Network weather 1105 suspicious and 925 watched groups in the last 24 hours

The Puppet Post

Junction edition Bluesky, Mastodon, Telegram and the Pravda sites, read live and compared with 36 Google News editions by people and NVIDIA Nemotron.
Vol. I · No. 319 Sunday, November 15, 2026 “See who’s really behind the post.” Free of charge

← The Network

Lead review

Watch score 25/100 · server cluster · 57 accounts · 113 posts

TierWatch
Current assessment
Accounts57
Linked profiles
Posts113
Observed activity
First seenSat 14 Nov
08:26 UTC
ruhr.social

View in 3D: where it comes from and what it is linked to

First seen Sat 14 Nov 08:26 UTC, last Sun 15 Nov 20:08 UTC. Languages: de 3en 1

Some evidence, not enough to call it inauthentic.

This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.

Account profiles fetched: 100%.

Nemotron investigation

Organic confidence high · recommended: no action

The cluster consists of accounts on the same Mastodon server (ruhr.social) posting unrelated, mundane local content in German over roughly two hours: a Fediverse word game, abstract poetry, a Halloween decoration display in Herne, a US politics Substack item, Bochum parking statistics, a Bochum art auction, a poem quote, knitting, a European security podcast, a haircut anecdote, a puzzle game, and a bridge demolition notice. There is no single shared narrative; the only commonality is co-location on ruhr.social.

Narrative: No unified narrative is pushed. The posts are a miscellany of independent, personal/local updates in German across many topics (P1-P13), with the only shared element being that all accounts are on the Mastodon server ruhr.social.

Strongest innocent explanation considered: Independent users on the same Mastodon instance posting about their own lives and interests in the same hour. All accounts are aged (660-2873 days old), have real post histories and follower counts, varied specific bios (e.g., a Dusseldorf lawyer/cyclist A1, a knitting account A9, an Amnesty International group account A6, a self-declared Bochum parking bot A5, a self-declared Ruhrnachrichten RSS scraper A13), and post wholly different content. S:copy_paste = 0%, S:repetition = 1.0, S:template_bios = 0%, S:new_accounts = 0%, S:removed_accounts = 0%, S:known_accounts = 0.

  • No near-identical text repeated across accounts (S:copy_paste = 0%).
  • Each account posted once on average (S:repetition = 1.0); no spam.
  • Accounts are years old with substantial post histories and real followers (e.g., A3: 1197 followers; A12: 788 followers, 28276 posts).
  • Bios are varied and personal; no template bios (S:template_bios = 0%).
  • Content is locally grounded and personal (Bochum, Herne, Schwerte, Dusseldorf), not a coordinated message. Coordination alone is not proof of inauthenticity, and sharing one server (S:listed_servers = 100%) is not inauthentic by itself. The elevated S:synchrony = 67% is measured against a single minute, but the actual timestamps span about 109 minutes with unrelated topics, consistent with normal instance activity.

Sources

DomainTrustWhy
fedle.fedilab.applowRegistered 2019-01-30 via 1&1 Internet SE (2845 days old).
A small Wordle-like game for the Fediverse by Tom79 (Fedle v0.1.0 · 2026); title 'Fedle #1016 3/6'.
Not on VIGINUM/CheckFirst propaganda lists; origin is transparent and attributed.
ruhrgebiet-industriekultur.delowLocal blog about Ruhrgebiet industrial culture covering the Teutoburgia workers' settlement in Herne, including Halloween decorations (W2/W4).
domain_info returned no registration data (registered null, age null, registrar null).
Not on VIGINUM/CheckFirst propaganda lists; origin is transparent.
substack.comlowRegistered 2010-04-27 via Amazon Registrar, Inc. (6044 days old).
Timothy Snyder's own Substack platform ('Thinking about...'); the linked item is a primary source, not independent verification (W3).
Not on propaganda lists; origin is transparent.

Images and video

Images are blurred: click one to show it. They load from the platform's own servers.

