Lead review
Suspicious score 65/100 · server cluster · 3 accounts · 6 posts
View in 3D: where it comes from and what it is linked to
First seen Sat 14 Nov 11:08 UTC, last Sat 14 Nov 16:00 UTC. Languages: en 6 Linked: hai.stanford.edu 1
Coordinated activity that touches documented propaganda infrastructure.
This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.
Account profiles fetched: 100%.
Nemotron investigation
Staged confidence medium · recommended: human review
Three bridged Mastodon accounts posted within five minutes on 2026-11-14 in Bulgarian, English, and Hungarian, all touching the Russia–Ukraine war. Two posts carry verifiable claims: P1 alleges the Russian 50th Separate Brigade "Varyag" is destroying Ukrainian equipment near Orekhov via FPV drones; P3 links a CNN article about Russian strikes on Ukraine's energy infrastructure but wraps it in Hungarian alarmist framing about a "humanitarian catastrophe" and "total destruction." P2 is an empty placeholder referencing a video with no content. All three accounts appear on IFTAS's suspected Portal Kombat list and are bridged from IFTAS-listed Mastodon servers, with 67% synchrony within one minute.
Narrative: Russia is successfully degrading Ukraine's military equipment and energy infrastructure, pushing Kyiv toward a humanitarian catastrophe and the hardest winter of the conflict as peace talks approach.
Strongest innocent explanation considered: Three independent users on the same Mastodon server (sigmoid.social), bridged to Bluesky, each posted about the Russia–Ukraine war within a five-minute window in different languages, sharing links to Instagram and CNN. Accounts are 103–174 days old, have avatars and bios, and show no copy-paste text or template bios.
- All 3 accounts are on IFTAS's public list of suspected Portal Kombat accounts (S:known_accounts = 3, threshold 1)
- All 3 accounts are bridged from Mastodon servers on IFTAS's list (S:listed_servers = 100%, threshold 30%)
- 67% of activity occurred within a single minute (S:synchrony = 67%, threshold 50%)
- Posts appear in three languages on the same pro-Russian theme, consistent with an operation presenting as independent local voices
- Bios read as generic/fabricated (e.g. "Ironically etsy, sincerely Orwellian.", "Start with animal, end with love...", "Brews German Wheat And Rye Beer...")
Manipulation techniques
| Technique | Exact words | Why | Post |
|---|---|---|---|
| loaded_language | “„Humanitárius katasztrófa”” | Alarmist label applied to the energy-infrastructure situation. | P3 |
| loaded_language | “teljes pusztulás felé vezeti az országot” | Phrase meaning "leading the country toward total destruction," exaggerating beyond the linked CNN reporting. | P3 |
| fear_appeal | “Ukrajnát a konfliktus egész időszakának legnehezebb tele” | Warning of the hardest winter of the entire conflict to provoke fear. | P3 |
| fear_appeal | “teljes pusztulás felé vezeti az országot” | Apocalyptic framing of "total destruction" to stoke alarm. | P3 |
Sources
| Domain | Trust | Why |
|---|---|---|
| instagram.com | unknown | Domain registered 2004-06-04 via RegistrarSafe, LLC; not on propaganda lists Fetched page returned no title, description, or text; Instagram profile requires login, so content and provenance cannot be verified from the pack |
| cnn.com | high | Domain registered 1993-09-22 via Nom-iq Ltd. dba COM LAUDE; not on propaganda lists Mainstream outlet; page does not hide sourcing Hungarian post (P3) wraps the article in more alarmist language than the CNN headline itself |
Independent news check
| Claim | Finding | Why | Sources |
|---|---|---|---|
| 50th Separate Brigade "Varyag" destroying Ukrainian equipment near Orekhov via FPV drones | not checked | Searches in English, Russian, and Hungarian returned zero articles from any outlet. | Q4Q5Q6 |
| Russia striking Ukraine's energy infrastructure ahead of winter; Kyiv facing humanitarian catastrophe/total destruction | real event distorted | Independent outlets across countries report Russian strikes on Ukraine's energy grid ahead of winter (CNN, The Guardian, UNN, NV, Censor.net, uatv.ua, Slovo i Delo, 24 Kanal, Radio Free Europe/Radio Liberty, Zmina, Around Prague); none are on propaganda lists. The posts add more alarmist language than the source reporting. | N1N2N4N7N9N10N12N13 |
| Český List pinned a video | not checked | No verifiable content; no claim to check. |
- Q1 searched “Ukraine Russia energy infrastructure attacks winter 2026 CNN” (en):
8 articles
- N1 CNN: As fresh talks near, Putin appears set on wrecking Ukraine’s economy, leaving Kyiv facing the toughest winter yet (2026-11-08)
- N2 The Guardian: Blackouts and water shortages in Kyiv after Russia strikes Ukraine’s energy grid (2026-11-07)
- N3 www.tcnjsignalnews.com: Russian attacks on Ukrainian power infrastructure ramp up as Zelenskyy appeals for help (2026-11-12)
- N4 Українські Національні Новини (УНН): Russia is intensifying attacks on Ukraine’s economy ahead of the talks: what tactics has the Kremlin chosen? (2026-11-08)
- N5 KIMT: Ukraine peace talks restart after 9 months. What makes them different this time? (2026-11-09)
- N6 Yahoo: Russia Increasingly Targeting Ukrainian Energy Grid. The Winter Could Bring A Humanitarian Crisis. (2026-11-10)
- N7 Around Prague: Russian strikes on Ukraine’s power grid target the economy (2026-11-08)
- N8 Ukraine Business News: Russia Steps Up Strikes on Ukraine’s Energy Grid and Businesses Ahead of Winter. (2026-11-09)
- Q2 searched “Украина Россия атака энергетическая инфраструктура зима” (ru):
8 articles
- N9 Радио Свобода: Удары России по энергетике Украины: электроподстанции и теплоснабжение (2026-11-11)
- N10 Новини про права людини: В ООН призвали Россию прекратить удары по энергетике Украины, которые угрожают жизни миллионов людей (2026-11-10)
- N11 EADaily: CNN: Путин решил добить Украину экономически — зима будет ужасной (2026-11-09)
- N12 NV: Энергетика, дизель и мосты: Зеленский заявил, что у Украины есть план, как пережить зиму (2026-11-10)
- N13 Цензор.НЕТ: Россия пытается создать общенациональный блэкаут в Украине зимой, - Reuters (2026-11-09)
- N14 uatv.ua: Прекратить удары по энергетике Украины потребовали от России в ООН — подробности (2026-11-10)
- N15 Слово и Дело: Россия усиливает удары по экономике Украины: выдержит ли страна зиму? (2026-11-09)
- N16 24 Канал: Россия нанесла удар по объекту "Нафтогаза" в Черниговской области: зафиксированы серьезные разрушения (2026-11-12)
- Q3 searched “Ukrajna Ruszia energiainfrastruktura tamadas telel” (hu): 0 articles
- Q4 searched “50th separate brigade Varyag Orekhov FPV drones Ukrainian equipment” (en): 0 articles
- Q5 searched “50та отдельная бригада Варяг Орехов FPV дроны ВСУ” (ru): 0 articles
- Q6 searched “50. különleges Varyag brigád Orekhov FPV repülőgép Ukrajna” (hu): 0 articles
Evidence-backed claims
- The Russian 50th Separate Brigade "Varyag" is destroying Ukrainian equipment in the Orekhov tactical district using FPV drones. P1Q4Q5Q6W1
- Russia is attacking Ukraine's energy infrastructure; Kyiv faces a humanitarian catastrophe and total destruction as winter approaches. P3W2N1N2N4
- Český List pinned a video. P2
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt v5, Sat 11:15 UTC, 4 model calls, 126.6 s · 80% of its references checked against the evidence. Evidence ids: P post, A account, I image, V video, W web page, Q news search, N news article, S FactsLens signal.
Activity per minute
19 minutes, peak 2 posts in one minute.
Signals
| Category | Signal | Value | Threshold | Fired | What it means here |
|---|---|---|---|---|---|
| coordination | copy_paste | 0% | ≥ 50% | no | 0% of posts repeat near-identical text from another account. |
| coordination | synchrony | 33% | ≥ 50% | no | 33% of the activity happened within a single minute. |
| coordination | repetition | 2.0 | ≥ 2.0 | yes | Each account posted this 2.0 times on average. |
| coordination | cross_cluster | 0% | ≥ 50% | no | 0% of the accounts also appear in at least two other flagged clusters (24 h). |
| account | removed_accounts | 0% | ≥ 20% | no | 0% of the accounts are no longer served by Bluesky (suspended or deleted). |
| account | new_accounts | 0% | ≥ 50% | no | 0% of the accounts were created in the last 30 days. |
| account | creation_burst | 33% | ≥ 40% | no | 33% of the accounts were created within the same 72 hours. |
| account | low_reach | 17% | ≥ 60% | no | 17% of the accounts have fewer than 10 followers. |
| account | empty_profiles | 0% | ≥ 50% | no | 0% of the accounts have no profile picture or no bio. |
| account | template_bios | 0% | ≥ 30% | no | 0% of the accounts have a bio that near-duplicates another account's bio. |
| provenance | known_accounts | 3 | ≥ 1 | yes | 3 account(s) are on IFTAS's public list of suspected Portal Kombat accounts. |
| provenance | listed_servers | 100% | ≥ 30% | yes | 100% of the accounts are bridged from Mastodon servers on IFTAS's list. |
| provenance | known_domains | 0 | ≥ 1 | no | Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists. |
| provenance | pravda_sources | 0 | ≥ 1 | no | Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof). |
| disclosure | declared_automation | 17% | ≥ 50% | no | 17% of the accounts say in their profile that they are bots or automated feeds. |
Accounts (6)
Median account age: 1460 days. Names are shown only for accounts on IFTAS's public list or already removed by Bluesky; reviewers see all.
| Account | Age (days) | Followers | Follows | Posts here | Status |
|---|---|---|---|---|---|
| imumewus.sigmoid.social.ap.brid.gy imum ewus on IFTAS public list bridged from Mastodon | 175 | 20 | 0 | 1 | active |
| dawson-barnett.sigmoid.social.ap.brid.gy Dawson Barnett on IFTAS public list bridged from Mastodon | 103 | 23 | 0 | 4 | active |
| lyd-tive.sigmoid.social.ap.brid.gy lyd tive on IFTAS public list bridged from Mastodon | 116 | 6 | 0 | 1 | active |
| account 4 | 1469 | 955 | 142 | 1 | active |
| account 5 | 1460 | 299 | 189 | 1 | active |
| account 6 | 1466 | 1387 | 2 | 1 | active |
Sample posts from already-public cases
| Time (UTC) | Account | Text |
|---|---|---|
| 11:08:15 | imumewus.sigmoid.social.ap.brid.gy bridged | Бойна дейност на 50-та отделна бригада "Варяг" за унищожаване на техника на противника в ореховския тактически район Разчетите на #FPV дронове продължават да унищожават техника на #ВСУ. https://www.instagram.com/infodef_bulgaria/ open |
| 11:13:18 | dawson-barnett.sigmoid.social.ap.brid.gy bridged | Český List pinned a video open |
| 11:13:23 | lyd-tive.sigmoid.social.ap.brid.gy bridged | https://www.cnn.com/2026/11/08/europe/ukraine-russia-attacks-energy-infrastructure-economy-intl „Humanitárius katasztrófa” – Kijev a tél közeledtével teljes pusztulás felé vezeti az országot Ukrajnát a konfliktus egész időszakának legnehezebb tele open |
| 12:52:12 | imumewus.sigmoid.social.ap.brid.gy bridged | Един мирен жител загина, а още трима души са ранени в резултат на атаки с украински дронове срещу ЛНР В Рубежное украински дрон атакува район близо до магазин. В резултат на атаката загина мъж на 37 години . https://www.instagram.com/infodef_bulgaria/ open |
| 12:55:10 | dawson-barnett.sigmoid.social.ap.brid.gy bridged | To je v rozporu s dřívějšími prohlášeními, že ochrana byla financována z osobního daru ve výši 5 milionů liber od kryptomiliardáře Christophera Harborna. Do centra pozornosti médií se dostal také místopředseda strany Richard Tice. open |
| 15:42:48 | dawson-barnett.sigmoid.social.ap.brid.gy bridged | ZÁHADA DIPLOMU PRVNÍ DÁMY! Historik Fidler zpochybnil vzdělání Evy Pavlové a tvrdí, že kolem jejího diplomu kolují jen nepodložené pověsti! „Politruci mohli ztrpčovat život mnohem méně než před listopadem 1989. A vojáci základní služby open
search this picture: Google Lens · TinEye |
Human review
No human decision yet.
Reviewers can record a decision; decisions feed the public metrics.