Lead review
Suspicious score 50/100 · server cluster · 4 accounts · 16 posts
View in 3D: where it comes from and what it is linked to
In a contested story: US-Ukraine Donbas-for-NATO proposal: version comparison. This cluster pushes: One sample post directly repeats the Lenta.ru headline ‘В США потребовали от Киева вывести войска с российских территорий,’ laundering the state-media claim into the cluster..
In a contested story: European Parliament lawmaker added to Ukraine's Myrotvorets database. This cluster pushes: RT/pravda.me claim that a European Parliament deputy was added to Myrotvorets.
In a contested story: Story analysis: Russian strike on cargo ship and port infrastructure in Chornomorsk. This cluster pushes: Russian forces struck port infrastructure/electrical substation, a dry cargo ship, and locomotives used in the interests of the Armed Forces of Ukraine; Ukraine lost a dry cargo ship and locomotives..
First seen Sat 14 Nov 09:21 UTC, last Sat 14 Nov 19:13 UTC. Languages: en 13ru 3 Linked: russian.rt.com 6russiatoday.ru 6lenta.ru 6tass.ru 3ura.news 1
Coordinated activity that touches documented propaganda infrastructure.
This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.
Account profiles fetched: 100%.
Nemotron investigation
Insufficient evidence confidence low · recommended: human review
Nine accounts on the Mastodon server pravda.me (bridged to Bluesky) posted 19 times between 2026-11-14 09:21 and 09:52 UTC. Most posts are benign filler (Russian dictionary definitions, Bible verses, sports and consumer news), while a minority amplify Russian state-media framing of the war in Ukraine: RT claims Russian strikes hit Ukrainian energy, port and rail objects "used in the interests of the AFU" (P1/W1), and ura.news claims Zelensky "destroyed another bridge to peace" (P8). RT also warns of a German budget crisis from 2028 (P13).
Narrative: A mixed-content cluster on one Mastodon server (pravda.me) bridges posts to Bluesky. The majority of posts are non-political filler (dictionary entries, Bible verses, sports and consumer news). Interspersed are political posts aligned with the Russian government's line on the war in Ukraine: RT reports Russian strikes on Ukrainian energy, port and railway infrastructure described as serving the Kyiv regime; ura.news claims Zelensky destroyed another bridge to peace in Ukraine; RT warns of a German budget crisis from 2028. The benign posts appear to act as camouflage while a minority of accounts amplify Russia-friendly war coverage.
Strongest innocent explanation considered: Accounts on a single Mastodon server (pravda.me), some declared as bots or automated feeds (A6, A10), cross-posting via RSS feeds and share buttons (links carry utm_source=rss), with members also posting dictionary, Bible and sports content. A creation burst (45% of accounts created within 72 hours), template bios ("Неофициальная страница" on A1, A2, A3, A8, A9, A11), low reach (45% under 10 followers) and empty profiles (36%) are consistent with a server operator running several automated or lightly maintained accounts rather than people pretending to be independent individuals.
- Coordination indicators are mixed. Against staging: S:copy_paste = 0% (no near-identical text), S:synchrony = 26% (below the 50% threshold; posts are spread across the day), S:cross_cluster = 0%, S:removed_accounts = 0%, S:new_accounts = 0%, S:known_accounts = 0, S:known_domains = 0, S:pravda_sources = 0. The accounts are all openly on the same visible server rather than disguising themselves as independent users. For staging: S:creation_burst = 46%, S:template_bios = 55%, S:low_reach = 46%, S:empty_profiles = 36%, S:listed_servers = 100% (IFTAS-flagged servers), S:declared_automation = 18%. The political posts are not identical across accounts and link to ordinary Russian state media. The pack shows coordinated infrastructure (one server) but not coordinated inauthentic behavior (no copy-paste, no synchrony, no masquerading). Per instructions, insufficient_evidence is preferred over guessing.