  • I1 Night photo of a house decorated for Halloween: inflatable ghost, tombstones, string lights, spooky figures. Supports P3's text about Halloween in Teutoburgia, Herne ('an Halloween wird es dagegen ziemlich gruselig... aufwendige Gruselinszenierungen'). No indication of recycled footage.
  • I2 Poster for the '52. Bochumer Kunstauktion' on 22.11.2026 at Prinz Regent Theater, with a grid of artworks. Supports P6's art auction announcement.
  • I3 Second poster for the same art auction ('EINTRITT FREI', 'NEU: AUCH KARTENZAHLUNG MÖGLICH'). Supports P6.
  • I4 Third poster for the same art auction ('EIN DRITTEL AN DIE KÜNSTLER*INNEN DER REST AN DIE MENSCHENRECHTSARBEIT'). Supports P6.

Independent news check

ClaimFindingWhySources
Halloween in Teutoburgia, Herneno coverage found Search in German found no independent coverage.Q1
Snyder/Andy Kim health and democracy conversation Nov 13 2026no coverage found Search in English found only Snyder's own Substack (1 outlet, not independent); no independent outlet in any country corroborates the event.Q2N1N2
  • Q1 searched “Teutoburgia Herne Halloween 2026” (de): 0 articles
  • Q2 searched “Andy Kim Timothy Snyder health democracy November 2026” (en): 2 articles
    • N1 Thinking about... | Timothy Snyder: Now We Act: With Senator Chris Van Hollen on Leadership (2026-11-10)
    • N2 Thinking about... | Timothy Snyder: Now We Act: With Rep. Madeleine Dean on Language and Power (2026-11-08)

Evidence-backed claims

  • Halloween decorations/event in Teutoburgia, Herne (P3, W2). P3W2W4I1Q1
  • Independent outlets tell the same story: no. Q1
  • Independent outlets report the event while posts distort/reframe it: no evidence of distortion; no independent reporting found. Q1
  • Independent outlets debunk it: none found. Q1
  • Independent outlets do not cover it: search in German ('Teutoburgia Herne Halloween 2026') returned 0 distinct outlets and 0 articles (Q1). Finding no coverage is weak evidence; it neither confirms nor refutes the claim. Q1
  • Timothy Snyder conversation with Senator Andy Kim on health and democracy, Nov 13 2026 (P4, W3). P4W3Q2N1N2
  • Independent outlets tell the same story: no. Q2
  • Independent outlets report the event while posts distort/reframe it: no independent corroboration found; only Snyder's own Substack (1 outlet, not independent because it is his own platform) appears in results N1/N2, which are other posts in the same series. Q2N1N2

nvidia/nemotron-3.5-super-vl-120b-a12b, prompt v5, Sat 10:48 UTC, 3 model calls, 64.6 s · 93% of its references checked against the evidence. Evidence ids: P post, A account, I image, V video, W web page, Q news search, N news article, S detector signal.

Activity per minute

60 minutes, peak 1 posts in one minute.

Signals

CategorySignalValueThresholdFiredWhat it means here
coordination copy_paste 0% ≥ 50% no 0% of posts repeat near-identical text from another account.
coordination synchrony 2% ≥ 50% no 2% of the activity happened within a single minute.
coordination repetition 1.98 ≥ 2.0 no Each account posted this 2.0 times on average.
coordination cross_cluster 7% ≥ 50% no 7% of the accounts also appear in at least two other flagged clusters (24 h).
account removed_accounts 0% ≥ 20% no 0% of the accounts are no longer served by Bluesky (suspended or deleted).
account new_accounts 0% ≥ 50% no 0% of the accounts were created in the last 30 days.
account creation_burst 9% ≥ 40% no 9% of the accounts were created within the same 72 hours.
account low_reach 8% ≥ 60% no 8% of the accounts have fewer than 10 followers.
account empty_profiles 9% ≥ 50% no 9% of the accounts have no profile picture or no bio.
account template_bios 0% ≥ 30% no 0% of the accounts have a bio that near-duplicates another account's bio.
provenance known_accounts 0 ≥ 1 no 0 account(s) are on IFTAS's public list of suspected Portal Kombat accounts.
provenance listed_servers 100% ≥ 30% yes 100% of the accounts are bridged from Mastodon servers on IFTAS's list.
provenance known_domains 0 ≥ 1 no Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists.
provenance pravda_sources 0 ≥ 1 no Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof).
disclosure declared_automation 9% ≥ 50% no 9% of the accounts say in their profile that they are bots or automated feeds.

