FactsLens campaign report
Staged Spam / scam · confidence high · one campaign · recommended: human review
One coordinated campaign across 40 clusters and 23 Bluesky accounts. The dominant activity is verbatim, emotionally charged donation appeals for an allegedly injured 5-year-old boy named Mohammed in Gaza, often claiming he needs treatment outside Gaza, with a promised “link on my page” that never appears. This is wrapped in empty-text repost rings and low-effort “share my post” clusters. The same accounts recur across many clusters, many accounts are brand new with empty profiles and zero followers, posting is tightly synchronized, and news checks find no coverage for the specific named child. The strongest ordinary explanation—a spontaneous outpouring of genuine individual appeals—does not fit the verbatim repetition, cross-posting, empty profiles, creation burst, and absent links. Judgment: staged. Campaign type: spam (scam / fraudulent fundraising) with bot-like fake amplification.
Strongest innocent explanation considered: A group of genuinely concerned individuals or a newsroom’s several feed accounts independently posting about injured children in Gaza and asking for donations or shares.
- All clusters share the same small set of accounts (A1, A2, A3, A4, A5, A6, A7, A8, A9, A10, A11, A12, etc.), so they are not independent.
- C1 and C28 are empty-text repost rings; C2-C27, C29-C33, C36-C40 are copy-paste text clusters with the same Gaza-child donation narrative; C34, C35, C39 are generic “share/repost my post” clusters from overlapping accounts.
- Cross_cluster signals are explicitly flagged in nearly every cluster, and the same accounts appear in both the repost rings and the text clusters.
- Timing forms a single burst from +0h00 to about +1h49, with a later low-score echo at +5h14+ (C34, C35, C39).
The campaign in 3D
The campaign hub, its clusters, the platforms and websites they use, and the accounts shared between clusters. Drag to rotate, scroll to zoom, hover for details.
state media Telegram independent outlet suspicious cluster red line: contradicts green line: agrees · full legend
Layers, top to bottom: sources · platforms & servers · clusters, stories, campaigns · accounts listed propaganda site website platform / server watch likely organic mentions the story, does not push it story campaign account Lines: pushes a version shared accounts same picture posts on links toLoading the 3D view…
Accounts to review first
| # | Account | Why |
|---|---|---|
| 1 | A1 name for reviewers only | Appears in the most clusters (22), bridges the empty-text repost rings C1/C28 with the fundraising text clusters, and posts early (e.g., P32 at +0h20, P48 at +0h23). Created 260 days ago, 0 followers, empty bio. Highest cross-cluster centrality. |
| 2 | A2 name for reviewers only | Appears in 21 clusters, an older account (788 days) with only 6 followers, posts early text variants (P8 at +0h13, P13 at +0h14, P18 at +0h16) and recurs across both waves; likely a template source or core operator account. |
| 3 | A12 name for reviewers only | Posted the very first items in the pack (P1 at +0h00 in C28, P3 at +0h01 in C1), appears in 10 clusters including both repost rings, created only 9 days ago with 0 followers and 3 posts. |
| 4 | A10 name for reviewers only | Posted the earliest text appeal (P7 at +0h13 in C12) and many early variants (P12, P15, P19, P22, P26, P29, P35); created 9 days ago, 0 followers, appears in 11 clusters. |
| 5 | A3 name for reviewers only | Appears in 20 clusters, created 9 days ago, 0 followers, 29 posts, high activity for a brand-new account; early repost P6 at +0h08. |
| 6 | A4 name for reviewers only | Appears in 17 clusters, created 9 days ago, 0 followers, 23 posts; early text P60 at +0h26. |
| 7 | A5 name for reviewers only | Appears in 12 clusters, older account (798 days) but only 2 followers; posts early variants P46, P62, P66, P72, P75, P76, P79. |
| 8 | A6 name for reviewers only | Appears in 12 clusters, older account (788 days), 10 followers; posts early variants P37, P40, P44, P53, P56, P61, P64. |
What it pushes
- A 5-year-old boy named Mohammed was injured in Gaza and his family needs donations for treatment/care; readers are asked for empathy, donations, and shares, with a “link on my page.” C2C3C4C5C7C8C9
How it is run
- Shared accounts: the same accounts recur across many clusters; A1 appears in 22 clusters, A2 in 21, A3 in 20, A4 in 17, A5/A6 in 12, A7/A8/A9/A10/A12 in 10-11. A1A2A3A4A5A6A7
- Templates: verbatim copy-paste appeals with only placeholder swaps such as “My friend Kelsey,” “My friend Christina,” “My friend Matilda,” “My friend Bill,” “My friend Gerrit,” “My friend Morgan.” C6C10C13C18C27C29C33
- Amplification: empty-text repost rings (C1, C28) plus copy-paste text clusters; signals include synchrony, repost_ring, cross_cluster, creation_burst, low_reach, empty_profiles. C1C28
Clusters in this campaign
C1C2C3C4C5C6C7C8C9C10C11C12C13C14C15C16C17C18C19C20C21C22C23C24C25C26C27C28C29C30C31C32C33C34C35C36C37C38C39C40
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt c1, Sat 20:26 UTC, 1 model call, 13833 prompt tokens (all clusters read at once), 74.4 s. Ids: C cluster, A account (anonymised), P post. References the model was not shown are removed automatically.