Manipulation techniques
| Technique | Exact words | Why | Post |
|---|---|---|---|
| loaded_language | “объектам, используемым в интересах ВСУ” | Frames Ukrainian targets as serving the Armed Forces of Ukraine. | P1 |
| loaded_language | “Зеленский разрушил еще один мост к миру на Украине” | Presupposes Zelensky blocks peace and casts Russia's side as the peacemaker. | P8 |
| fear_appeal | “угрозе бюджетного кризиса в Германии с 2028 года” | Warns of a looming budget crisis in Germany from 2028. | P13 |
Sources
| Domain | Trust | Why |
|---|---|---|
| rt.com | low | Russian state-controlled outlet; page republishes Russian Ministry of Defence claims ("сообщает Минобороны") without independent attribution Page does not hide its own identity (RT branding is prominent) but relies on official Russian sources without independent verification Duplicate mirror at russiatoday.ru (W2) carries identical text |
| tass.ru | unknown | Not fetched; no details in pack (W3 title/description/text empty); S:known_domains = 0 so not on VIGINUM/CheckFirst propaganda lists per pack |
| ura.news | unknown | Not fetched; not in pack; claim in P8 unverifiable from pack alone |
| lenta.ru | unknown | Not fetched; S:known_domains = 0 per pack |
| championat.com | unknown | Not fetched; S:known_domains = 0 per pack |
Independent news check
| Claim | Finding | Why | Sources |
|---|---|---|---|
| Russian strikes on 13-14 November 2026 hit an electricity substation in Priluki (Chernihiv region), a cargo ship at sea, and two locomotives in Zaporizhzhia region. | real event distorted | Russian-edition search found 6 distinct outlets (rosbalt.ru, business-gazeta.ru, Anadolu Ajansı/aa.com.tr, tolknews.ru, NEWS.ru, donbasstoday.ru) reporting strikes on 14 November 2026 on energy and transport infrastructure in Ukraine, citing the Russian Defence Ministry. None are on propaganda lists per the tool, though several are Russian outlets. The event is reported, but the framing ("used in the interests of the AFU," "Kyiv regime") comes from RT and the Russian MoD; independent outlets largely mirror the ministry's claims without independent verification. English-edition search found no articles; absence of coverage is weak evidence, not evidence against the event. | Q2N1N2N3N4N5N6N7 |
| Zelensky destroyed another bridge to peace in Ukraine. | not checked | English search found no coverage. Not independently corroborated in the pack; treated as an unverifiable opinion/framing claim from ura.news. | Q3 |
| Economists warn of a budget crisis in Germany from 2028. | not checked | No search was run for this claim in the tool results; not independently verified from the pack. | P13 |
- Q1 searched “Russian strikes substation cargo ship locomotives Chernihiv Zaporizhzhia November 14 2026” (en): 0 articles
- Q2 searched “российские удары электроподстанция сухогруз локомотивы Черниговская Запорожская области 14 ноября 2026” (ru):
8 articles
- N1 rosbalt.ru: Подстанция, сухогруз и локомотивы: что известно о путинских ударах по Украине (2026-11-14)
- N2 БИЗНЕС Online — Новости Казани: ВС РФ ударили по сухогрузу с военными грузами и двум локомотивам на Украине (2026-11-14)
- N3 Anadolu Ajansı: Минобороны РФ заявило об ударах по энергообъектам и транспортной инфраструктуре Украины (2026-11-14)
- N4 rosbalt.ru: ВС РФ нанесли удары по сухогрузу и энергообъекту на Украине 14 ноября 2026 года (2026-11-14)
- N5 Толк – новости Барнаула, Алтая и Алтайского края: Удары по Украине в ночь на 14 ноября: Минобороны раскрыло подробности (2026-11-14)
- N6 NEWS.ru: Российские беспилотники «проведали» электроподстанцию в Прилуках (2026-11-14)
- N7 NEWS.ru: Удары по Украине сегодня, 14 ноября: какие объекты ВСУ поражены, последствия (2026-11-14)
- N8 Донбасс Сегодня: Плохие новости для Украины: разгром западных областей начался, пошли � (2026-11-14)
- Q3 searched “Zelensky destroyed bridge to peace Ukraine ura.news” (en): 0 articles
Evidence-backed claims
- On 13-14 November 2026 Russian forces struck an electricity substation in Priluki (Chernihiv region), a cargo ship at sea, and two locomotives in Zaporizhzhia region, described as military/logistics targets used by the AFU. P1W1W2Q2N1N2N3N4
- Zelensky destroyed another bridge to peace in Ukraine. P8Q3
- Economists warn of a budget crisis in Germany from 2028. P13
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt v5, Sat 09:55 UTC, 3 model calls, 73.8 s · 88% of its references checked against the evidence. Evidence ids: P post, A account, I image, V video, W web page, Q news search, N news article, S FactsLens signal.
