Lead review
Suspicious score 65/100 · text cluster · 4 accounts · 4 posts
View in 3D: where it comes from and what it is linked to
First seen Sat 14 Nov 06:39 UTC, last Sat 14 Nov 06:39 UTC.
Coordinated activity by accounts with several signs of being inauthentic.
This is a lead for a human reviewer, not an accusation. Signals are measured; thresholds are starting values evaluated on the metrics page.
Account profiles fetched: 100%.
Nemotron investigation
Insufficient evidence confidence low · recommended: monitor
Four Bluesky accounts posted identical MARTA Route 1 cancellation alerts within one minute. The accounts are unofficial transit-alert relays pointing to atltransit.live. Coordination signals are present (100% copy-paste, 100% synchrony, 100% creation burst, 50% template bios), but the accounts have real histories, real followers, no propaganda links, and a clear legitimate purpose, so inauthenticity is not established.
Narrative: A public-transit service alert stating that MARTA Route 1 has multiple cancelled trips: northbound from West End Station at 9:05 AM, 10:45 AM, 12:25 PM, 2:05 PM, 3:45 PM, and southbound from Arts Center Station at 9:55 AM, 11:35 AM, 1:15 PM, 2:55 PM, 4:35 PM. All four accounts also promote atltransit.live as an unofficial MARTA relay (formerly marta.fail).
Strongest innocent explanation considered: Several unofficial MARTA alert accounts, each themed to a specific station or route, picked up the same service disruption from a common public source and posted it around the same time.
- 100% copy-paste text across all four posts [S:copy_paste = 100%]
- 100% of activity within a single minute [S:synchrony = 100%]
- 100% of accounts created within the same 72 hours [S:creation_burst = 100%]
- 50% of accounts have near-duplicate bios [S:template_bios = 50%]
- No accounts are new, suspended, empty-profile, low-reach, or on propaganda/suspected-coordination lists [S:new_accounts = 0%, S:removed_accounts = 0%, S:empty_profiles = 0%, S:low_reach = 0%, S:known_domains = 0, S:known_accounts = 0, S:cross_cluster = 0%]
- Accounts have substantial post histories (1,736 to 153,714 posts) and real followers [A1][A2][A3][A4]
- Coordination alone is not proof of inauthenticity
Sources
| Domain | Trust | Why |
|---|---|---|
| atltransit.live | unknown | Registered 2026-07-02 (134 days ago) via NameCheap, Inc. [domain_info][W1] Not on VIGINUM or CheckFirst propaganda lists [domain_info] Page states it is an independent service not affiliated with MARTA or any government agency, operated by Civic Forge Solutions LLC, aggregating publicly available transit alerts [W1] Page makes no guarantee of accuracy and advises users to verify with official transit sources [W1] Page does not appear to hide where its content comes from; it explicitly describes aggregating public alerts [W1] |
Evidence-backed claims
- All four posts contain identical Route 1 cancellation text P1P2P3P4
- All posts occurred within one minute (06:39 to 06:39 UTC) P1P2P3P4
- Accounts are themed to MARTA alerts: all-MARTA, Arts Center Station, West End Station, Route 1 A1A2A3A4
- All bios reference atltransit.live as unofficial MARTA relay A1A2A3A4
- Account ages are 714-716 days; post counts range from 1,736 to 153,714 A1A2A3A4
- atltransit.live registered 2026-07-02 via NameCheap, Inc.; not on propaganda lists W1
nvidia/nemotron-3.5-super-vl-120b-a12b, prompt v3, Sat 06:40 UTC, 3 model calls, 47.5 s · 100% of its references checked against the evidence. Evidence ids: P post, A account, I image, V video, W web page, Q news search, N news article, S detector signal.
Activity per minute
1 minutes, peak 4 posts in one minute.
Signals
| Category | Signal | Value | Threshold | Fired | What it means here |
|---|---|---|---|---|---|
| coordination | copy_paste | 100% | ≥ 50% | yes | 100% of posts repeat near-identical text from another account. |
| coordination | synchrony | 100% | ≥ 50% | yes | 100% of the activity happened within a single minute. |
| coordination | repetition | 1.0 | ≥ 2.0 | no | Each account posted this 1.0 times on average. |
| coordination | cross_cluster | 25% | ≥ 50% | no | 25% of the accounts also appear in at least two other flagged clusters (24 h). |
| account | removed_accounts | 0% | ≥ 20% | no | 0% of the accounts are no longer served by Bluesky (suspended or deleted). |
| account | new_accounts | 0% | ≥ 50% | no | 0% of the accounts were created in the last 30 days. |
| account | creation_burst | 100% | ≥ 40% | yes | 100% of the accounts were created within the same 72 hours. |
| account | low_reach | 0% | ≥ 60% | no | 0% of the accounts have fewer than 10 followers. |
| account | empty_profiles | 0% | ≥ 50% | no | 0% of the accounts have no profile picture or no bio. |
| account | template_bios | 50% | ≥ 30% | yes | 50% of the accounts have a bio that near-duplicates another account's bio. |
| provenance | known_accounts | 0 | ≥ 1 | no | 0 account(s) are on IFTAS's public list of suspected Portal Kombat accounts. |
| provenance | listed_servers | 0% | ≥ 30% | no | 0% of the accounts are bridged from Mastodon servers on IFTAS's list. |
| provenance | known_domains | 0 | ≥ 1 | no | Links to 0 domain(s) on VIGINUM/CheckFirst propaganda lists. |
| provenance | pravda_sources | 0 | ≥ 1 | no | Links to 0 Telegram channel(s) that Pravda sites republish (a lead, not proof). |
| disclosure | declared_automation | 0% | ≥ 50% | no | 0% of the accounts say in their profile that they are bots or automated feeds. |
Accounts (4)
Median account age: 715 days. Names are shown only for accounts on IFTAS's public list or already removed by Bluesky; the team sees all.
| Account | Age (days) | Followers | Follows | Posts here | Status |
|---|---|---|---|---|---|
| account 1 | 718 | 233 | 0 | 1 | active |
| account 2 | 715 | 13 | 0 | 1 | active |
| account 3 | 715 | 17 | 0 | 1 | active |
| account 4 | 715 | 12 | 0 | 1 | active |
Clusters sharing accounts with this one (24 h)
Human review
No human decision yet.
Anyone can review. Your decision is kept with the visitors' reviews, apart from our own figures. Decide with the bar at the bottom of the screen; it moves on to the next cluster nobody has reviewed.