plus P3, P7, P15, P18, P22, P25, P29, P32, P38. |
| 5 | A4 name for reviewers only | Appears in 15 clusters; created 9 days ago, 0 followers, 29 posts; bridges narrative clusters C9-C21 and repost clusters C28/C29. |
| 6 | A3 name for reviewers only | Appears in 17 clusters; created 9 days ago but already has 23 posts (anomalous activity for a new account); posted P63, P70, P76, P80 including 'My friend Matilda' variant. |
| 7 | A10 name for reviewers only | Appears in 5 clusters including C1, C28, C29; created 9 days ago; posted P2 at +0h00 (earliest visible post) and the 'Please help me carry this' variant P52. |
| 8 | A5 name for reviewers only | Older account (798 days, 2 followers) appearing in many early clusters C1-C5, C7, C8, C12, C14, C22, C23, C28, C29; may be a reused or compromised legacy account. |
What it pushes
- A mother in Gaza appeals for donations for her injured 5-year-old son Mohammed, claiming he needs treatment/care the family cannot afford, and asks for empathy, donations, and shares with a link on her page. C2C3C4C5C6C7C8
- A mother asks for help for child Mohammad via a Chuffed crowdfunding campaign to reach $200, requesting reblogs if readers cannot donate. C1
- A child's life is at risk and urgent medical treatment outside Gaza is needed to save him. C13C18C20C23C24C25C27
- Empty-text repost amplification with no visible content, links, images, or videos. C28C29
How it is run
- Shared accounts: A1 and A2 appear in nearly every cluster; A3, A4, A8, A9, A10, A11, A12 also recur across clusters. A1A2A3A4A8A9A10A11
- Templates: near-identical copy-paste text with minor wording swaps; some variants add a 'My friend [Name]' prefix (Matilda, Bill, Gerrit, Morgan). P76P77P78P79C2C3C4C5
- Timing: all posts occur within +0h00 to +0h39 on 2026-11-14, a 40-minute creation burst. C1C28C29P1P2P10
- Servers/platform: Bluesky; shared repost targets are at://did:plc URIs. C1C28C29
- Links: posts claim 'the link is on my page' or point to a crowdfunding campaign; no external link IDs are present in the pack except the repost targets. C1C2C10P10P26
- Account ages: A3, A4, A7, A8, A9, A10, A12 created 9 days ago; A1 created 260 days ago; A2, A5, A6 around 788-798 days ago; A11 created 803 days ago; nearly all have 0-10 followers and empty bios. A1A2A3A4A5A6A7A8
Clusters in this campaign
C1C2C3C4C5C6C7C8C9C10C11C12C13C14C15C16C17C18C19C20C21C22C23C24C25C26C27C28C29
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt c1, Sat 15:15 UTC, 1 model call, 10140 prompt tokens (all clusters read at once), 63.0 s. Ids: C cluster, A account (anonymised), P post. References the model was not shown are removed automatically.