Activity per minute
25 minutes, peak 2 posts in one minute.
Signals
| Category | Signal | Value | Threshold | Fired | What it means here |
|---|---|---|---|---|---|
| coordination | copy_paste | 0% | ≥ 50% | no | 0% of posts repeat near-identical text from another account. |
| coordination | synchrony | 19% | ≥ 50% | no | 19% of the activity happened within a single minute. |
| coordination | repetition | 4.0 | ≥ 2.0 | yes | Each account posted this 4.0 times on average. |
| coordination | cross_cluster | 0% | ≥ 50% | no | 0% of the accounts also appear in at least two other flagged clusters (24 h). |
| account | removed_accounts | 0% | ≥ 20% | no | 0% of the accounts are no longer served by Bluesky (suspended or deleted). |
| account | new_accounts | 0% | ≥ 50% | no | 0% of the accounts were created in the last 30 days. |
| account | creation_burst | 29% | ≥ 40% | no | 29% of the accounts were created within the same 72 hours. |
| account | low_reach | 59% | ≥ 60% | no | 59% of the accounts have fewer than 10 followers. |
| account | empty_profiles | 29% | ≥ 50% | no | 29% of the accounts have no profile picture or no bio. |
| account | template_bios | 41% | ≥ 30% | yes | 41% of the accounts have a bio that near-duplicates another account's bio. |
| provenance | known_accounts | 0 | ≥ 1 | no | 0 account(s) are on IFTAS's public list of suspected Portal Kombat accounts. |
| provenance | listed_servers | 100% | ≥ 30% | yes | 100% of the accounts are bridged from Mastodon servers on IFTAS's list. |
| provenance | known_domains | 0 | ≥ 1 | no | Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists. |
| provenance | pravda_sources | 0 | ≥ 1 | no | Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof). |
| disclosure | declared_automation | 12% | ≥ 50% | no | 12% of the accounts say in their profile that they are bots or automated feeds. |
Accounts (17)
Median account age: 1192 days. Names are shown only for accounts on IFTAS's public list or already removed by Bluesky; reviewers see all.
| Account | Age (days) | Followers | Follows | Posts here | Status |
|---|---|---|---|---|---|
| account 1 | 1598 | 2295 | 6 | 6 | active |
| account 2 | 1598 | 857 | 6 | 3 | active |
| account 3 | 1598 | 1983 | 6 | 6 | active |
| account 4 | 1181 | 3 | 0 | 1 | active |
| account 5 | 1192 | 1 | 0 | 1 | active |
| account 6 | 1181 | 2 | 0 | 1 | active |
| account 7 | 1181 | 1 | 0 | 1 | active |
| account 8 | 1598 | 1222 | 6 | 1 | active |
| account 9 | 1598 | 345 | 4 | 2 | active |
| account 10 | 1181 | 1 | 0 | 1 | active |
| account 11 | 1590 | 41 | 2 | 2 | active |
| account 12 | 1198 | 1 | 0 | 1 | active |
| account 13 | 1192 | 2 | 0 | 1 | active |
| account 14 | 1192 | 1 | 0 | 1 | active |
| account 15 | 1192 | 2 | 0 | 1 | active |
| account 16 | 1192 | 3 | 0 | 1 | active |
| account 17 | 1585 | 36 | 1 | 1 | active |
Human review
No human decision yet.
Reviewers can record a decision; decisions feed the public metrics.