FactsLens campaign report: coordinated multi-platform cluster network, 2026-11-14

Staged Propaganda / influence operation · confidence high · one campaign · recommended: human review

Fifteen clusters on Mastodon, Bluesky and Telegram share accounts, servers, links and copy-paste templates within a single day (2026-11-14, +0h00 to +8h17 UTC). The overlap is too extensive to be a coincidence or a single newsroom: A1 appears in 10 clusters, A2 in 7, A3 and A4 in 6, and several clusters reuse the same servers and domains. The strongest ordinary explanation is a coordinated network of newly created, low-reach accounts posting translated templates in multiple languages to amplify pro-Russia / anti-Western political disinformation and distorted real events. Judgment: staged (high confidence). Campaign type: propaganda with bot-like fake amplification.

Strongest innocent explanation considered: A newsroom's several feed accounts, fans, or disclosed bots could coincidentally share a hashtag (#putin, #trump in C15) or a single link, but they would not explain A1 appearing in 10 clusters across Mastodon, Bluesky and Telegram, accounts with 0-1 followers created 4-33 days ago, copy_paste/synchrony/repetition signals, or pravda_sources/telegram_first tags (A1, C1-C15; A1-A60).

A1 appears in C1,C2,C3,C4,C5,C6,C7,C8,C11,C12 (10 clusters); A2 in C1,C3,C5,C11,C12,C13,C15 (7 clusters); A3 in C2,C4,C5,C6,C7,C10 (6 clusters); A4 in C1,C3,C9,C11,C12,C15 (6 clusters).
Servers repeat across clusters: social.roadfm.fr in C1,C5,C8 (A1,A5,A7,A30,A31,A33,A41,A43,A50,A51); social.y-gallery.net in C6,C7,C9,C10,C13 (A3,A6,A9,A12,A13,A15,A21,A24-A28,A36-A40,A42,A44-A60); truthsocial.co.in in C5 (A34) and C13 (A47).
Links/domains repeat: qr.nspk.ru in C1,C3; gallery.rybar.ru in C2,C5; telegra.ph in C6,C7; geopoliticsprime.substack.com in C11,C12; max.ru/colonelcassad in C13.
Timing overlaps: all clusters fall on 2026-11-14 between +0h00 and +8h17 UTC, with a dense burst from +5h30 to +8h17 (P1-P45; cluster time ranges).

The campaign in 3D

The campaign hub, its clusters, the platforms and websites they use, and the accounts shared between clusters. Drag to rotate, scroll to zoom, hover for details.

state media Telegram independent outlet suspicious cluster red line: contradicts green line: agrees · full legend

Layers, top to bottom: sources · platforms & servers · clusters, stories, campaigns · accounts listed propaganda site website platform / server watch likely organic mentions the story, does not push it story campaign account Lines: pushes a version shared accounts same picture posts on links to

Loading the 3D view…

Accounts to review first

#	Account	Why
1	A1 name for reviewers only	Appears in the most clusters (C1,C2,C3,C4,C5,C6,C7,C8,C11,C12 = 10); on social.roadfm.fr; created 9 days ago; 0 followers; 1025 posts; posts first or early in multiple clusters (P10 C6 +5h30, P11 C7 +5h30, P27 C2 +7h10, P34 C4 +7h52, P42 C1 +7h56). Likely central hub/template source. [A1, C1-C8, C11, C12, P10, P11, P27, P34, P42]
2	A10 telegram:rybar	Public Telegram channel in C1,C2,C3,C5; matches telegram_first signal; posts P16 (C3 +5h44), P25 (C2 +7h06), P39 (C1 +7h55). Likely origin/bridge for Russian-language templates. [A10, C1, C2, C3, C5, P16, P25, P39]
3	A14 name for reviewers only	Posted the earliest sample in the pack (P1, C14, +0h00) and repeats the summit template in C3, C9, C14; Bluesky created 7 days ago; 2 followers. [A14, C3, C9, C14, P1, P18, P38]
4	A2 name for reviewers only	Appears in 7 clusters (C1,C3,C5,C11,C12,C13,C15); Bluesky created 4 days ago; 1 follower; bridges C13 (Brennan/Colonelcassad) and C15 (summit hashtags) to the main cluster set. [A2, C1, C3, C5, C11, C12, C13, C15]
5	A3 name for reviewers only	Appears in 6 clusters (C2,C4,C5,C6,C7,C10); Mastodon on social.y-gallery.net; created 21 days ago; 1 follower; posts P35 (C4 summit) and links gallery.rybar.ru (C2 P27 via A1 but A3 in cluster). [A3, C2, C4, C5, C6, C7, C10]
6	A4 name for reviewers only	Appears in 6 clusters (C1,C3,C9,C11,C12,C15); Bluesky created 10 days ago; 4 followers; posts P41 (C1 qr.nspk.ru). [A4, C1, C3, C9, C11, C12, C15, P41]
7	A5 name for reviewers only	Appears in 5 clusters (C1,C2,C3,C5,C8); Mastodon on social.roadfm.fr; created 9 days ago; 0 followers; posts P17 (C3 Italian), P20 (C5 Italian), P26 (C2 Italian). [A5, C1, C2, C3, C5, C8, P17, P20, P26]
8	A6 name for reviewers only	Appears in 5 clusters (C1,C3,C6,C7,C10); Mastodon on social.y-gallery.net; created 17 days ago; 0 followers; 1371 posts (high volume for a new account). [A6, C1, C3, C6, C7, C10]