Accounts (87)

Median account age: 1463 days. Names are shown only for accounts on IFTAS's public list or already removed by Bluesky; the team sees all.

AccountAge (days)FollowersFollowsPosts hereStatus
account 1 2857 319 2573 1 active
account 2 1442 165 224 1 active
account 3 1463 1196 86 2 active
account 4 665 50 137 2 active
account 5 1361 81 1 9 active
account 6 2874 345 39 1 active
account 7 661 50 199 1 active
account 8 1438 45 102 1 active
account 9 1456 81 70 1 active
account 10 1456 2 103 1 active
account 11 968 107 105 1 active
account 12 1480 788 288 2 active
account 13 766 5 0 4 active
account 14 1479 91 85 1 active
account 15 649 38 8 1 active
account 16 1515 700 64 2 active
account 17 1260 484 515 1 active
account 18 1468 623 275 1 active
account 19 bridged from Mastodon 323 22 3 2 active
account 20 bridged from Mastodon 390 55 4 3 active
account 21 1479 779 1052 1 active
account 22 1663 204 74 2 active
account 23 1664 485 490 1 active
account 24 bridged from Mastodon 671 61 2 1 active
account 25 1466 362 660 1 active
account 26 1475 2015 1725 1 active
account 27 1614 16 129 1 active
account 28 2874 758 3 1 active
account 29 1281 1176 517 12 active
account 30 bridged from Mastodon 249 5 1 1 active
account 31 1474 113 111 1 active
account 32 182 48 145 3 active
account 33 1367 750 19 4 active
account 34 bridged from Mastodon 720 14 2 1 active
account 35 213 541 777 2 active
account 36 1428 158 189 1 active
account 37 2248 100 385 1 active
account 38 1352 604 351 1 active
account 39 244 432 203 1 active
account 40 1664 311 409 1 active
account 41 3050 143 217 1 active
account 42 1888 362 827 2 active
account 43 1476 88 31 1 active
account 44 436 11 23 1 active
account 45 1479 121 85 2 active
account 46 1455 124 432 1 active
account 47 2237 1218 7500 1 active
account 48 bridged from Mastodon – 6 0 1 active
account 49 1676 1131 996 1 active
account 50 1378 253 344 3 active
account 51 766 589 30 1 active
account 52 1431 240 284 1 active
account 53 701 134 125 1 active
account 54 1661 53 262 1 active
account 55 1470 303 141 1 active
account 56 2713 29 172 1 active
account 57 1185 763 390 1 active
account 58 bridged from Mastodon 895 94 26 2 active
account 59 39 7 10 1 active
account 60 1664 511 387 5 active
account 61 2498 159 208 3 active
account 62 66 16 26 4 active
account 63 1046 8 1 1 active
account 64 1479 20 30 1 active
account 65 1467 106 153 2 active
account 66 1665 114 261 1 active
account 67 1444 93 7 1 active
account 68 2903 5877 1075 1 active
account 69 1462 451 177 3 active
account 70 1478 818 1269 1 active
account 71 206 10 23 1 active
account 72 2361 243 102 1 active
account 73 1675 18 233 1 active
account 74 232 429 526 1 active
account 75 1453 207 73 1 active
account 76 1639 212 266 1 active
account 77 1447 74 338 1 active
account 78 bridged from Mastodon 875 4 9 1 active
account 79 1664 2835 553 2 active
account 80 1478 17 62 1 active
account 81 1475 174 476 1 active
account 82 1664 1809 187 3 active
account 83 973 104 112 1 active
account 84 327 56 149 2 active
account 85 1463 927 619 3 active
account 86 2472 49 59 1 active
account 87 1479 434 222 1 active

Clusters sharing accounts with this one (24 h)

TierKindShared message or linkShared accounts
Likely organic link https://pastpuzzle.de/ 9
Likely organic domain pastpuzzle.de 6

Human review

No human decision yet.

Anyone can review. Your decision is kept with the visitors' reviews, apart from our own figures. Decide with the bar at the bottom of the screen; it moves on to the next cluster nobody has reviewed.

Confirm: