See who's really behind the post.
First seen Sat 14 Nov 05:40 UTC, last Sat 14 Nov 05:40 UTC. Linked: theguardian.com 3dlvr.it 1
Some evidence, not enough to call it inauthentic.
This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.
Account profiles fetched: 100%.
Organic confidence high · recommended: no action
Four established Bluesky accounts shared the same Guardian Australia news headline about One Nation candidates self-funding Victorian election campaigns within a single minute. The accounts show no signs of inauthenticity: they are aged 726-1223 days, have substantial post histories, no empty profiles, no declared automation, and are not on any known suspicious lists. The linked domain (theguardian.com) is a long-established legitimate news outlet not on propaganda lists. The identical text and timing are consistent with multiple people sharing the same news story, not coordinated inauthentic behavior.
Narrative: Four Bluesky accounts posted the same headline and link within one minute: 'One Nation candidates say they are funding their own Victorian election campaigns as party keeps purse shut,' linking to a Guardian Australia article about the 2026 Victorian state election. The article reports that several One Nation candidates say they have had to fund their own campaigns because the party is not contributing money, based on interviews with six candidates and campaigners.
Strongest innocent explanation considered: Multiple unrelated users saw the same Guardian Australia news story about One Nation's Victorian election campaign finances and shared it around the same time, using a mix of a dlvr.it distribution link and direct Guardian links.
| Domain | Trust | Why |
|---|---|---|
| dlvr.it | low | Registration age and registrar unavailable [domain_info: dlvr.it]. Not on public propaganda lists [domain_info: dlvr.it]. A legitimate content-distribution/automation service used in P1 [P1]. |
| theguardian.com | high | Registered 1994-07-06, age 11819 days, registrar GoDaddy.com, LLC [domain_info: theguardian.com]. Not on VIGINUM/CheckFirst propaganda lists [domain_info: theguardian.com]. Page is a Guardian Australia news article with byline (Benita Kolovos and Henry Belot), date (Thu 12 Nov 2026), and photo credit (David Crosling/AAP); does not hide sourcing [W1]. Linked in P2, P3, P4 [P2, P3, P4]. |
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt v2, Sat 05:55 UTC, 3 model calls, 34.7 s · 75% of its references checked against the evidence. Evidence ids: P post, A account, I image, V video, W web page, S FactsLens signal.
1 minutes, peak 4 posts in one minute.
| Category | Signal | Value | Threshold | Fired | What it means here |
|---|---|---|---|---|---|
| coordination | copy_paste | 100% | ≥ 50% | yes | 100% of posts repeat near-identical text from another account. |
| coordination | synchrony | 100% | ≥ 50% | yes | 100% of the activity happened within a single minute. |
| coordination | repetition | 1.0 | ≥ 2.0 | no | Each account posted this 1.0 times on average. |
| coordination | cross_cluster | 100% | ≥ 50% | yes | 100% of the accounts also appear in at least two other flagged clusters (24 h). |
| account | removed_accounts | 0% | ≥ 20% | no | 0% of the accounts are no longer served by Bluesky (suspended or deleted). |
| account | new_accounts | 0% | ≥ 50% | no | 0% of the accounts were created in the last 30 days. |
| account | creation_burst | 50% | ≥ 40% | yes | 50% of the accounts were created within the same 72 hours. |
| account | low_reach | 0% | ≥ 60% | no | 0% of the accounts have fewer than 10 followers. |
| account | empty_profiles | 0% | ≥ 50% | no | 0% of the accounts have no profile picture or no bio. |
| account | template_bios | 0% | ≥ 30% | no | 0% of the accounts have a bio that near-duplicates another account's bio. |
| provenance | known_accounts | 0 | ≥ 1 | no | 0 account(s) are on IFTAS's public list of suspected Portal Kombat accounts. |
| provenance | listed_servers | 0% | ≥ 30% | no | 0% of the accounts are bridged from Mastodon servers on IFTAS's list. |
| provenance | known_domains | 0 | ≥ 1 | no | Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists. |
| provenance | pravda_sources | 0 | ≥ 1 | no | Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof). |
| disclosure | declared_automation | 0% | ≥ 50% | no | 0% of the accounts say in their profile that they are bots or automated feeds. |
Median account age: 872 days. Account names are hidden; reviewers can see them.
| Account | Age (days) | Followers | Follows | Posts here | Status |
|---|---|---|---|---|---|
| account 1 | 1223 | 2905 | 6382 | 1 | active |
| account 2 | 872 | 561 | 266 | 1 | active |
| account 3 | 729 | 425 | 606 | 1 | active |
| account 4 | 726 | 208 | 257 | 1 | active |
No human decision yet.
Reviewers can record a decision; decisions feed the public metrics.