What it pushes

Pro-Russia war framing: Russian forces 'liberated' Tersianka/Tersyanka in Zaporizhzhia per the Russian MoD; Vostok grouping under Ukrainian fire; modernized Iskander missiles striking Kyiv bridges; Ukrainian drone attack on Moscow being rebranded as American/British; British state taking control of Ukrainian USVs/UAVs; Russia preparing retaliation for frozen Western assets. C6 C7 C10P10P11P12P13P14P15C5P19P20P21C8P8C2P25P26P27C3P16P17P18C8P7
Geopolitical distortion: unconfirmed/imminent Putin-Xi-Trump trilateral summit at APEC in Shenzhen on nuclear arms control; China turning to AI and big data for a smarter army ahead of PLA's 100th anniversary; US aviation collapse and measles-elimination status loss; Abu Dhabi peace talks excluding Europe. C4 C14 C15P1P2P3P34P35P36P37P40P45C11 C12P28P29P30P31P32P33C10P5P6
Disinformation and smear: Jensen Huang forced out of Nvidia by a CIA operation over alleged infidelity leaked to the New York Times; FBI arrested John Brennan's son on child-pornography charges and readers are urged to subscribe to the Colonelcassad channel on MAX; Ueno Bank scandal in Paraguay; UK FCDO funds One Voice/Internews to configure 'correct responses' in AI models. C9P38P39P40P41P42P43P44C13P22P23P24C8P9C8
SBU/GUR cooperation framing tied to Andrey Medvedev's documentary 'Betrayal' (Russia 1), questioning what to do with teenagers who cooperated with SBU/GUR. C1P39P40P41P42

How it is run

Shared accounts: A1 in 10 clusters; A2 in 7; A3 and A4 in 6; A5, A6, A7 in 5; A8, A9, A10, A11 in 4; A12-A23 in 2-3 clusters. A1A2A3A4A5A6A7A8A9A10A11
Servers: social.roadfm.fr (C1,C5,C8; A1,A5,A7,A30,A31,A33,A41,A43,A50,A51); social.y-gallery.net (C6,C7,C9,C10,C13; A3,A6,A9,A12,A13,A15,A21,A24-A28,A36-A40,A42,A44-A60); truthsocial.co.in (C5 A34; C13 A47); bridged from mastodon.social (A8). C1 C5 C8A1A5A7A30A31A33A41A43A50A51C6 C7 C9 C10 C13A3A6A9A12A13A15A21A42C5A34C13A47A8
Links/domains: qr.nspk.ru (C1,C3); gallery.rybar.ru (C2,C5); telegra.ph/Explore-DD-Geopolitics-on-Multiple-Platforms-12-04 (C6,C7); social.roadfm.fr (C8 server); geopoliticsprime.substack.com (C11,C12); max.ru/colonelcassad (C13); en.sputniknews.africa (C15 via A45/P45). C1 C3 C2 C5 C6 C7 C8 C11 C12 C13 C15A45P45
Templates: identical copy-paste text across accounts and clusters, translated into Spanish, English, Portuguese, Italian, Finnish, Czech and Russian (P1-P4 summit text; P10/P11; P12/P13; P14/P15; P22-P24 Brennan text; P28-P33 China AI text; P38-P44 Nvidia/CIA text). P1P2P3P4P10P11P12P13P14P15P22P23P24P28P29P30P31P32P33P38P39P40P41P42P43P44
Timing: 2026-11-14, +0h00 to +8h17 UTC; earliest post P1 (C14, A14, +0h00); dense burst +5h30 to +8h17 including C6/C7 (+5h30), C3 (+5h44), C5 (+6h11), C13 (+6h38), C2 (+7h11), C11/C12 (+7h27), C1/C4/C9/C15 (+7h52 to +8h13). P1C14A14C6 C7 C3 C5 C13 C2 C11 C12 C1 C4 C9 C15
Account ages: most accounts created 4-33 days ago (A1 9 days, A2 4 days, A3 21 days, A4 10 days, A5 9 days, A6 17 days, A7 29 days, A8 27 days, A9 20 days, A11 1 day, A14 7 days, A16 9 days); a minority are older (A29 283 days, A40 331 days, A54 204 days, A58 217 days). Most have 0-1 followers and low reach. A1A2A3A4A5A6A7A8A9A11A14A16A29A40A54A58

Clusters in this campaign

C1 C2 C3 C4 C5 C6 C7 C8 C9 C10 C11 C12 C13 C14 C15

nvidia/nemotron-3.5-super-vl-120b-a12b, prompt c1, Sat 15:37 UTC, 1 model call, 11032 prompt tokens (all clusters read at once), 56.6 s. Ids: C cluster, A account (anonymised), P post. References the model was not shown are removed automatically.